Re: [389-users] posixGroup

Michael Ströder
2009-05-21T15:20:18Z

Dmitry Amirov wrote:
> I wish to comfortably add groups, users, to operate mail records
> (qmailUser). Or i need to use other clients with 389 DS such as gq?

gq is not maintained anymore and is buggy. It is also just a very
generic LDAP client without any knowledge about the semantics of e.g.
POSIX-related directory entries.

There are various clients which claim to have good support for POSIX
account data. I have some doubts including maintaining the POSIX account
data with my own web2ldap if you don''t have enough knowledge.

A decent LDAP client should support some auto-magic (e.g. based on a UID
pool entry) for concurrently assigning uidNumber to posixAccount entries
and gidNumber for posixGroup entries. You could do that manually with
almost all clients and let the LDAP server enforce uniqueness after
adding/modifying the entry though.

Additionally you might want to have some side-effects like generating
home directories etc. IIRC GOSA can do this.

Your mileage may vary.

Ciao, Michael.