eaccounts also within

This commit is contained in:
2024-09-23 11:35:14 +02:00
parent 45194cc02c
commit 4744b72f68
+11 -10
View File
@@ -52,16 +52,16 @@ The way this has been solved causes problems with group member lookups with eacc
Without eaccounts only normal users are found as part of the group (which is correct):
```
[root@lxdev04 ~]# getent group p21996
p21996:*:21996:dorigo_a,cirelli_c
[root@lxdev04 ~]# getent group SARESA
SARESA:*:35184:babic_a,ebner,kapeller,...,huppert_m,carulla_m,schoel_m
[root@lxdev04 ~]#
```
but with eaccounts enabled only the eaccount members are listed:
```
[root@lxdev01 ~]# getent group p21996
p21996:*:21996:e21996
[root@lxdev01 ~]#
[root@lxdev01 ~]# getent group SARESA
SARESA:*:35184:e21996,e21997,e21992,...,e17806,e17589,gac-alvra
[root@lxdev01 ~]#
```
If for a system this is a problem, and at the same time there is no need for ignoring `override_homedir`, you may enable the eaccounts with
@@ -71,11 +71,12 @@ aaa::enable_eaccounts: true
aaa::enable_eaccounts::ignore_override_homedir: false
```
then you get both type of members:
```
[root@lxdev07 ~]# getent group SARESA
SARESA:*:35184:e21996,...,e17589,ext-kapetanaki_s,...,ext-tyrala_k
[root@lxdev07 ~]#
```
There is a [open case](https://access.redhat.com/support/cases/#/case/03912615) at RedHat on how to deal best with this problem.