samba - Feb 2015 - idmap_ad and UID vs UIDnumber

I note from the man pages, that idmap_ad will only map users/groups IF you
set the UIDnumber in the active directory.  In lookin in my active
directory, there is a "Unix Attributes" tab with "UID" in
that tab that you
can set.  There is also and "Attributes Editor" tap where you can look
at
all attributes and edit the "UIDnumber"

I just want to verify that you need to set the "UIDnumber" in the
Attribute
Tab???  I'm doing some trouble shooting and want to eliminate problems.

Thanks!

Greg

-- 
Greg J. Zartman
Board Member

Koozali SME Server
www.koozali.org

SME Server user, contributor, and community member since 2000

On 24/02/15 08:52, Greg Zartman wrote:
> I note from the man pages, that idmap_ad will only map users/groups IF you
> set the UIDnumber in the active directory.  In lookin in my active
> directory, there is a "Unix Attributes" tab with "UID"
in that tab that you
> can set.  There is also and "Attributes Editor" tap where you can
look at
> all attributes and edit the "UIDnumber"
>
> I just want to verify that you need to set the "UIDnumber" in the
Attribute
> Tab???  I'm doing some trouble shooting and want to eliminate problems.
>
> Thanks!
>
> Greg
>
Hi Greg, the correct attribute is 'uidNumber', but microsoft being 
microsoft, they call it several different things and indeed 'UID' on the
ADUC Unix Attributes tab does refer to 'uidNumber'.

Not sure about the 'UIDnumber' because I don't seem to have the tab
you
refer to, but it probably is referring to 'uidNumber', microsoft has 
just capitalized the first three letters.

Just watch out for the 'uid' attribute, this should contain the users 
logon name i.e. what is in 'sAMAccountName'

Rowland