On Fri, 2006-03-31 at 11:22 -0800, Mont Rothstein wrote: > I've been working with the Samba Howto > (http://directory.fedora.redhat.com/wiki/Howto:Samba). > > In it the ldap user suffix is set to "ou=People". > > Later, it walks through the creation of Samba Domain Groups, including > Domain Users. > > I am confused by these two. When do user accounts go in ou=People and > when do they go in cn=Domain Users? cn=Domain Users is a Group. Users are added as members of the Group. ou=People is an Organizational Unit. It is just that - for organization. Just because a user is under an OU, doesn't necessarily mean that they have any additional rights (though you might tie some type of security to the user account being under a specific OU). Think about it like this, if your org has an office in NYC and another office in LA, you might have a separate phone list for each office. The people in NYC generally don't care about the people in the LA office. -- David Hollis <dhollis at davehollis.com> -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 191 bytes Desc: This is a digitally signed message part Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20060331/cbce561c/attachment.bin