Re: strategy for getting groupOfNames (AD) and posixAccount (Unix) to coexist?