search for: otheradminus

...ber). I'm using the 'ad' backend. > ~ The only only windows group that needs a gidNumber attribute is Domain Users to map this across to the member server. This depends all on you need. My domain admins.. : getent group "domain admins" domain admins:x:10001:administrator,otherADMINuser getent group "domain users" domain users:x:10000:..(removed) getent group "domain guests" domain guests:x:10002:guest > ~ Other standard domain groups shouldn't be mapped across, especially Domain Admins(!) due to e.g. sysvol ownership This not a problem, if configu...

<snip> Hi Rowland - I've spent the past few days going over the wiki and mailing lists. I think I've got the hang of idmaps. May I clarify a couple of things: ~ I have two DC's and one large fileserver (member). I'm using the 'ad' backend. ~ The only only windows group that needs a gidNumber attribute is Domain Users to map this across to the member server. ~ Other