samba - Jul 2015 - Question about samba 4 member server of a pure Windows AD

Hi,

Actually, we have a samba 4 AD DC and 2 samba 4 AD member server as 
file-server.
But my company is member of a group who have i proper AD (A windows AD 
server)

I don't know if the windows AD has implemented rfc2307 and if the sysadmin 
of the windows AD can add rfc2307.

I just would like to know if there are alternative for have uid <> sid 
mapping without rfc2307.
LIke extract uid from windows SID (based on algorithm uid = uid*2 + 1000 
or something like this)

thank you for your help

        Stéphane Purnelle

On 31/07/15 20:43, Stéphane PURNELLE wrote:
> Hi,
>
> Actually, we have a samba 4 AD DC and 2 samba 4 AD member server as
> file-server.
> But my company is member of a group who have i proper AD (A windows AD
> server)
>
> I don't know if the windows AD has implemented rfc2307 and if the
sysadmin
> of the windows AD can add rfc2307.
>
> I just would like to know if there are alternative for have uid <>
sid
> mapping without rfc2307.
> LIke extract uid from windows SID (based on algorithm uid = uid*2 + 1000
> or something like this)
>
> thank you for your help
>
>          Stéphane Purnelle
Yes, it is called the 'rid' backend, see 'man idmap_rid'

Rowland

Hi,

I don't think that rid backend will work, because when we start samba 
(samab 2.2.8a) lower uid was 1000, but when we moved to samba 4, power uid 
was put to 10000.
That's mean new user and group use uidNUmber or groupNUmber > 10000.  But
we have old account and group with uid or gid < 10000


regards

        Stéphane Purnelle


"samba" <samba-bounces at lists.samba.org> a écrit sur
31/07/2015 22:42:23 :
> De : Rowland Penny <rowlandpenny241155 at gmail.com>
> A : samba at lists.samba.org, 
> Date : 31/07/2015 22:51
> Objet : Re: [Samba] Question about samba 4 member server of a pure 
Windows AD
> Envoyé par : "samba" <samba-bounces at lists.samba.org>
> 
> On 31/07/15 20:43, Stéphane PURNELLE wrote:
> > Hi,
> >
> > Actually, we have a samba 4 AD DC and 2 samba 4 AD member server as
> > file-server.
> > But my company is member of a group who have i proper AD (A windows AD
> > server)
> >
> > I don't know if the windows AD has implemented rfc2307 and if the 
sysadmin
> > of the windows AD can add rfc2307.
> >
> > I just would like to know if there are alternative for have uid
<> sid
> > mapping without rfc2307.
> > LIke extract uid from windows SID (based on algorithm uid = uid*2 + 
1000
> > or something like this)
> >
> > thank you for your help
> >
> >          Stéphane Purnelle
> 
> Yes, it is called the 'rid' backend, see 'man idmap_rid'
> 
> Rowland
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba