[ADVANCE NOTICE] usernames limited to 8 chars gonna be nasty..

[nazard at dragoninc.on.ca]

On 11 Apr, Luke Kenneth Casson Leighton wrote:
>> Don't tie it to the user name. In some cases (i.e. LDAP) it would be
>> much better to add another multi-valued attribute like "NTDOMAIN". That
>> way we could use that account for multiple domains, or move domains
>> easily.
> 
> good idea.

I've been thinking about this a bit since I'm raining on your parade <g>

What if we added a config file/options so you can specify how to handle
each domain. This would allow us to better support multiple backends.

Maybe something like:

[DRAGONREALM]
Type = PDC
NameDatabase = LDAP
SambaDatabase = LDAP
LDAP Server = blah
LDAP blah ...
EncryptPasswords = yes
logon path = 
other domain related options....

[TRUSTED_DOMAIN]
Type = Trusted
NameDatabase = Samba
SambaDatabase = Samba
Samba Server = Samba_Pdc

[TRUSTED_DOMAIN_2]
Type = Trusted
NameDatabase = File
GroupDatabase = File
SambaDatabase = NT
NT Server = NT_Pdc
NameFile = /opt/samba/private/trusted_domain_2_users
GroupFile = /opt/samba/private/trusted_domain_2_groups



-- 
Doug Nazar
Dragon Computer Consultants Inc.
Tel: (416) 708-1578     Fax: (416) 708-8081