rocksclusters / base

Base roll for Rocks Clusters
http://www.rocksclusters.org/
25 stars 10 forks source link

ROCKS7: Don't sync service accounts with 411 and/or add to google-otp group #25

Closed tcooper closed 6 years ago

tcooper commented 6 years ago

RHEL and CentOS 7 increase the UID_MIN value from 500 to 1000. Without this change service accounts in the range 500 < UID|GID < 1000 are synced from the frontend to the compute nodes, possibly breaking services on compute nodes. Additionally, service accounts in this range are added to the google-otp group by rocks sync users.