samba - Dec 2003 - Question about groups in ldap

Hi

I have serveral questions about groups in ldap.

Is it possible to use different groups with the
same well known SID or is a well known SID only
allowed once?

Is it allowed to uses spaces in groupnames, e.g. "domain admins"?
Afaik groups with spaces are not posix conform.

In Samba-Developers-Guide.pdf included with samba 3.0 page 72f.
In the document well known groups have special names starting with
DOMAIN_. Can Windows clients recognize these names and translate them
into localized groupnames, like "user" or "power users" in
english and
"Benutzer" and "Hauptbenutzer" in german?

Tilo

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Tilo Lutz wrote:

| Is it possible to use different groups with the
| same well known SID or is a well known SID only
| allowed once?

Nope.  SIDs should appear only once.

| Is it allowed to uses spaces in groupnames, e.g.
| "domain admins"? Afaik groups with spaces are
| not posix conform.

They normally work.  Really is OS dependent (libc)
I think.

| In Samba-Developers-Guide.pdf included with samba 3.0
| page 72f. In the document well known groups have
| special names starting with DOMAIN_. Can Windows clients
| recognize these names and translate them into localized
| groupnames, like "user" or "power users" in english and
| "Benutzer" and "Hauptbenutzer" in german?

That reference in the PDF file is a #define for
the well known rids.  You can setup a group
mapping entry using whatever name you wish.




- --
cheers, jerry
~ ----------------------------------------------------------------------
~ Hewlett-Packard            ------------------------- http://www.hp.com
~ SAMBA Team                 ---------------------- http://www.samba.org
~ GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
~ "If we're adding to the noise, turn off this song" --Switchfoot
(2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/2dC+IR7qMdg1EfYRAk0PAJ0Vvy0I7paMeVrPg4NWjHoDKVJppgCfZ3cT
eKcW8xLX6l9VATea3hvufFI=3pqe
-----END PGP SIGNATURE-----

Am Fr, 2003-12-12 um 15.29 schrieb Gerald (Jerry)
Carter:
> Tilo Lutz wrote:
> | In Samba-Developers-Guide.pdf included with samba 3.0
> | page 72f. In the document well known groups have
> | special names starting with DOMAIN_. Can Windows clients
> | recognize these names and translate them into localized
> | groupnames, like "user" or "power users" in english
and
> | "Benutzer" and "Hauptbenutzer" in german?
> 
> That reference in the PDF file is a #define for
> the well known rids.  You can setup a group
> mapping entry using whatever name you wish.
How does MS handle this? If I have an english server with
the well known group "users" and a german client.
Will the groupname translated into "Benutzer"?

Tilo