From d08a5e1ba3bff20c6ccd07e7edb71525d6f2c609 Mon Sep 17 00:00:00 2001
From: Inex Code <inex.code@selfprivacy.org>
Date: Fri, 28 Mar 2025 17:09:01 +0300
Subject: [PATCH] fix: Mark 'idm_all_persons' as a known group for provisioning

---
 auth/kanidm.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/auth/kanidm.nix b/auth/kanidm.nix
index 13360d8..6903b07 100644
--- a/auth/kanidm.nix
+++ b/auth/kanidm.nix
@@ -683,7 +683,7 @@ in
         assertGroupsKnown =
           opt: groups:
           let
-            knownGroups = attrNames (filterPresent cfg.provision.groups);
+            knownGroups = attrNames (filterPresent cfg.provision.groups) ++ [ "idm_all_persons" ];
             unknownGroups = subtractLists knownGroups groups;
           in
           {