search for: per2

...ate Windows Active Directory accounts. The problem is our UNIX accounts do not match our corporate AD accounts in either name or underlying UID. For just plain Linux login I solved this issue using OpenLDAP with SASL PassThru so I can set my 'raines' user password in LDAP to be "{SASL}per2" where per2 is my corporate account. This does not help though with SAMBA. I was hoping there was a way to use samba idmap/winbind such that when someone logins into samba on one of my Linux boxes configures to use our corporate AD realm with say the 'per2' account it remaps that use...

...f their AD server so they can manage/monitor/enforce password changes, access, etc. The issue was we had petabytes of data using our accounts which had in most cases both different names and underlying user ids. For example, my Linux username is raines with ID 5829 and my corparte/AD username is per2 with ID 2040470. And groups have no relation whatsoever. Simply reconfiguring our Linux servers to do straight LDAP or winbind/nss to corporate AD was not possible without a wholesale painful re-ID-ing of files and breakage of lots of apps that hard code usernames in settings. For all non-Samb...

...ing our accounts which had >> in most cases both different names and underlying user ids. For >> example, my Linux username is raines with ID 5829 > > I take it this ID is the Unix users ID found in /etc/passwd > My LDAP server, but yes >> and my corparte/AD username is per2 with ID 2040470. > > And this is the users AD RID uidNumber you get when searching account on AD via LDAP > >> And groups have no relation >> whatsoever. Simply reconfiguring our Linux servers to do straight >> LDAP or winbind/nss to corporate AD was not possible witho...

...Password' and 'sambaNTPassword' via separate calls to keep them in sync. But when the edict to do single sign on to the coporate AD happened I stopped using any of the samba schema in my LDAP server. And I set each user's 'userPassword' field to something like '{SASL}per2' to use passthru on the LDAP authentication end. And I configured samba to use corporate AD with the username map Corporate is definitely NOT going to let me copy 'sambaNTPassword' from them or let me setup my own domain to trust. The later would probably not work anyway due to the...

...gt; > The issue was we had petabytes of data using our accounts which had > in most cases both different names and underlying user ids. For > example, my Linux username is raines with ID 5829 I take it this ID is the Unix users ID found in /etc/passwd >and my corparte/AD username is per2 with ID 2040470. And this is the users AD RID > And groups have no relation > whatsoever. Simply reconfiguring our Linux servers to do straight > LDAP or winbind/nss to corporate AD was not possible without a > wholesale painful re-ID-ing of files and breakage of lots of apps > th...

...underlying user ids. For > >> example, my Linux username is raines with ID 5829 > > > > I take it this ID is the Unix users ID found in /etc/passwd > > > > My LDAP server, but yes This is the first mention of LDAP > > >> and my corparte/AD username is per2 with ID 2040470. > > > > And this is the users AD RID > > uidNumber you get when searching account on AD via LDAP So, your users are stored in LDAP, I take it from 'uidNumber' that the samba schema is installed. > > > > >> And groups have no relation...

...'sambaNTPassword' via separate calls to keep them in sync. > > But when the edict to do single sign on to the coporate AD happened I > stopped using any of the samba schema in my LDAP server. And I set > each user's 'userPassword' field to something like '{SASL}per2' to > use passthru on the LDAP authentication end. And I configured samba > to use corporate AD with the username map > > Corporate is definitely NOT going to let me copy 'sambaNTPassword' > from them or let me setup my own domain to trust. The later would > probabl...

...title = "Scottsdale Sales Tax Detail Report for the Period Ending " + @period.lastdate_in_period.strftime("%m-%d-%Y") @taxes = Debtortranstaxes.find(:all, :conditions => ["trandate BETWEEN :begin AND :end AND taxauthid IN (:ids)", {:begin => @per1, :end => @per2, :ids => @taxauthids}], :joins => ''LEFT JOIN debtortrans ON debtortrans.id=debtortransid'', :include => ''debtortrans'', :select => ''debtorno, trandate, transno, ovamount, taxamount, taxauthid'', :order => '...

...sword' via separate calls to keep them in sync. >> >> But when the edict to do single sign on to the coporate AD happened I >> stopped using any of the samba schema in my LDAP server. And I set >> each user's 'userPassword' field to something like '{SASL}per2' to >> use passthru on the LDAP authentication end. And I configured samba >> to use corporate AD with the username map >> >> Corporate is definitely NOT going to let me copy 'sambaNTPassword' >> from them or let me setup my own domain to trust. The later...