LDAP schema

[Luke Kenneth Casson Leighton]

On Fri, 27 Nov 1998, Jean Francois Micouleau wrote:

> 
> On Fri, 27 Nov 1998, Matt Chapman wrote:
> 
> > LDAP support is coming along well, and I would like some comments as to the
> > schema.
> > 
> > In particular I need Luke's input as to storing uids/gids vs storing RIDs vs
> > both. Also how does one add users to groups and aliases (in terms of the api)?
> > Have I misunderstood something here?
> > 
> > In any case here are some examples of the current schema.
> > 
> > // Now the Samba extensions
> > lmPassword: 46E389809F8D55BB78A48108148AD508
> > ntPassword: 1944CCE1AD6F80D8AEC9FC5BE77696F4
> > pwdLastSet: 35C11F1B
> > smbHome: \\server\share
> > homeDrive: Z
> > script: logon.bat
> > profile: \\server\profile
> > workstations: MYPC
> 
> And the RID or the SID (better for trust relationships) ?

RID methinks is definitely needed.  SID, no.  remember that there are
other PDCs against which we are expected to verify user details: if it's
not in our SAM, we are most certainly not responsible for it.

luke