[PATCH] IDMAP LDAP Backend 2of2

[Andrew Bartlett]

On Thu, 2003-03-20 at 17:20, Stefan (metze) Metzmacher wrote:
> At 21:44 19.03.2003 -0600, Anthony Liguori wrote:
> >This is the second part of the IDMAP LDAP Backend patch.  It requires
> >the previous patch in order to compile.
> >
> >Please take special note of the schema changes as they have broader
> >implications.  I've tried to design the schema such that it can
> >painlessly be extended for future pdb group mapping.

PDB will not be involved in 'group mapping'.  It will be involved in
'groups'.

> the sambaGroup should have a SID not only a RID!

Yes - all idmap storage should be 'SID and (gid or uid)'.  That's an
inclusive or, btw.

Also, it should not be sambaGroup, but sambaIDMAP.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030320/8a66a570/attachment.bin