fedora-infrastructure

#12935 Remove users from distgit and IPA groups
Closed: Migrated to Fedora Forge by ryanlerch. Opened by lenkaseg.

Closed: Migrated to Fedora Forge
Reopen Issue

Describe what you would like us to do:

The toddler cleaning_packager_groups checks for users who are not packagers anymore and removes them from distgit and IPA groups. However, the toddler cannot remove users, who are groups creators. The group creator probably needs to be set to a different user, releng perhaps? This needs to be done manually.

The following users could not be removed automatically because they are group creators:

dotnet-sig: rhea
modularity-wg: karsten
openstack-sig: hguemar
sssd-maintainers: mzidek

Please remove these users manually or transfer group ownership.

When do you need this to be done by? (YYYY/MM/DD)

no hurry

Metadata Update from @zlopez:
- Issue priority set to: Waiting on Assignee (was: Needs Review)
- Issue tagged with: low-gain, low-trouble, ops

So, to clarify here, these need to be removed on src.fedoraproject.org as 'group creator' ?

I am not sure how to do that. I guess direct in the db?
I assume some user must be set as creator? or can we just unset it?

I do not see them in ipa at all.

Yes, the users have to be removed from group creator on src.fedoraproject.org. When this happens, the toddler will finish the purging of the user from the groups.
I would assume there has to be some group creator for the group as well.
With @abompard we were thinking whether we could use releng user or some other admin or maintenance user for that?
The toddler can and does remove the users from the IPA side, so this only affects the src side.
Edited by lenkaseg

I guess releng would work... or could we use 'nobody' ? That user has their emails go to /dev/null

I suppose nobody would work as well.

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/infra/tickets/issues/12935

Please continue any further discussion there.

Metadata Update from @ryanlerch:
- Issue close_status updated to: Migrated to Fedora Forge
- Issue status updated to: Closed (was: Open)
Metadata
None

low-gain low-trouble ops

None
None
Normal
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.