Re: why posixAccount MUST contain 'cn'?

Hallvard Breien Furuseth <[email protected]> Mon, 15 Dec 2014 01:17:28 +0100

Newsgroups	gmane.ietf.ldapext
Message-ID	<[email protected]>

On 14/12/14 17:10, Michael Ströder wrote:
> (...)
> Also what's the distinction of 'cn' and 'gecos' in 'posixAccount'. It seems
> most NSS LDAP clients use attribute 'cn' as gecos field today.

cn is UTF-8.  The gecos attribute is IA5 String - i.e. ASCII.
One of many ways rfc2307 does not fit the real world too well.
memberUid is another IA5 too, both it and uid are case-insensitive
even though rfc2307 is for case-sensitive Unix, etc.