samba - Sep 2008 - LDAP-Backend: How to store 'employeeNumber' in 'sambaGroupMapping'?

Hello,

this is a little bit off-topic, because it is rather LDAP related. I need to
store an additional string in every 'posixGroup/sambaGroupMapping'
object in the LDAP backend. (This string is used to hold an key to an external
database.)

For user accounts I can use the 'employeeNumber' attribute which is
provided by 'inetOrgPerson'. Any ideas what I could use for group
accounts accordingly? Of course it must not interfere with Samba and PAM. The
main problem is that 'posixGroup' is an structural class and thus all
extra classes must be auxiliary.

Thank you Matthias

Matthias,

If you don't already have a GUI for looking at the LDAP structure, I
suggest that you install one - then you will easily be able to browse
through the schema. Luma is the nicest LDAP GUI that I have been able to
find.

When I look at the sambaGroupMapping in the schema area in luma, I see
the 'allowed attributes' -
description
displayName
sambaSIDList

Maybe you can use one of the first 2 to store your link string.

Regards,
David Collins


On Fri, 2008-09-19 at 12:35 +0200, Matthias Nagel wrote:
> Hello,
> 
> this is a little bit off-topic, because it is rather LDAP related. I need
to store an additional string in every 'posixGroup/sambaGroupMapping'
object in the LDAP backend. (This string is used to hold an key to an external
database.)
> 
> For user accounts I can use the 'employeeNumber' attribute which is
provided by 'inetOrgPerson'. Any ideas what I could use for group
accounts accordingly? Of course it must not interfere with Samba and PAM. The
main problem is that 'posixGroup' is an structural class and thus all
extra classes must be auxiliary.
> 
> Thank you Matthias
>