Users's primary group

Hi all,

I need to know what the "correct" way of doing things is.  And think
someone here might be able to answer this.

I have an ldap server running for user authentication.  Currently, the
user's primary group is not an object in ldap.  We need to set the flag 

nss_base_group         ou=Group,dc=example,dc=com?one

Or else our linux machines don't identify the users group.  

If we create the group and add the user as a member of the group, then
everything works well without nss_base_group.

My question is, which way is more "correct"?

Ryan



-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt