Tom
2004-Sep-15 19:07 UTC
[Samba] Retrieving UNIX UID/GID directly through Active Directory
Hi, there's a bug on bugzilla.samba.org that I'd like to comment on but it's not letting me. It's bug #242, titled "Retrieving UNIX UID/GID directly through Active Directory from schema extension" The person who posted the request talks about using AD4Unix, but I've installed Microsoft's Services for Unix and it made similar schema changes. Specifically, it added uid, gid, shell, and home directory objects, plus a nice new tab called UNIX Attributes to the user properties window of the Active Directory Users and Computers MMC. So for instance, something like this should be an option in smb.conf: winbind uid = msSFU30UidNumber winbind gid = msSFU30GidNumber (this would denote the users Primary group name) winbind shell = msSFU30LoginShell winbind home = msSFU30HomeDirectory The people who use AD4Unix could change these variables to whatever it creates. Anyway, it seems like a much more simple way to get the uid's and gid's to be the same across multiple machines than anything I've seen so far. This seems like a huge win to include. thanks, -tom
Gerald (Jerry) Carter
2004-Oct-12 15:18 UTC
[Samba] Retrieving UNIX UID/GID directly through Active Directory
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tom wrote: | Hi, there's a bug on bugzilla.samba.org that I'd like to comment on but it's | not letting me. | | It's bug #242, titled "Retrieving UNIX UID/GID directly through Active | Directory from schema extension" | | The person who posted the request talks about using AD4Unix, but I've | installed Microsoft's Services for Unix and it made similar schema changes. | Specifically, it added uid, gid, shell, and home directory objects, plus a | nice new tab called UNIX Attributes to the user properties window of the | Active Directory Users and Computers MMC. | | So for instance, something like this should be an option in smb.conf: | winbind uid = msSFU30UidNumber | winbind gid = msSFU30GidNumber (this would denote the users Primary group | name) | winbind shell = msSFU30LoginShell | winbind home = msSFU30HomeDirectory | | The people who use AD4Unix could change these variables to whatever it | creates. | | Anyway, it seems like a much more simple way to get the uid's and gid's to | be the same across multiple machines than anything I've seen so far. | This seems like a huge win to include. or just use nss_ldap with schema mapping enabled and tell winbindd not to allocate any uids/gids. cheer,s jerry - --------------------------------------------------------------------- Alleviating the pain of Windows(tm) ------- http://www.samba.org GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc "If we're adding to the noise, turn off this song"--Switchfoot (2003) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFBa/WTIR7qMdg1EfYRAu0sAKCj71ZeEeh1I/NZvA2dd/zvOrfa6wCdEt4O AfDUQzMC0TMhtpqCvg2DBlc=0R42 -----END PGP SIGNATURE-----