Re: [SLUG] Best practise for ldap authentication

[Jamie Wilkinson <jaq@xxxxxxxxxxxxxx>]

This one time, at band camp, Alexander Samad wrote:
>but mail isn't part of account nor posixAccount nor top, it is part of
>inetorgperson - which is of no help to me cause i do libnss/libpam
>filtering based on attr host which is only part of account.

If you want mail and posixAccount and host, then I recomment constructing
out of the following objectclasses:

top
posixAccount
shadowAccount
person
organizationalPerson
inetOrgPerson
hostObject

I found the account objectClass conflicts with so many others in the shipped
schemas it's not worth using.