Re: using memberof to authenticate Linux with PAM

I guess I failed to express myself properly.

I do know memberOf is not a requirement: regular exporting data from /etc/passwd, /etc/shadow and /etc/group as LDIF files are working as expected.

But wouldn't it be a better option to use it instead of handling data in multiple places (users and groups) instead of just the groups entries in the tree?

At least this is my understanding regarding the usefulness of memberOf. Not sure either if that would become a performance issue.

Em 20/08/2022 19:02, Howard Chu escreveu:

You don't need memberOf to maintain /etc/group info in LDAP.