[Samba] Is it possible?

Anton Solovyev
Wed, 22 Oct 2003 17:05:06 -0000

Gerald (Jerry) Carter wrote:

> |> > Is it possible at all to use POSIX ACLs without mapping
> |> > Windows domain SIDs randomly into UNIX UIDs with winbindd?
> |>
> |>
> |> Yes.  But there have been a few post 3.0.0 fixes for this
> |> so you might want to test with the latest SAMBA_3_0 cvs code.
> |>
> |
> | Does this mean it is, in fact, broken in the release code?
>
> In some cases (security = ads and trusted AD domains).
>

I use Samba in security=domain mode and want NT domain SIDs mapped into
UNIX UIDs with matching user names. Winbindd does not help, since it
wants to assign random UIDs on its own.

Am I going to get this functionality after I switch into AD mode?

I am surprised it is such a gray area. You would think that pre-existing
UNIX accounts matching Windows accounts and mixed access to UNIX boxes
through Samba and interactive session is the most common configuration...

Thanks!