Red Hat Bugzilla – Bug 1149124
group-add doesn't accept gid parameter
Last modified: 2015-03-05 05:14:05 EST
Description of problem: I would like to specify --external parameter in group-add command: $ ipa group-add hadoop --desc=x2 --gid=1001 --external and I've got this error: ipa: ERROR: 'gid' is required but I've specified gid. Version-Release number of selected component (if applicable): device-mapper-multipath-0.4.9-72.el6_5.4.x86_64 device-mapper-multipath-libs-0.4.9-72.el6_5.4.x86_64 ipa-admintools-3.0.0-37.el6.x86_64 ipa-client-3.0.0-37.el6.x86_64 ipa-pki-ca-theme-9.0.3-7.el6.noarch ipa-pki-common-theme-9.0.3-7.el6.noarch ipa-python-3.0.0-37.el6.x86_64 ipa-server-3.0.0-37.el6.x86_64 ipa-server-selinux-3.0.0-37.el6.x86_64 libipa_hbac-1.9.2-129.el6_5.4.x86_64 libipa_hbac-python-1.9.2-129.el6_5.4.x86_64 python-iniparse-0.3.1-2.1.el6.noarch How reproducible: 100% Expected results: Command ipa group-add will work with all allowed combinations of parameters. Additional info: If I don't use --external it works.
While I agree the error message is confusing, you cannot mix external groups (group for AD users) and POSIX groups (with GID). # ipa group-add hadoop --desc=x2 --gid=1001 -------------------- Added group "hadoop" -------------------- Group name: hadoop Description: x2 GID: 1001 # ipa group-add hadoop2 --desc=x2 --external --------------------- Added group "hadoop2" --------------------- Group name: hadoop2 Description: x2
I agree that error message is confusing. Please change it.
Will do - I will clone an upstream ticket.
Upstream ticket: https://fedorahosted.org/freeipa/ticket/4611
Fixed upstream master: https://fedorahosted.org/freeipa/changeset/b032debd233c70541e52d3ee677cb82f9840b291 ipa-4-1: https://fedorahosted.org/freeipa/changeset/cef8e06f8adc116936238264abf5883a0e49ec0a
Verified on ipa-server-4.1.0-13.el7.x86_64: [root@hp-dl380pgen8-01 ~]# ipa group-add test --gid=1001 --external ipa: ERROR: gid cannot be set for external group
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2015-0442.html