svn commit: samba r7994 - branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/libads branches/SAMBA_3_0/source/nsswitch branches/SAMBA_3_0/source/param branches/SAMBA_3_0/source/sam trunk/source/include trunk/source/libads trunk/source/nsswitch trunk/source/param trunk/source/sam

[gd at samba.org]

Author: gd
Date: 2005-06-29 14:03:53 +0000 (Wed, 29 Jun 2005)
New Revision: 7994

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=7994

Log:
This adds support in Winbindd's "security = ads"-mode to retrieve the POSIX
homedirectory and the loginshell from Active Directory's "Services for Unix".

Enable it with:

        winbind sfu support = yes

User-Accounts without SFU-Unix-Attributes will be assigned template-based
Shells and Homedirs as before.

Note that it doesn't matter which version of Services for Unix you use (2.0,
2.2, 3.0 or 3.5). Samba should detect the correct attributes (msSFULoginShell,
msSFU30LoginShell, etc.) automatically.

If you also want to share the same uid/gid-space as SFU then also use PADL's
ad-idmap-Plugin:

        idmap backend = ad

When using the idmap-plugin only those accounts will appear in Name Service
Switch that have those UNIX-attributes which avoids potential uid/gid-space
clashes between SFU-ids and automatically assigned idmap-ids.

Guenther

Modified:
   branches/SAMBA_3_0/source/include/ads.h
   branches/SAMBA_3_0/source/libads/ads_struct.c
   branches/SAMBA_3_0/source/libads/ldap.c
   branches/SAMBA_3_0/source/nsswitch/winbindd.h
   branches/SAMBA_3_0/source/nsswitch/winbindd_ads.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_async.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_cache.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_nss.h
   branches/SAMBA_3_0/source/nsswitch/winbindd_rpc.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_user.c
   branches/SAMBA_3_0/source/param/loadparm.c
   branches/SAMBA_3_0/source/sam/idmap_ad.c
   trunk/source/include/ads.h
   trunk/source/libads/ads_struct.c
   trunk/source/libads/ldap.c
   trunk/source/nsswitch/winbindd.h
   trunk/source/nsswitch/winbindd_ads.c
   trunk/source/nsswitch/winbindd_async.c
   trunk/source/nsswitch/winbindd_cache.c
   trunk/source/nsswitch/winbindd_nss.h
   trunk/source/nsswitch/winbindd_rpc.c
   trunk/source/nsswitch/winbindd_user.c
   trunk/source/param/loadparm.c
   trunk/source/sam/idmap_ad.c


Changeset:
Sorry, the patch is too large (1555 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=7994