Hello:

I have a series of LDAP records, which folks use to log in (via ssh) to
a UNIX system.  An example record:

# tuser, employee, CSinternal, cleversafe.com
dn: cn=tuser,ou=employee,ou=internal,dc=hostname,dc=com
cn: tuser
sn: Test User
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
uid: tuser
uidNumber: 1034
gidNumber: 1034
homeDirectory: /home/tuser
mail: [EMAIL PROTECTED]

All well and good.  Only unfortunate element is that we're currently
using /etc/group to specify a user's group, viz:

[EMAIL PROTECTED]:~$ grep 'tuser' /etc/group
tuser:x:1034:

How do LDAP power users recommend that I abstract group specifications
into LDAP, such that I don't have to mess with /etc/group?  I imagine
I'm not the only person looking to do this, though I've had trouble
finding references online.

Any help would be tremendously appreciated.  Thanks so much.

Regards,
John Quigley
https://chicagolug.org/~jquigley/

---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the 
SUBJECT of the message.

Reply via email to