Sadly, there's already a 'ceph' fas user with their own 'ceph' group. ;(

Is there another name we could use for the group?

Thanks, I will coordinate with Vasu to get access to the "ceph" FAS user account.

Can we still have a group named "ceph"? https://accounts.fedoraproject.org/group/ceph/ shows a 404 error for me.

I guess there is some marking of if a group is a 'fas' group or not...

@abompard would it be ok to mark the ceph group 'fas' ?

IPA does not allow me to change the user group because it is a managed entry:

# ipa group-mod ceph --fasgroup --desc "Ceph contributors"
ipa: ERROR: Server is unwilling to perform: Modifying a mapped attribute  in a managed entry is not allowed. The "description" attribute is mapped for this entry.

I looked at the doc about managed user groups but they don't specify how to convert a user's private group to a regular group.

@cheimes : do you know if there is a recommended way to do it? Or should I just delete the mepManagedBy attribute?

I asked on IRC, the right command is group-detach.

The group should be OK now:

# ipa group-detach ceph 
--------------------------------------
Detached group "ceph" from user "ceph"
--------------------------------------
# ipa group-mod ceph --fasgroup --desc "Ceph contributors"
---------------------
Modified group "ceph"
---------------------
  Group name: ceph
  Description: Ceph contributors
  GID: 1494204671

So, that should be all done then?

Please re-open if there's anything further for us to do...

Thanks Kevin. One last change: I see the "ceph" group has no sponsors and no members. Can you set me as a sponsor there?

Thanks Kevin. One last change: I see the "ceph" group has no sponsors and no members. Can you set me as a sponsor there?

You have now been added to the group and made sponsor, feel free to reach out if you need anything more.