Re: why posixAccount MUST contain 'cn'?

Andrew Findlay wrote:
> On Thu, Dec 18, 2014 at 11:43:03AM +1100, Luke Howard wrote:
> 
>> The only issue might be that some clients reject entries that are missing “cn”.
> 
> That would be an error in itself, as even mandatory attributes can be
> hidden by access control and the GECOS field is often empty in
> /etc/passwd entries so it is clearly not essential.

Yepp. That's the case with my paranoid setup where person's name must not be
disclosed to the attached systems. AFAICS the modern NSS clients can deal with
that.

Ciao, Michael.

_______________________________________________
Ldapext mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/ldapext