samba - Sep 2013 - samba4 upgradeprovision

I have the latest samba4 4.2 git running on centos6.4 but when I originally
provisioned it I didn't include the --use-rfc2307 for AD posix attributes.
I'd like to map certain AD users to unix users so should I do a samba-tool
upgradeprovision --use-rfc2307 to add this option?

On Fri, 2013-09-13 at 16:28 -0700, Robert Watson wrote:
> I have the latest samba4 4.2 git running on centos6.4 but when I originally
> provisioned it I didn't include the --use-rfc2307 for AD posix
attributes.
> I'd like to map certain AD users to unix users so should I do a
samba-tool
> upgradeprovision --use-rfc2307 to add this option?
You only need to extend the schema if you want to use ADUC. If you're
happy managing rfc2307 from the centos DC, then you're ready to go. For
the git you have, you can use the new samba-tool user add which now has
the ability to add rfc2307 attributes.

samba-tool user add --help for the syntax details.
HTH
Steve

On Fri, 2013-09-13 at 16:28 -0700, Robert Watson wrote:
> I have the latest samba4 4.2 git running on centos6.4 but when I originally
> provisioned it I didn't include the --use-rfc2307 for AD posix
attributes.
> I'd like to map certain AD users to unix users so should I do a
samba-tool
> upgradeprovision --use-rfc2307 to add this option?
You can set the magic setting 'idmap_ldb:use rfc2307=yes' in the
smb.conf, what you won't get is the NIS server objects that allows ADUC
to display the uidNumber and gidNumber.

I've seen reference to a windows tool to turn on a NIS server, perhaps
it works remotly against Samba.  Otherwise, I asked a user on IRC to
consider plumbing in the code that adds these objects (a python
function) into a new 'samba-tool domain enablerfc2307' (or similar)
command.  I've not heard any progress yet however.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org