> Looks like I somehow did both, which surely is contra-productive. I > better remove the unix attributes for Administrator... >If I do this (rely on the user map file containing "!root = BPN\Administrator BPN\administrator"), should I expect "id Administrator" to give anything? Ole
On 07/12/15 19:17, Ole Traupe wrote:> >> Looks like I somehow did both, which surely is contra-productive. I >> better remove the unix attributes for Administrator... >> > > If I do this (rely on the user map file containing "!root = > BPN\Administrator BPN\administrator"), should I expect "id > Administrator" to give anything? > > Ole >Only a Samba AD DC, you will not get anything from 'getent Administrator' on a Unix domain member, but remember, with the user map 'Administrator' becomes 'root' :-) Rowland
>> If I do this (rely on the user map file containing "!root = >> BPN\Administrator BPN\administrator"), should I expect "id >> Administrator" to give anything? >> >> Ole >> > > Only a Samba AD DC, you will not get anything from 'getent > Administrator' on a Unix domain member, but remember, with the user > map 'Administrator' becomes 'root' :-)Yes, and I can manage share permissions via ADUC due to the user mapping. But on the DCs I still get "No such user" (although I don't have any appearent problem). Ole