Re: [ldapext] why posixAccount MUST contain 'cn'?

Michael asked,  "Also what's the distinction of 'cn' and 'gecos' in
'posixAccount'?  It seems most NSS LDAP clients use attribute 'cn' as
gecos field today."

CN stands for Common Name.  GECOS stands for General Electric
Comprehensive Operating Supervisor.

The GECOS field in POSIX was created to hold non-unix attributes
required by the GE COS operating system, because Denis Ritchie and Ken
Thompson could not afford a printer, and had to print through a GCOS
system, which required user attributes Unix does not use.  Those
attributes were stuffed into the GECOS field.

Today the GECOS field is subfielded, holding multiple data items,
which might include the common name associated with the user of a
POSIX account, as well as things like office location, extension, and
home phone.  Tools like finger, chfn and adduser expect subfields
within the GECOS field, separated by commas.

I have never seen an LDAP implementation where GECOS and CN were
synonymous.  But the world's a big place, I guess!  When we create or
modify a user account, we maintain the same data in the appropriate
GECOS subfields as we do in attributes like l and homeTelephoneNumber.
This gives us broad compatibility across OSes and tools.

Sorry about the late answer...

--Charlie

On Sun, Dec 14, 2014 at 11:10 AM, Michael Ströder <michael@stroeder.com> wrote:
> HI!
>
> Is there any strong reason why auxiliary object class 'posixAccount' has
> defined 'cn' as being a mandatory attribute?
>
> I'd be in favour of relaxing this to MAY cn in RFC2307bis.
>
> Also what's the distinction of 'cn' and 'gecos' in 'posixAccount'. It seems
> most NSS LDAP clients use attribute 'cn' as gecos field today.
>
> Ciao, Michael.
>
>
> _______________________________________________
> Ldapext mailing list
> Ldapext@ietf.org
> https://www.ietf.org/mailman/listinfo/ldapext
>