Mansour Al Akeel wrote:
Buchan Milne wrote:
> On Wednesday 26 November 2008 17:03:55 Mansour Al Akeel wrote:
>> Michael Ströder wrote:
>>> I'd recommend to use inetOrgPerson together with posixAccount for the
>>> users which need shell access.
>> Thank you Michael, but posixAccount doesn't require the password, which
>> makes it not suitable for authentication.
> But, inetOrgPerson (as it inherits from person) allows userPassword,
> so this is irrelevant.
True, but it's not required (MUST). the password is optional (MAY). I
will consider extending inetOrgPerson and make the password MUST.
You can do so but the question is whether this makes sense. During user
registration process you might create the user's entry but the user
account is still not activated with a password yet. Depending on your
processes setting userPassword to MUST can be an obstacle you have to
Your mileage may vary.