I have an LDAP environment for the authentication of users in my Ubuntu 14.04 LTS-based network (all clients and servers are Ubuntu 14.04 based systems). My problem is that a specific user actually needs to be added to the
plugdev group for access to specific hardware that is plugged in via USB.
However, because my environment is LDAP-based auth, I cannot do the usual commands (e.g., this way).
My LDAP DB, however, is configured to add groups only starting 1000 (of which 1000--1003 are already used up).
plugdev however is GID 46.
There are two ways by which I can fix this; I am looking for your input to decide which way is "safer."
(a) Change the GID value of the
plugdev on the client system (e.g., in
/etc/group by manually editing the file) where I expect to use the specific USB HW device, OR
(b) Change LDAP config to accept lower GIDs (in
/etc/phpldapadmin/config.php in the LDAP server), and then create a group
plugdev in LDAP, and set its GID to 46. Then, I have to add
plugdev LDAP group to my LDAP profile.