canonical / canonical/authd

Feature: Possibility to use custom prefix for linux local groups

Open
#1,131 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
310
Forks
41
Avg merge
2d 4h
Merged PRs (30d)
58

Description

### Is there an existing request for this feature?

- [x] I have searched the existing issues and found none that matched mine

### Describe the feature

Being able to set the prefix instead of using "linux-" would allow it to follow the naming schemes of every organization, contributing to better organization in the environment. For example, instead of "Linux-sudo" we could have "Device Local Group - sudo", for example, or "Local Admin - Linux" although the latter would need to be done via a group mapping, either using the groupd id or name, against the local groups.

### Describe the ideal solution

Being able to set a custom prefix on the broker configuration file, something like:
localgroupprefix="Linux Groups-" ( default being "linux-"
Or, for advanced use cases, something like:
localgroupmapping=("Linux Admins Group",sudo),("Docker Users",docker)
Or instead of the name, use the GUID of the group on Entra/Google

### Alternatives and current workarounds

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by locating the broker configuration handling and the implementation that creates Linux local groups with the default "linux-" prefix. Compare the requested prefix and group-mapping alternatives, then clarify which configuration shape is in scope. Done should include configurable naming behavior and coverage for the chosen approach.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authorization
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.