--On Monday, June 6, 2022 8:29 AM -0700 Quanah Gibson-Mount quanah@fast-mail.org wrote:
--On Monday, June 6, 2022 5:19 PM +0200 Michael Ströder michael@stroeder.com wrote:
But on the other hand there's e.g. the POSIX standard defining POSIX "names" to be case-sensitive which is relevant when using posixGroup definition from RFC2307bis.
posix groups are not LDAP groups, nor should posix groups be represented using memberof.
posixGroup uses "memberUID" and "gidNumber" attributes. Neither of these are LDAP DN based. posixgroup has zero place in any discussion of the memberOf, which is for representing membership information of DN based LDAP groups.
Note, that's with RFC2307 definitions. While RFC2307bis does allow the use of DNs for group representations, if you require case sensitivity then case sensitive attributes must be used if one wants them preserved.
--Quanah