<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">Okay, I will try that. Thank you so much!
<span>😊</span></p>
<p style="margin-top:0;margin-bottom:0"><span><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><span>Best Regards,</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="font-size: 12pt;">Jan Parttimaa </span><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<div id="Signature">
<div id="divtagdefaultwrapper" dir="ltr" style="color: rgb(0, 0, 0); font-family: Calibri, Arial, Helvetica, sans-serif, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols; font-size: 12pt; background-color: rgb(255, 255, 255);">
<p><span style="color:rgb(0,0,0)"><i><span style="font-family:Calibri,Arial,Helvetica,sans-serif">Jan Parttimaa</span></i></span></p>
<span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><span style="color:rgb(0,0,0)"><i></i></span><span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span>
<p><span style="color:rgb(0,0,0)"><i><span style="font-family:Calibri,Arial,Helvetica,sans-serif">1602738,</span></i></span></p>
<span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><span style="color:rgb(0,0,0)"><i></i></span><span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span>
<p><span style="color:rgb(0,0,0)"><i><span style="font-family:Calibri,Arial,Helvetica,sans-serif">Tietojenkäsittelyn koulutusohjelma,</span></i></span></p>
<span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><span style="color:rgb(0,0,0)"><i></i></span><span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span>
<p><span style="color:rgb(0,0,0)"><i><span style="font-family:Calibri,Arial,Helvetica,sans-serif">Haaga-Helia ammattikorkeakoulu</span><span style="font-family:Calibri,Arial,Helvetica,sans-serif"></span><span style="font-family:Calibri,Arial,Helvetica,sans-serif">,
Pasilan kampus</span></i></span></p>
</div>
</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>Lähettäjä:</b> midPoint <midpoint-bounces@lists.evolveum.com> käyttäjän Oleksandr Nekriach <o.nekriach@dynatech.lv> puolesta<br>
<b>Lähetetty:</b> maanantai 26. marraskuuta 2018 11.07.01<br>
<b>Vastaanottaja:</b> midPoint General Discussion<br>
<b>Aihe:</b> Re: [midPoint] IdM, OpenLDAP, Linux and error "groups: cannot find name for group ID 1105"</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div>Hi,</div>
<div><font size="2">The user should also have </font><span lang="EN-US" style="font-size:12pt; color:black"><font size="2">gidNumber attribute in OpenLDAP with the same id (usually ) as his uid. In your case
<span lang="EN-US" style="color:black">1105</span></font></span></div>
<div><span lang="EN-US" style="font-size:12pt; color:black"><font size="2"><span lang="EN-US" style="color:black"><br>
</span></font></span></div>
<div><span lang="EN-US" style="font-size:12pt; color:black"><font size="2"><span lang="EN-US" style="color:black">Best regards, Oleksandr<br>
</span></font></span></div>
</div>
<br>
<div class="x_gmail_quote">
<div dir="ltr">On Sun, 25 Nov 2018 at 11:53, Parttimaa Jan <<a href="mailto:jan.parttimaa@myy.haaga-helia.fi">jan.parttimaa@myy.haaga-helia.fi</a>> wrote:<br>
</div>
<blockquote class="x_gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div lang="FI">
<div class="x_m_-6773999847099579565WordSection1">
<p><span lang="EN-US" style="font-size:12.0pt; color:black">Hi,<u></u><u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">We use MidPoint 3.8 -IdM which is connected to OpenLDAP-server. We use OpenLDAP -server so we can manage Ubuntu users (sudo and non-sudo users).<u></u><u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">We connect OpenLDAP to Idm using
</span><span style="font-size:12.0pt; color:black"><a href="https://wiki.evolveum.com/display/midPoint/LDAP+PosixAccount+and+PosixGroup+Management" target="_blank"><span lang="EN-US">this example on the wiki</span></a></span><span lang="EN-US" style="font-size:12.0pt; color:black">.
Configuration and LDAP tree is done using the same example.<u></u><u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">On IdM, we did this following group so we can make non-sudo users: <u></u><u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<div style="border:solid windowtext 1.0pt; padding:1.0pt 4.0pt 1.0pt 4.0pt">
<p style="border:none; padding:0cm"><u><span lang="EN-US" style="font-size:12.0pt; color:black">Basic</span></u><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Name : basic_users<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Display Name: Basic Users<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Description: Basic Users from OpenLDAP to Ubuntu.<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Subtype: basic_users<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Identifier: basic_users<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">gidNumber: 1102<u></u><u></u></span></p>
</div>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<div style="border:solid windowtext 1.0pt; padding:1.0pt 4.0pt 1.0pt 4.0pt">
<p style="border:none; padding:0cm"><u><span lang="EN-US" style="font-size:12.0pt; color:black">Assigments<u></u><u></u></span></u></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">LDAP Unix Group Metarole<u></u><u></u></span></p>
</div>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">Our test user is following:<u></u><u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<div style="border:solid windowtext 1.0pt; padding:1.0pt 4.0pt 1.0pt 4.0pt">
<p style="border:none; padding:0cm"><u><span lang="EN-US" style="font-size:12.0pt; color:black">Basic</span></u><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Name: John Smith<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Description: Basic user<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Subtype: johnsmith<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Full name: John Smith<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Given name: John<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Family Name: Smith<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Additional Name: johnsmith<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">UnixUID number: 1105<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Administrative status: Enabled<u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Password: <password is set><u></u><u></u></span></p>
</div>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<div style="border:solid windowtext 1.0pt; padding:1.0pt 4.0pt 1.0pt 4.0pt">
<p style="border:none; padding:0cm"><u><span lang="EN-US" style="font-size:12.0pt; color:black">Assigments</span></u><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u><u></u></span></p>
<p style="border:none; padding:0cm"><span lang="EN-US" style="font-size:12.0pt; color:black">Name: Basic Users<u></u><u></u></span></p>
</div>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">After when test user is logged to Ubuntu via GUI, terminal will show this every time if that will be open:<u></u><u></u></span></p>
<div style="border:solid windowtext 1.0pt; padding:1.0pt 4.0pt 1.0pt 4.0pt">
<p style="border:none; padding:0cm"><b><span lang="EN-US" style="font-size:12.0pt; color:red">"groups: cannot find name for group ID 1105"</span></b><span lang="EN-US" style="font-size:12.0pt; color:red"><u></u><u></u></span></p>
</div>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">"groups johnsmith" -command will show this:<u></u><u></u></span></p>
<div style="border:solid windowtext 1.0pt; padding:1.0pt 4.0pt 1.0pt 4.0pt">
<p style="border:none; padding:0cm"><b><span lang="EN-US" style="font-size:12.0pt; color:red">johnsmith: groups: cannot find name for group ID 1105</span></b><span lang="EN-US" style="font-size:12.0pt; color:red"><u></u><u></u></span></p>
<p style="border:none; padding:0cm"><b><span lang="EN-US" style="font-size:12.0pt; color:red">1105 basic_users<u></u><u></u></span></b></p>
</div>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">There is no problem if we login via CLI.<u></u><u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">Has anyone had the same problem? What should I do? <u></u><u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">Best Regards,<u></u><u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black">Jan Parttimaa<u></u><u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<p><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u> <u></u></span></p>
<div id="x_m_-6773999847099579565Signature">
<div id="x_m_-6773999847099579565divtagdefaultwrapper">
<p style="background:white"><i><span lang="EN-US" style="font-size:12.0pt; color:black">Jan Parttimaa</span></i><span lang="EN-US" style="font-size:12.0pt; color:black"><u></u><u></u></span></p>
<p style="background:white"><i><span style="font-size:12.0pt; color:black">1602738,</span></i><span style="font-size:12.0pt; color:black"><u></u><u></u></span></p>
<p style="background:white"><i><span style="font-size:12.0pt; color:black">Tietojenkäsittelyn koulutusohjelma,</span></i><span style="font-size:12.0pt; color:black"><u></u><u></u></span></p>
<p style="background:white"><i><span style="font-size:12.0pt; color:black">Haaga-Helia ammattikorkeakoulu, Pasilan kampus</span></i><span style="font-size:12.0pt; color:black"><u></u><u></u></span></p>
</div>
</div>
</div>
</div>
_______________________________________________<br>
midPoint mailing list<br>
<a href="mailto:midPoint@lists.evolveum.com" target="_blank">midPoint@lists.evolveum.com</a><br>
<a href="http://lists.evolveum.com/mailman/listinfo/midpoint" rel="noreferrer" target="_blank">http://lists.evolveum.com/mailman/listinfo/midpoint</a><br>
</blockquote>
</div>
<br clear="all">
<br>
-- <br>
<div dir="ltr" class="x_gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr"><span style="color:rgb(76,76,76)">Best regards, <br>
<br>
<img data-outlook-trace="F:1|T:1" src="cid:o.nekriach@dynatech.lv1520941785292-7770">
<br>
<br>
Oleksandr Nekriach | Identity and access management engineer <br>
<br>
Dynatech, <a href="https://www.google.com/maps/place/DYNATECH/@56.9575205,24.1107235,17z/data=!3m1!4b1!4m5!3m4!1s0x46eecf5753e42351:0x23b120b9745cae62!8m2!3d56.9575205!4d24.1129122" target="_blank">
Jeruzalemes iela 1, Rīga, LV-1010, Latvia</a><br>
<br>
<div style="display:inline-block"><a href="tel:+371%2025%20314%20685" value="+37125314685" target="_blank">+37125314685</a></div>
,
<div style="display:inline-block"><a href="mailto:o.nekriach@dynatech.lv" target="_blank">o.nekriach@dynatech.lv</a></div>
|
<div style="display:inline-block"><a href="http://www.dynatech.lv" target="_blank">www.dynatech.lv</a></div>
<br>
<br>
Stay connected: <br>
<div style="display:inline-block; margin:5px 5px 0px 0px"><a href="https://www.facebook.com/DynatechLatvia/?ref=br_rs" target="_blank"><img data-outlook-trace="F:1|T:1" src="cid:o.nekriach@dynatech.lv1520941785292-7771"></a></div>
<div style="display:inline-block; margin:5px 0px 0px"><a href="https://www.linkedin.com/company-beta/17893047/" target="_blank"><img data-outlook-trace="F:1|T:1" src="cid:o.nekriach@dynatech.lv1520941785292-7772"></a></div>
<br>
<br>
<span style="font-size:11px; color:rgb(161,161,161)">Confidentiality Notice: This message contains confidential information and is intended only for the named recipient(s). If you are not the addressee you may not copy, distribute or perform any other activities
with this information. If you have received this transmission in error, please notify us by e-mail immediately. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late
or incomplete, or contain viruses.</span></span></div>
</div>
</div>
</div>
</div>
</body>
</html>