Hey,
when udm users/user create
is called without specifying the primary group, the tool looks up the default primary group from a “default settings” object in the LDAP directory.
You should verify that the policy exist, that its primary group setting is not empty and that the group mentioned therein actually exists:
- Log in to the Univention Management Console
- Navigate to “Domain” → “LDAP directory”
- In the tree click on the “univention” node
- In the list on the right there should be an entry called
default
. Click on it. - On the “Primary Groups” tab verify the “Default Primary Group” setting.
For our benefit, please post the output of the following command which lists the content of said object:
univention-ldapsearch -LLL -o ldif-wrap=no -b cn=default,cn=univention,$(ucr get ldap/base)
Thanks.
Kind regards,
mosu