ldap group suffix relative

[Stefan (metze) Metzmacher]

At 11:45 13.08.2003 +0200, Tilo Lutz wrote:
>Hi
>
>I use samba 3.0rc1? with openldap.
>Don'T know if it's really rc1 or beta3.
>Downloaded it from ftp.suse.com
>
>Here are the ldap-options from smb.conf:
>        ldap admin dn           =  uid=wilma2,dc=domain,dc=de
>         ldap suffix             =             dc=domain,dc=de
>         ldap machine suffix     = ou=machines,dc=domain,dc=de
>         ldap group suffix       =   ou=groups,dc=domain,dc=de
>         ldap idmap suffix       =             dc=domain,dc=de
>         ldap user suffix        =   ou=people,dc=domain,dc=de
>
>Is it possible ldap group suffix is relative?

yep all 'ldap *** suffix' parameter have changed to relative suffixes...:-(

>/var/log/messages:
>ug 13 01:49:50 Wilma2 slapd[18118]: conn=1777 op=3 SRCH
>base="ou=groups,dc=domain,dc=de,dc=domain,dc=de" scope=2
>filter="(&(objectClass=sambaGroupMapping)(gidNumber=65533))"
>
>Will ldap group suffix changed to an "absolute" entry in
>samba 3.0 final?

I really would preferr to do this:

ldap suffix = DC=DOM
ldap group suffix = OU=Groups,DC=DOM       =>  OU=Groups,DC=DOM

and

ldap suffix = DC=DOM
ldap group suffix = OU=Groups,         =>  OU=Groups,DC=DOM

I'm having a patch for this in my local tree...


metze
-----------------------------------------------------------------------------
Stefan "metze" Metzmacher <metze at metzemix.de>