<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE>Message</TITLE>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2>It
depends on if you intend to use one of these options in
/etc/ldap.conf</FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2>1)
pam_member_attribute uniquemember</FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2>or</FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2>2)
pam_member_attribute memberuid<BR></FONT></SPAN><SPAN
class=747110904-30032006><FONT><BR></FONT></SPAN><SPAN
class=747110904-30032006><FONT face=Arial color=#0000ff size=2>Pls note that the
default FDS install would create ou=Groups and some sample group entries if you
choose to create samples, whereas the sample PADL or RH client's /etc/ldap.conf
would usually use ou=group (or ou=Group) instead of
ou=Groups.</FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2>nss_base_group
ou=Group,dc=padl,dc=com?one</FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2>If
your choice is 1), you could point to group lookup to ou=Groups and use
objectclass groupofuniquenames</FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2>If
your choice is 2), you could point to group lookup to ou=Group and
use objectclass posixgroup</FONT></SPAN></DIV></FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2>I
usually won't use ou=Groups and will manually create an additional OU (New
OU in Admin GUI) called ou=group after the default install, and when populating
the DIT with group entries I will add objectclass: posixgroup in ldif
file, and with user entries I will add objectclass: posixaccount and
objectclass: shadowaccount.</FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2>If I
use Admin GUI to create an user entry, I will have to manually "Enable Posix
User Attributes", so that I could enter uidNumber and gidNumber and so on,
I also add additional objectclass: shadowaccount by clicking the
Advanced Properties and insert new objectclass, if not LDAP Auth won't
work.</FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2>You
may find a HOW-TO I wrote for Solaris Native LDAP Client
useful.</FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff size=2><A
href="http://web.singnet.com.sg/~garyttt/Configuring%20Solaris%20Native%20LDAP%20Client%20for%20Fedora%20Directory%20Server.htm">http://web.singnet.com.sg/~garyttt/Configuring%20Solaris%20Native%20LDAP%20Client%20for%20Fedora%20Directory%20Server.htm</A></FONT></SPAN></DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=747110904-30032006><FONT face=Arial color=#0000ff
size=2>Gary</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B>
fedora-directory-users-bounces@redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] <B>On Behalf Of </B>Michael
Christian<BR><B>Sent:</B> Thursday, March 30, 2006 7:49 AM<BR><B>To:</B>
Fedora-directory-users@redhat.com<BR><B>Subject:</B> [Fedora-directory-users]
Getting Started, POSIX accounts<BR><BR></FONT></DIV>
<DIV>Hi guys. I've installed FDS and the setup is killing me.
Essentially all I want to use it for is Posix accounts and groups and I'm
having trouble with groups. </DIV>
<DIV> </DIV>
<DIV>Getting user accounts is no problem, the attributes are aleady there, but
posix groups are from scratch?</DIV>
<DIV> </DIV>
<DIV>If someone could point me in the right direction, or send me a link I
would appreciate it. I've combed through the RHDS documentation and
not been able to find what I was looking for.<BR clear=all><BR>--
<BR>Michael </DIV></BLOCKQUOTE></BODY></HTML>