[389-users] PosixGroup and groupOfUniqueNames

[Rob Crittenden]

Prashanth Sundaram wrote:
> I followed HowTo:Posix on 389-ds documentation and added shadowAccount 
> and posixAccount object class to all my users.
> 
> *Is shadowAccount ObjectClass really required?* I vaguely remember it is 
> required for password policy to work, but any other usage other than 
> that? I can get it to work fine without adding it.
> 
> TY

The nss_ldap of some OS's (Solaris for one) use shadowAccount so I guess 
using that provides the most general general. It is possible to add 
mapping to make things work in nss_ldap without having shadowAccount in 
user entries (and want your users to work on Solaris).

rob