Question in regard of samba-ldap requirements.

["Tarjei Huse" <tarjei@nu.no>]

Hi, I'm trying to make a group that exists both as a samba group and unix
group, and I am trying to find out what attributes are needed and get an
understanding of how groups work in the ldap context.

My guess is that the following attributes are neede for a posix user:
dn:
userPassword:
loginShell: /bin/sh
gidNumber: 12
uidNumber: 76
shadowMax: 99999
objectClass: account
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
uid:
gecos:
shadowLastChange:
cn:
homeDirectory:
shadowWarning:

As I have understood it, the "shadow" attributes are not needed, except for
shadowpasswd functionality (most system has this).

A posix group needs the following:
dn:
gidNumber:
userPassword:
objectClass: posixGroup
objectClass: top
cn:
memberUid:

A note on adding users to a group. HOW should this be done?
like this, using the memberuid attribute:
memberuid: tarjei, tone, harald
where the ones after the : is the uid of the users
or like this:
memberuid: tarjei
memberuid: tone
memberuid: harald

or with full DN's:
memberuid: uid=tarjei,ou=people,o=nu,c=no
???

I'd be happy for any input on this issue.

Tarjei