freeipa

#9795 Give warning when adding group with GID out of any ID range
Opened by dhanina. Modified

Open
Close Issue

Request for enhancement

Similar to https://pagure.io/freeipa/issue/9781

Issue

  • Group with GID out of any ID range will not be generated with a correct ipantsecurityidentifier attribute

We should at least warn the user.
Providing such check can be beneficial for AD users. In the future, we will probably also check GID without AD trust, however that part of the backend is missing at the moment.

Steps to Reproduce

  1. Add Group with GID out of ID range

Actual behavior

Creates new group with no complaints.

Expected behavior

Create new group, but complain about missing sid

Metadata Update from @dhanina:
- Custom field rhbz adjusted to https://issues.redhat.com/browse/RHEL-90802
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.