Philip Colmer wrote:
This was an area where I also got stuck when researching this last year. My conclusions were:
- UNIX needs group membership to be UIDs and not DNs, so attempts to use a
class that defines members with DNs are likely to fail.
Nonsense. nss_ldap, nss-pam-ldapd, and nssov all support RFC2307bis.