Question about system accounts in LDAP.

[Fred Clausen <fred.clausen@xinitsystems.com>]

Hi All,

I am in the process of deploying openldap for authentication. I am just
not sure what the best policy is for including system account like root,
daemon, lp, etc. in LDAP. Should they be there for consistency across
systems? Or will they just cause confusion by having the same system
account with multiple UIDs?

I am inclined to remove them and only source real users from LDAP (and
maybe some groups, like cvs and/or staff).

What would you guys suggest is the best practice?

Kind regards,

Fred.