[ale] LDAP and System Users/Groups

[brian at polibyte.com (brian at polibyte.com)]

Hi,

I'm curious how people administering services on linux in environments
where user accounts are stored in ldap handle users and groups for
software. For example, let's say you use install apache through your
distributions package manager. Do you create an apache user in your ldap
directory beforehand, or do you let the package create a local apache user?
Or, for a more complicated example, you're installing the oracle database
through oracle's installer. It requires an account, oracle, that the
software will run as. It also requires a dba group, that the oracle account
will belong to but that human users will also belong to. Would you create
both the user and group in ldap, only one of them, or neither? Why?

All the best,
Brian Pitts