----- Missatge original -----
We are planning out how we are going to move from Active Directory
to
389-ds. We can add users to our test environment successfully, and
give the accounts the proper information (uid, shell, etc.). However,
1 area that we are getting stumped at is groups. In our Active
Directory currently, we have several groups that we put our users into
based on their function.
Those groups have unique group IDs. However, when I make a group on
389-ds, I don't have any way of specifying a group ID. I can make a
new user and give it a group ID by default, but that group ID doesn't
exist anywhere and I can't find where to assign it or create it. Any
ideas on this?
you need to use objectClass: posixGroup in your group template. in theory posixGroup and
groupOfNames are structural object classes and cannot be combined, but in practice
there's a variation of the RFC that allows to use posixGroup as auxiliar.
http://osdir.com/ml/ldap.umich/2006-07/msg00015.html
regards,
abosch