Re: Question about system accounts in LDAP.
On Tue, 2003-08-12 at 01:50, Fred Clausen wrote:
> Hi All,
>
> I am in the process of deploying openldap for authentication. I am just
> not sure what the best policy is for including system account like root,
> daemon, lp, etc. in LDAP. Should they be there for consistency across
> systems? Or will they just cause confusion by having the same system
> account with multiple UIDs?
>
> I am inclined to remove them and only source real users from LDAP (and
> maybe some groups, like cvs and/or staff).
>
> What would you guys suggest is the best practice?
In general its inadvisable to have system users in LDAP; when LDAP
breaks you can't even log in at the console as root.
The default LDAP migration script in the debian migrationtools does not
migrate all users below UID 1000 and groups below GID 100.
--
Donovan Baarda <abo@minkirri.apana.org.au>
http://minkirri.apana.org.au/~abo/
Reply to: