samba - Oct 2017 - Samba 4.6.7 AD, Netapp CDOT 9.2 and missing "Domain Users" membership

On 10/23/2017 09:29 AM, Rowland Penny via samba wrote:
> All that using '--use-rfc2307' does is allow the use of rfc2307
> attributes such as 'uidNumber' and 'gidNumber', it does not
> populate any of the rfc2307 attributes.
> 
> DCs works slightly different from Unix domain members, they use
> 'xidNumber' attributes in idmap.ldb, these attributes are only used
on
> the DC and nowhere else. These 'xidNumber' attributes can be
> overridden by using rfc2307 attributes 
Thanks.
Even if is now clear that RFC2307 is not related to my problem, this is
a very useful clarification!

Giuseppe

On Mon, 23 Oct 2017 10:04:21 +0200
Giuseppe Ravasio <giuseppe_ravasio at ch.modiano.com> wrote:
> On 10/23/2017 09:29 AM, Rowland Penny via samba wrote:
> > All that using '--use-rfc2307' does is allow the use of
rfc2307
> > attributes such as 'uidNumber' and 'gidNumber', it
does not
> > populate any of the rfc2307 attributes.
> > 
> > DCs works slightly different from Unix domain members, they use
> > 'xidNumber' attributes in idmap.ldb, these attributes are only
used
> > on the DC and nowhere else. These 'xidNumber' attributes can
be
> > overridden by using rfc2307 attributes 
> 
> Thanks.
> Even if is now clear that RFC2307 is not related to my problem, this
> is a very useful clarification!
> 
> Giuseppe
> 
OK, have you tried asking the Netapp company, 'how do I use this with
Active Directory' ?
Do not mention Samba, it will only confuse them ;-)

Rowland

On 10/23/2017 10:26 AM, Rowland Penny via samba wrote:
> OK, have you tried asking the Netapp company, 'how do I use this with
> Active Directory' ?
In this specific case no, but I already tried to open CIFS support cases
but at the end they tell me that It works as expected with a MS DC and
that Samba DC is not supported by them.
I cannot omit that I use Samba because they always want to know the DC
version in order to eventually setup a test environment.

PS: My storage vendor confirmed that It works as expected with a MS DC,
and I don't doubt of that considering that we are talking about Netapp
and that CIFS is one of their best features.

Thanks
Giuseppe