Christian Naumer
2021-Mar-23 20:43 UTC
[Samba] Understanding ID mapping between a campus AD and a local LDAP
Am 23.03.21 um 18:50 schrieb Jonathon A Anderson via samba:> # idmap config AD : backend = nss > # idmap config AD : range = 1000-20000000The idmap nss should actually do what you want to do. Are your ldap users known to the system? does "id username" produce an output you would expect from your LDAP server? The the idmap_nss backend should map users (from LDAP) with the same name to the user from AD. I had this running a long time ago but I cant find my notes on this. Regards Christian -- Dr. Christian Naumer Vice President Unit Head Bioprocess Development B.R.A.I.N Aktiengesellschaft Darmstaedter Str. 34-36, D-64673 Zwingenberg e-mail cn at brain-biotech.com, homepage www.brain-biotech.com phone +49-6251-9331-30 / fax +49-6251-9331-11 Sitz der Gesellschaft: Zwingenberg/Bergstrasse Registergericht AG Darmstadt, HRB 24758 Vorstand: Adriaan Moelker (Vorstandsvorsitzender), Lukas Linnig Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen
Jonathon A Anderson
2021-Mar-23 21:02 UTC
[Samba] Understanding ID mapping between a campus AD and a local LDAP
This is encouraging! I'm going to try again with winbind use default domain = no and see if it works. If it doesn't I'll send some shell logs and Samba logs. ~jonathon ________________________________________ From: samba <samba-bounces at lists.samba.org> on behalf of Christian Naumer via samba <samba at lists.samba.org> Sent: Tuesday, March 23, 2021 2:43 PM To: samba at lists.samba.org Subject: Re: [Samba] Understanding ID mapping between a campus AD and a local LDAP Am 23.03.21 um 18:50 schrieb Jonathon A Anderson via samba:> # idmap config AD : backend = nss > # idmap config AD : range = 1000-20000000The idmap nss should actually do what you want to do. Are your ldap users known to the system? does "id username" produce an output you would expect from your LDAP server? The the idmap_nss backend should map users (from LDAP) with the same name to the user from AD. I had this running a long time ago but I cant find my notes on this. Regards Christian -- Dr. Christian Naumer Vice President Unit Head Bioprocess Development B.R.A.I.N Aktiengesellschaft Darmstaedter Str. 34-36, D-64673 Zwingenberg e-mail cn at brain-biotech.com, homepage www.brain-biotech.com phone +49-6251-9331-30 / fax +49-6251-9331-11 Sitz der Gesellschaft: Zwingenberg/Bergstrasse Registergericht AG Darmstadt, HRB 24758 Vorstand: Adriaan Moelker (Vorstandsvorsitzender), Lukas Linnig Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba