Between account system groups (bearing the same GID number
than the UID they pertain to) and bastion groups, there
might be collisions on bastions with a very high amount
of both accounts and groups.
This is only of importance if you're using fixed UIDs
to create accounts, and can't let the system pick the
UIDs itself (for example because these UIDs are referenced
in some other system of your company).
This fix applies a GID shifting to all the bastion groups
to ensure they can never take a GID that would pertain to
a later-to-be-created account with a fixed GID.
This shift amount is configurable in bastion.conf as
``accountGidMin``, 500000 by default.
Use the updated bin/admin/fix-group-gid.sh script to shift any
preexisting group GID that would be out of the new groupGidMin range.
Stephane Lesimple