samba - Oct 2003 - Samba 3.0 - ldap backend and idmap?

Hello people,

Can somebody answer my question?

Is it so that using samba 3.0 with ldap backend requires idmap backend also?
Thus for mapping unix ID's to Smaba ID's?

My thanks in advance for an answer.

Eddie.

On Sat, 25 Oct 2003, Eddie Lania wrote:
> Hello people,
>
> Can somebody answer my question?
>
> Is it so that using samba 3.0 with ldap backend requires idmap backend
also?
> Thus for mapping unix ID's to Smaba ID's?
>
> My thanks in advance for an answer.
The passwd backend is a separate issue from the idmap backend. Of you will
never need more than just a PDC, then there is no compelling reason to
store idmap backend in an ldap database.

On the other hand, if you do need more than a single Samba PDC (ie: PDC
and one or more BDCs) and you need consistant UID/GIDs across the whole
network, then an idmap backend in ldap is a must.

- John T.
-- 
John H Terpstra
Email: jht@samba.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

John H Terpstra wrote:
> The passwd backend is a separate issue from the idmap backend. Of you will
> never need more than just a PDC, then there is no compelling reason to
> store idmap backend in an ldap database.
> 
> On the other hand, if you do need more than a single Samba PDC (ie: PDC
> and one or more BDCs) and you need consistant UID/GIDs across the whole
> network, then an idmap backend in ldap is a must.
Domain member server would need consistent SID<->uid mapping as well.
But remember that on a Samba PDC, winbindd is only useful mapping 
users/groups from trusted domains (not its own).



cheers, jerry
  ----------------------------------------------------------------------
  Hewlett-Packard            ------------------------- http://www.hp.com
  SAMBA Team                 ---------------------- http://www.samba.org
  GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
  "You can never go home again, Oatman, but I guess you can shop
there."
                             --John Cusack - "Grosse Point Blank"
(1997)

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/oqVfIR7qMdg1EfYRAvWuAJ9slzLLfRmq9UXdOQDl0Mv3rWihcwCgyjcx
xPZVZyErZcw0DWddCdyKFo8=0czf
-----END PGP SIGNATURE-----