samba - Jun 2024 - use of ‘idmap_ldb:use rfc2307 = yes’ in DCs

In what scenario should I use idmap_ldb:use rfc2307 = yes ? For what purpose ?

I don?t see any use for it then.

LP
On Jun 11, 2024 at 16:56 +0100, samba at lists.samba.org <samba at
lists.samba.org>, wrote:
>
> You could actually, but then you must never set 'idmap_ldb:use rfc2307
> = yes' on any DC. It is mutually exclusive, you either don't give
> Domain Admins a gidnumber and use 'idmap_ldb:use rfc2307 = yes' on
DCs
> or you don't use 'idmap_ldb:use rfc2307 = yes' on DCs and give
Domain
> Admins' a gidNumber.

On Tue, 11 Jun 2024 17:02:58 +0100
Luis Peromarta via samba <samba at lists.samba.org> wrote:
> In what scenario should I use idmap_ldb:use rfc2307 = yes ? For what
> purpose ?
Good question. The only real use could be if you are adding rfc2307
attributes to AD AND using the DC as a fileserver (not recommended) AND
also running Unix domain members using the 'ad' idmap backend. Even
then, I am not convinced.
 
> 
> I don?t see any use for it then.
I am beginning to think the same.

Rowland