groupOf [Unique] Names - which to use?

["Graeme Joyce" <openldap-list@jade.co.nz>]

I remember reading somewhere that groupOfUniqueNames is a Netscape defined
objectClass. I see the standard OpenLdap schema only includes groupOfNames.

What is the problem that required the groupOfUniqueNames objectClass to be
defined?

In what situations should a group have objectClass=groupOfUniqueNames rather
than groupOfNames (or both..)?

We're starting to define groups for access control so I'd like to get this
right.

Thanks
Graeme Joyce
gjoyce@jade.co.nz