[Samba] NT/UNIX username mapping possible directly via tdbsam?

Gerald (Jerry) Carter jerry at samba.org
Mon Nov 28 18:35:24 GMT 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dominik Schuppli wrote:
| Hello everyone,
|
| I've been wondering if NT and UNIX username mapping can
| be done directly via the SAM database instead of
| the 'username map = <filename>' option in smb.conf.
|
| The problem with 'username map' files is that the
| mappings seem to work only in one direction, namely
| from NT towards UNIX usernames. However, I'd like
| to achieve a true, bi-directional one-to-one
| mapping, e.g. between UNIX username 'root' and NT
| username 'Administrator'.

What would you expect by "going in the reverse direction"?
Can you give me an example?

| The command 'pdbedit -Lv <username>' shows separate fields
| for both UNIX and NT usernames. (I'm using the tdbsam
| backend, btw.) Will Samba operate correctly if those
| entries contain different usernames?

I think the nt user name is essentially unused.

| I've enhanced 'pdbedit' on my system so that it
| allows manipulation of the 'NT username' field. Is this smart
| or stupid? I haven't yet had the opportunity to try
| this in a working Samba environment. Maybe someone
| has technical advice or knowledge on what I'm trying to do?




cheers, jerry
=====================================================================
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"There's an anonymous coward in all of us."               --anonymous
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDi03sIR7qMdg1EfYRAm0pAKDUSLwpiYRbIgXmkEnaf+2QQm04NACg3Vrk
MkEzA6V2lqGShw8AJNR3FBg=
=Htvj
-----END PGP SIGNATURE-----


More information about the samba mailing list