Hi, Domain Admins RID is -512, not -513. Fix the documentation text.
-- / Alexander Bokovoy
>From 152c2f7aae533594599bd86f5779978cf656e600 Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy <aboko...@redhat.com> Date: Wed, 10 Oct 2012 10:04:25 +0300 Subject: [PATCH 5/5] Fix wrong RID for Domain Admins in the examples of trust commands --- ipalib/plugins/trust.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ipalib/plugins/trust.py b/ipalib/plugins/trust.py index 793ad90c0f90dfc4bc3fbaa3d9184b301a44aa0f..845f96e1fdd09d1e85f6f900d3f1c241445b9c6b 100644 --- a/ipalib/plugins/trust.py +++ b/ipalib/plugins/trust.py @@ -88,9 +88,9 @@ Example: ipa group-add --desc='<ad.domain> admins' ad_admins 3. Add security identifier of Domain Admins of the <ad.domain> to the ad_admins_external - group (security identifier of <ad.domain SID>-513 is Domain Admins group): + group (security identifier of <ad.domain SID>-512 is Domain Admins group): - ipa group-add-member ad_admins_external --external ${domainsid}-513 + ipa group-add-member ad_admins_external --external ${domainsid}-512 4. Allow members of ad_admins_external group to be associated with ad_admins POSIX group: -- 1.7.12
_______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel