objectclass posixAccount
        requires
                cn,
                uid,
                uidNumber,
                gidNumber,
                homeDirectory
        allows
                userPassword,
                loginShell,
                gecos,
                description

objectclass shadowAccount
        requires
                uid
        allows
                userPassword,
                shadowLastChange,
                shadowMin,
                shadowMax,
                shadowWarning,
                shadowInactive,
                shadowExpire,
                shadowFlag,
                description

objectclass posixGroup
        requires
                cn,
                gidNumber
        allows
                userPassword,
                memberUid,
                description