[Samba] Windows AD w/ Windows Services for Unix?

[Doug VanLeuven]

Jason Gerfen wrote:
> I can authenticate users on a default setup of Windows 2000 using 
> 'Security = ADS'.  However if I install Windows Services for Unix 
> (http://www.microsoft.com/windowsserversystem/sfu/productinfo/features/default.mspx) 
> I am not able to authenticate or view users from different 
> Organizational Units in the default domain.  ???
> 

With a 2000 or 2003 Windows AD controller, I've run SFU 3.0 & 3.5 on both
client and server without side effects.
I use:
winbind nss info = template sfu
security = ADS
winbind trusted domains only = yes
idmap backend = ad

on the samba member servers.

Perhaps you mean you're running samba PDC and using SFU on a client
workstation?  In that case, I would assume, for it to work, you
would need to run an ldap backend and extend the schema for SFU.
Then fill out the unix values.

Anyone ever done that?

Regards, Doug