4.6. Modifying group object classes in the IdM CLI

• top
• groupofnames
• nestedgroup
• ipausergroup
• ipaobject

Prerequisites

• You have enabled the brace expansion feature:

  # set -o braceexpand

• You are logged in as the IdM administrator.

Procedure

• Use the ipa config-mod command to modify the current schema. For example, to add ipasshuser and employee group object classes to the future user entries:

  [bjensen@server ~]$ ipa config-mod --groupobjectclasses={top,groupofnames,nestedgroup,ipausergroup,ipaobject,ipasshuser,employeegroup}

  The command adds all the default group object classes as well as the two new ones, ipasshuser and employeegroup.

  重要

  If any group object classes required by IdM are not included, then subsequent attempts to add a group entry will fail with object class violations.

  注意

  Instead of the comma-separated list inside curly braces with no spaces allowed that is used in the example above, you can use the --groupobjectclasses argument repeatedly.