Fedora directory users - Dec 2009 - RE: [389-users] PosixGroup and groupOfUniqueNames

I followed HowTo:Posix on 389-ds documentation and added shadowAccount and
posixAccount object class to all my users.

Is shadowAccount ObjectClass really required? I vaguely remember it is
required for password policy to work, but any other usage other than that? I
can get it to work fine without adding it.

TY

Prashanth Sundaram wrote:
> I followed HowTo:Posix on 389-ds documentation and added shadowAccount 
> and posixAccount object class to all my users.
> 
> *Is shadowAccount ObjectClass really required?* I vaguely remember it is 
> required for password policy to work, but any other usage other than 
> that? I can get it to work fine without adding it.
> 
> TY
The nss_ldap of some OS''s (Solaris for one) use shadowAccount so I
guess
using that provides the most general general. It is possible to add 
mapping to make things work in nss_ldap without having shadowAccount in 
user entries (and want your users to work on Solaris).

rob