Return
-
Title
Overriding GID of Virtual Primary Groups -
Description
When using the virtual-primary-groups, for some users a GID that is different from the UID is needed. Can this be accomplished with QAS?
-
Resolution
If the virtual primary groups featured is desired, but GIDs that are different from the accounts UID are also needed then the setting "virtual-primary-groups-set-gid" can be used.
This setting defaults to true, but if it is set to false than virtual groups will be created for each user using the GID from the gidNumber attribute instead of the uidNumber.When this setting is set to false, the gidNumber must be set for every user, even if the same value set in the uidNumber is desired.
The gidNumber can be set for users in a user-override file instead of being set in AD. -
Additional Information
virtual-primary-groups-set-gid =Default value: true By default, when virtual-primary-groups is enabled, the user’s GID is set to their UID. If that is not desired then set this option to false. This could be used when most users need the VPG, but a few require a specific GID. The virtual group is still created. The other users should have their GID set to their UID in AD or through override. The following example shows how to retain user’s original or over written gid. [nss_vas] virtual-primary-groups-set-gid = false