Does anybody use idmap_adex?
Volker Lendecke
Volker.Lendecke at SerNet.DE
Mon Jun 28 09:51:35 MDT 2010
On Mon, Jun 28, 2010 at 10:37:28AM -0500, Gerald Carter wrote:
> >Ok, for some reason I thought information was maintained
> >on your side of the trust using the cells.
>
> Sort of correct. But these are specific OU cells and not
> a forest wide cell. At the risk of digressing into a Likewise
> specific thing, an OU cell stores the meta data for objects
> in a container inside the OU. So you can add a user or group
> across a one-way trust to an OU cell and the UNIX attribute
> information is stored inside the OU in *your* domain.
> So in this case, you don't send LDAP queries across a one-way
> trust. In the RFC2307 forest cell case, the UNIX attribute
> information is stored *on* the actual user and group object.
>
> Idmap_adex only supported the RFC2307 forest "cell" since this
> was easy to do using the MS "Identity Services for Unix" management
> tools.
>
> Make sense?
So it is just the naming of structures, routines and so on
that points at the concept of Likewise Cells, nothing in the
code actually references anything specific to those?
Volker
More information about the samba-technical
mailing list