Daniel R. Meigs wrote:> Thanks for your reply. The problem was having the computers in ou=Computers. > I put them in ou=People and the problem was solved. > > --Dan >Daniel: I deleted the following options from the smb.conf #ldap user suffix = ou=People #ldap machine suffix = ou=Computers But I left the options set in my smbldap.conf. usersdn="ou=Users,dc=mydc,dc=com" computersdn="ou=Computers,dc=mydc,dc=com" I set my nss_ldap as such: nss_base_passwd dc=mydc,dc=com?sub nss_base_shadow dc=mydc,dc=com?sub --- The end result is some extra sub queries - which is ok for me. I also get the benefit of having the logical separation between the Users and Computers. I really like that. I am still limited by uid names, and I can think of a few other unsavory situations. However, I do like it that way and it works very nicely. I am glad you got yours going. thanks, Joshua -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 256 bytes Desc: OpenPGP digital signature Url : http://lists.samba.org/archive/samba/attachments/20040824/e4673937/signature.bin
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Joshua Schmidlkofer wrote: | usersdn="ou=Users,dc=mydc,dc=com" | computersdn="ou=Computers,dc=mydc,dc=com" | | I set my nss_ldap as such: | | nss_base_passwd dc=mydc,dc=com?sub According to Luke Howard, nss_ldap 204 or later (i may be slightly off on the version) will support nss_base_passwd ou=users,dc=mydc,dc=com?sub nss_base_passwd ou=computers,dc=mydc,dc=com?sub rather than haveing to search from the parent. I haven't had a chance to verify this yet though. cheers, jerry - --------------------------------------------------------------------- Alleviating the pain of Windows(tm) ------- http://www.samba.org GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBLfs+IR7qMdg1EfYRAjNjAKDaqCPnHT9GCgNOfvQvm3hflRLLjgCeIckB 8kowi8BSsHD00YOEyGYhBLo=jNbX -----END PGP SIGNATURE-----