[PATCH] groups in ldap

Simo Sorce simo.sorce at xsec.it
Tue Mar 18 09:42:01 GMT 2003


A schema similar to the one used for users, so that you can create
groups, with groups members, and optionally a field for gid mapping
perhaps.

The point is that we should separate firmly the SID<->UGID mapping into
a separate thing, and group/users should have only SIDs.

IDMAP will think of mapping the whole thing, and on (file) systems that
may support SIDs directly IDMAP will probably be completely bypassed and
will not exist.

Simo.

On Tue, 2003-03-18 at 10:30, Volker Lendecke wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> > Using the group mapping approach will make very hard for us to upgrade
> > to the right way in future.
> 
> What kind of schema would you prefer to put groups into LDAP in a
> compatible way?
> 
> Volker
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: Key-ID D32186CF, Fingerprint available: phone +49 551 3700000
> 
> iD8DBQE+dudDOmSXH9Mhhs8RAibwAJ9ML3KwV0BWGHjbP2PngS5OtKSUOwCfTicD
> RGsJtCkOr2oEUI4fd93CWpQ=
> =XlK0
> -----END PGP SIGNATURE-----
-- 
Simo Sorce - simo.sorce at xsec.it
Xsec s.r.l. - http://www.xsec.it
via Durando 10 Ed. G - 20158 - Milano
mobile: +39 329 328 7702
tel. +39 02 2399 7130 - fax: +39 02 700 442 399
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030318/52f91b7f/attachment.bin


More information about the samba-technical mailing list