[Samba] Linux integration with AD

Doug VanLeuven
Tue, 17 May 2005 23:44:50 -0000

Nir B wrote:

>Hi All,
>I extended my AD schema (SFU 3.5) and migrated the users and groups from my
>NIS domain.
>
>The groups migrated from the NIS have the same GID like on the NIS.
>I added linux machines to my AD domain using windbind, and define on the
>smb.conf  "idmap gid = 10000-20000".
>
>I logged in using my AD user account, and when I'm doing "id",
I see that
>all the AD groups GID start at 10000.
>
>How can I define that groups GID will be exactly like on my AD? (The
>"msSFU30GidNumber" attribute)
>
>
I use padl xad_oss_plugins subcomponent idmap_ad to lookup the uid/gid
from the SFU schema extension.  Use it as a backend.
idmap backend = ad:ldap://dc.mydomain.com
I copied it to source/modules and patched Makefile.in to recompile and
install it for the various svn's.

Regards, Doug