On Sun, Mar 23, 2003 at 12:36:27AM +1100, Andrew Bartlett wrote: > > We should create the right magic in IDMAP to make sure that we always > keep this stuff in one record. (ie, the record with the user/group). > > If not, then create the right ldap magic to cope with our own structural > objectClass. > > I hope that this makes some things clearer.
This is a nice design Andrew, thanks. Jeremy.