Am 2016-02-24 um 14:11 schrieb Rowland penny:> That seems to prove what Sketch said is true, you haven't got any > uidNumber or gidNumber attributes in AD. The 'rid' backend calculates > UIDs & GIDs from the user or group RID.So the "rid"-path is good to go? Do you still recommend the "few extra lines" from before with "rid" ?
On 24/02/16 13:15, Stefan G. Weichinger wrote:> Am 2016-02-24 um 14:11 schrieb Rowland penny: > >> That seems to prove what Sketch said is true, you haven't got any >> uidNumber or gidNumber attributes in AD. The 'rid' backend calculates >> UIDs & GIDs from the user or group RID. > So the "rid"-path is good to go? > Do you still recommend the "few extra lines" from before with "rid" ? > >If you are going to use the 'rid' backend, then I would suggest you still need the first three of the 'extra lines'. Rowland
I would say.. If you share for example share your homedir over multiple servers, use AD. If you dont share your homedir, RID is most easy. If you dont care about different UID/GID'S over multiple servers, use RID. If you need same uid/gid over different servers, use AD. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland penny > Verzonden: woensdag 24 februari 2016 14:24 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Samba 4.1.17-Debian as ADS member > > On 24/02/16 13:15, Stefan G. Weichinger wrote: > > Am 2016-02-24 um 14:11 schrieb Rowland penny: > > > >> That seems to prove what Sketch said is true, you haven't got any > >> uidNumber or gidNumber attributes in AD. The 'rid' backend calculates > >> UIDs & GIDs from the user or group RID. > > So the "rid"-path is good to go? > > Do you still recommend the "few extra lines" from before with "rid" ? > > > > > > If you are going to use the 'rid' backend, then I would suggest you > still need the first three of the 'extra lines'. > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
Am 2016-02-24 um 14:27 schrieb L.P.H. van Belle:> I would say.. > > If you share for example share your homedir over multiple servers, use AD. > If you dont share your homedir, RID is most easy. > > If you dont care about different UID/GID'S over multiple servers, use RID. > If you need same uid/gid over different servers, use AD.tending to RID then only this trusted domain topic then
I have same here, 2 domains, in transition to one. You dont need the domain trusts, if you make sure the username and password are the same in both domains. Its a bit more work to maintain the password, and i dont allow users to change there passwords for now. Sometimes you need tot autenticate like DOMAIN1\%username% Or SOMEOTHERDOMAIN\%username% And this is handled by my GPO settings. So i have drive mappings over multple domains and servers. And no domain trusts. And happy users, since they still login only once. I cant tell about domain trusts, because i dont use it. But this works for me. Greetz,> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Stefan G. > Weichinger > Verzonden: woensdag 24 februari 2016 14:35 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Samba 4.1.17-Debian as ADS member > > Am 2016-02-24 um 14:27 schrieb L.P.H. van Belle: > > I would say.. > > > > If you share for example share your homedir over multiple servers, use > AD. > > If you dont share your homedir, RID is most easy. > > > > If you dont care about different UID/GID'S over multiple servers, use > RID. > > If you need same uid/gid over different servers, use AD. > > tending to RID then > only this trusted domain topic then > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba