From 978590a36cc7e4307e1186e73aa3e06e1981c035 Mon Sep 17 00:00:00 2001 From: Jason Tibbitts Date: Jul 25 2019 16:52:14 +0000 Subject: Add one note which was lost in the wiki conversion. --- diff --git a/guidelines/modules/ROOT/pages/UsersAndGroups.adoc b/guidelines/modules/ROOT/pages/UsersAndGroups.adoc index a059159..1d91161 100644 --- a/guidelines/modules/ROOT/pages/UsersAndGroups.adoc +++ b/guidelines/modules/ROOT/pages/UsersAndGroups.adoc @@ -56,6 +56,17 @@ Since setup is at the top of the dependency tree, it will be installed before any package which needs to use the UIDs and GIDs that are defined in it. +TIP: *Using LDAP to preallocate*: +Sites with LDAP or other network authentication systems +may want to use those for pre-allocating their system accounts sitewide. +Such sites should make sure their infrastructure is robust +and includes suitable local caching of the system accounts. +Without suitable local caching, +a computer that becomes disconnected from the network +may not be able to start essential services +because the computer is unable to resolve a username or groupname +to a proper UID or GID. + === Known caveat of the pre-allocation strategy The practice of using existing users and groups