nss: Add some comments.

[matthijs/servers/drsnuggles.git] / etc / libnss-ldap.conf

diff --git a/etc/libnss-ldap.conf b/etc/libnss-ldap.conf
index 7154a4d28da9648c6db8b6be24ac9e849615d8c0..32b8645997edd7c3170292ec6cb6398614ae1278 100644 (file)
--- a/etc/libnss-ldap.conf
+++ b/etc/libnss-ldap.conf
@@ -12,7 +12,10 @@ uri ldap://ldap.drsnuggles.stderr.nl
 # The LDAP version to use
 ldap_version 3
 
-# Use uniqueMember
+# Use the uniqueMember property, referring to dn's instead of the memberUid
+# property referring to usernames. This allows us to have group members with or
+# without an account, and give a group member an account without having to
+# change all his memberships.
 nss_schema rfc2307bis
 
 # Use our custom posixGroup replacement