[PATCHES RESEND] idmap_rfc2307 module

steve steve at steve-ss.com
Wed Aug 22 12:00:17 MDT 2012


On 22/08/12 19:40, Christof Schmitt wrote:
> steve <steve at steve-ss.com> wrote on 08/22/2012 05:44:55 AM:
>> On 22/08/12 01:19, Christof Schmitt wrote:
>>> Resending the patches since i have not seen any feedback. These
>>> patches have been rebased to apply on the current master branch.
>>>
>>> The basic idea is to retrieve the id mapping information from RFC2307
>>> LDAP records. The records can be stored in a stand-alone LDAP server
>>> or in the ADS LDAP server. Patch 0007 adds a man page that should give
>>> an overview.
>>>
>>> Feedback? What needs to be done to get this accepted in master?
>>
>> Hi Christof
>>
>> We can already pull all of rfc2307 from AD with winbind using the code
>> that is already in place in s3.x.
>
> Are you referring to the SFU attributes?

Hi
No, just the normal rfc2307 classes/attributes. posixAccount, 
posixGroup, loginShell, unixHomeDirectory, uidNumber, gidNumber

If those are stored in AD, 3.x winbind can be used to access them e.g.

idmap config YOURDOMAIN:schema_mode = rfc2307
winbind nss info = rfc2307

Do your patches offer anything over and above this. Better performance?

Cheers,
Steve





More information about the samba-technical mailing list