ldapsam_nua and SAMBA_3_0 CVS

[Andrew Bartlett]

On Tue, 2003-03-18 at 08:01, jpulz at frm2.tu-muenchen.de wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> hi,
> 
> i tried a lot of things with the current SAMBA_3_0 today.
> everything is working fine, except, the ldapsam_nua passdb backend.
> 
> i've all accounts in the ldap tree and i want to provide 2 machines
> running FreeBSD. one is used to be the PDC and one the BDC and nothing
> more. no writing or reading of files only the domain logons.
> the disadvantage is, that nss_ldap still isn't working with FreeBSD.
> 
> so i need the ldapsam_nua because i don't want to use NIS or want to put
> all accounts to the local files too.
> 
> now i'm a little bit confused because everything i tried ends up with the
> following message:
> 
> auth/auth_util.c:get_user_groups_from_local_sam(687)
>   user XXX does not have a unix identity!

NUA accounts are a real hack, and are only suitable for use with
machines - we need to get the group list for domain logins, and that
comes from getgrouplist().

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030318/ed7587cc/attachment.bin