RFC2307 on a Samba DC - HowTo

Giuseppe Ragusa giuseppe.ragusa at hotmail.com
Sun May 18 12:38:08 MDT 2014

> Hello,
> I've finished a new HowTo this week (please proofread):
> https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC
> Regards,
> Marc


Looks good to me, but I wonder if the long standing quirk of ignoring
the "primary Group ID" RFC2307 attribute and honouring Windows-side
group settings for primary group too is still in effect and
must be someway described in the wiki page (it affected Winbind for
sure, never tested SSSD).

I think (and reported about two years ago on this list) that up to
Samba 3.5.0 the behavior was different (primary group taken from
POSIX attributes in RFC2307 fields), but changed afterwards and could
be the culprit behind:




I even started an (aborted, unfortunately) effort at adding back the
former behavior through a configuration option (totally rewritten id mapping
plugin structure made the relevant information "unavailable where needed"
and would so require a substantial development work beyond my possibilities atm).


More information about the samba-technical mailing list