[Fedora-directory-users] People vs. Domain Users

[David Hollis]

On Fri, 2006-03-31 at 11:22 -0800, Mont Rothstein wrote:
> I've been working with the Samba Howto
> (http://directory.fedora.redhat.com/wiki/Howto:Samba).
> 
> In it the ldap user suffix is set to "ou=People". 
> 
> Later, it walks through the creation of Samba Domain Groups, including
> Domain Users.
> 
> I am confused by these two.  When do user accounts go in ou=People and
> when do they go in cn=Domain Users?

cn=Domain Users is a Group.  Users are added as members of the Group.
ou=People is an Organizational Unit.  It is just that - for
organization.  Just because a user is under an OU, doesn't necessarily
mean that they have any additional rights (though you might tie some
type of security to the user account being under a specific OU).  Think
about it like this, if your org has an office in NYC and another office
in LA, you might have a separate phone list for each office.  The people
in NYC generally don't care about the people in the LA office.

-- 
David Hollis <dhollis at davehollis.com>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20060331/cbce561c/attachment.sig>