OpenLDAP: Is a duplicate uidNumber permitted?

Question

I am new to OpenLDAP. I am creating some users (posixAccount ObjectClass) and I set two of them to use the same uidNumber.

There was no complaint from OpenLDAP. Is that normal? I would have expected each needs to be unique.

A closely related question: Can I assign any random number to the uidNumber attribute?

Answer 1

Yes, you can assign any integer to uidNumber. You can even assign an integer which might be outside the range of uid_t on the systems that use it. That's up to you to manage.

There is no uniqueness checking by default. If you want this, look at the slapo-unique(5) overlay.