[Freeipa-users] Please help: Any way to turn off IPA creation of private user group?

[Rob Crittenden]

David Copperfield wrote:
> Hi folks,
>
> Are there any way to turn off IPA automatic creation of private user
> group? We use a common user group like ‘nis-wheel’, and completely
> disabled private groups in openldap before migration.

If you disable private groups then the primary group of users is going 
to be the default IPA users group. This group will need to be POSIX. If 
it isn't you can promote it with:

$ ipa group-mod --posix ipausers

To disable private groups run:

$ ipa-managed-entries disable -e 'UPG Definition'

rob