samba - Jun 2006 - using xfs acls

Hi,

we have a fileserver with xfs filesystems running samba 3.0.22. File
access should (and is) be possible via NFS and samba. I want the ability
to set acls in these filesystems via windows clients -- but I want samba
to map the SIDs to the existing unix uids of my users, not just an
arbitrary mapping. Is this possible?

My idea is using the "idmap backend" to our ldap-server using a
"handmade" mapping table. Would that be reasonable/possible?

I should mention that we synchronize the user accounts between unix and
windows (ADS). So every user account is unique.

Thanks a lot in advance and please eMail a copy to me, because I don't
read this group regularly.

-- 
Regards
Christoph
________________________________________________________________________
Christoph Litauer                  litauer@uni-koblenz.de
Uni Koblenz, Rechenzentrum,        http://www.uni-koblenz.de/~litauer
Postfach 201602, 56016 Koblenz     Fon: +49 261 287-1311, Fax: -100 1311
PGP-Fingerprint: F39C E314 2650 650D 8092 9514 3A56 FBD8 79E3 27B2

On Thu, Jun 29, 2006 at 10:20:46AM +0200, Christoph Litauer
wrote:
> Hi,
> 
> we have a fileserver with xfs filesystems running samba 3.0.22. File
> access should (and is) be possible via NFS and samba. I want the ability
> to set acls in these filesystems via windows clients -- but I want samba
> to map the SIDs to the existing unix uids of my users, not just an
> arbitrary mapping. Is this possible?
> 
> My idea is using the "idmap backend" to our ldap-server using a
> "handmade" mapping table. Would that be reasonable/possible?
> 
> I should mention that we synchronize the user accounts between unix and
> windows (ADS). So every user account is unique.
Do you also sync the uid/gid's between AD and the UNIX directory
service ? Are you using the schema in AD that stores the UNIX info ?

Jeremy.