On Fri, Oct 16, 2015 at 11:09:34AM +0200, Peter Palfrader wrote: > Therefore I propose to: > - create, for each user in the Debian LDAP, a group named like the > user. > - Make the primary group for each user their corresponding group. > - Make their former primary group (Debian, guest) a supplementary > group. > > This would require adapting all scripts that currently rely on the gid > field to tell if somebody is a DD. They would have to change their > filter/condition from e.g. gidNumber=800 to supplementaryGid=Debian. > (Note that supplementaryGid is a multi-value field.) > > Comments/suggestions/concerns?
As far as I'm concerned, go for it. I do check gidNumber on nm.debian.org in a couple of places, and I'll happily fix it. Enrico -- GPG key: 4096R/E7AD5568 2009-05-08 Enrico Zini <enr...@enricozini.org>