Bug 1149124

Summary:	group-add doesn't accept gid parameter
Product:	Red Hat Enterprise Linux 7	Reporter:	Martin Kudlej <mkudlej>
Component:	ipa	Assignee:	IPA Maintainers <ipa-maint>
Status:	CLOSED ERRATA	QA Contact:	Namita Soman <nsoman>
Severity:	unspecified	Docs Contact:
Priority:	medium
Version:	7.0	CC:	jcholast, mkosek, rcritten, xdong
Target Milestone:	pre-dev-freeze
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ipa-4.1.0-6.el7	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-03-05 10:14:05 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Martin Kudlej 2014-10-03 09:42:01 UTC

Description of problem:
I would like to specify --external parameter in group-add command:
$ ipa group-add hadoop --desc=x2 --gid=1001 --external
and I've got this error:
ipa: ERROR: 'gid' is required

but I've specified gid.

Version-Release number of selected component (if applicable):
device-mapper-multipath-0.4.9-72.el6_5.4.x86_64
device-mapper-multipath-libs-0.4.9-72.el6_5.4.x86_64
ipa-admintools-3.0.0-37.el6.x86_64
ipa-client-3.0.0-37.el6.x86_64
ipa-pki-ca-theme-9.0.3-7.el6.noarch
ipa-pki-common-theme-9.0.3-7.el6.noarch
ipa-python-3.0.0-37.el6.x86_64
ipa-server-3.0.0-37.el6.x86_64
ipa-server-selinux-3.0.0-37.el6.x86_64
libipa_hbac-1.9.2-129.el6_5.4.x86_64
libipa_hbac-python-1.9.2-129.el6_5.4.x86_64
python-iniparse-0.3.1-2.1.el6.noarch

How reproducible:
100%



Expected results:
Command ipa group-add will work with all allowed combinations of parameters.

Additional info:
If I don't use --external it works.

Comment 2 Martin Kosek 2014-10-03 13:26:25 UTC

While I agree the error message is confusing, you cannot mix external groups (group for AD users) and POSIX groups (with GID).

# ipa group-add hadoop --desc=x2 --gid=1001
--------------------
Added group "hadoop"
--------------------
  Group name: hadoop
  Description: x2
  GID: 1001

# ipa group-add hadoop2 --desc=x2 --external
---------------------
Added group "hadoop2"
---------------------
  Group name: hadoop2
  Description: x2

Comment 3 Martin Kudlej 2014-10-03 13:30:26 UTC

I agree that error message is confusing. Please change it.

Comment 4 Martin Kosek 2014-10-03 14:15:44 UTC

Will do - I will clone an upstream ticket.

Comment 5 Martin Kosek 2014-10-03 14:16:20 UTC

Upstream ticket:
https://fedorahosted.org/freeipa/ticket/4611

Comment 7 Jan Cholasta 2014-11-13 13:08:43 UTC

Fixed upstream
master:
https://fedorahosted.org/freeipa/changeset/b032debd233c70541e52d3ee677cb82f9840b291
ipa-4-1:
https://fedorahosted.org/freeipa/changeset/cef8e06f8adc116936238264abf5883a0e49ec0a

Comment 9 Xiyang Dong 2015-01-08 19:50:47 UTC

Verified on ipa-server-4.1.0-13.el7.x86_64:

[root@hp-dl380pgen8-01 ~]# ipa group-add test --gid=1001 --external
ipa: ERROR: gid cannot be set for external group

Comment 11 errata-xmlrpc 2015-03-05 10:14:05 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-0442.html