Red Hat Bugzilla – Bug 860683
group-mod should not be allowed to rename or modify admins account
Last modified: 2013-05-16 16:54:05 EDT
This bug is created as a clone of upstream ticket:
`group-mod` should not allow potentially dangerous actions like `--rename` or maybe also `--external` changes made to the `admins` group.
Otherwise, admin users may get a restricted access to DIT as our ACIs requires `admins` group to have a fixed name (and DN).
# ipa group-mod --rename=Administrators admins
ipa: ERROR: group admins cannot be deleted/modified: Cannot be renamed
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.