[Samba] Does samba use NSS to find users/groups ?

[Yura Pismerov]

Andrew Bartlett wrote:
> 
> On Sun, 2002-11-10 at 22:47, Saullius Gurklys wrote:
> > Hi,
> >   I would like to create samba only domain and
> > have centralized samba+system users
> > database in LDAP (using posixaccount+sambaccont).
> >   Does samba uses NSS to find users/groups info?
> > I mean, can I have system with users in LDAP,
> > but not in /etc/passwd?
> 
> Yes, and it works quite well, because a user's sambaAccount and
> posixAccount classes can both extend the same LDAP object.  Recent
> changes in Samba 3.0 actually moved to take particular advantage of
> this, for performance reasons (see 'ldap trust ids' in the Samba 3.0
> manpages if you are interested).
> 

But you did not mention posixGroup. Would samba look up for the groups
as well, or it
uses nss_ldap for it ? One of the HOWTOs regarding "Samba PDC + LDAP"
says you must have
nss_ldap set up anyway.


	

> Andrew Bartlett
> 
> --
> Andrew Bartlett                                 abartlet at pcug.org.au
> Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
> Student Network Administrator, Hawker College   abartlet at hawkerc.net
> http://samba.org     http://build.samba.org     http://hawkerc.net
> 
>   ------------------------------------------------------------------------
>                        Name: signature.asc
>    signature.asc       Type: application/pgp-signature
>                 Description: This is a digitally signed message part