[Samba] RID numbers

[Andrey Nepomnyaschih]

Hello Andrew,

Well I've got the samba 3.0beta2 and it seems that Samba stills expects
RID to be as (uidNumber * 2 + 1000).

I'll try decribe the situation maybe the problem lies somewhere else.

I have an Administrator account with uidNumber of 0. And whenever I set
its RID to 500 (default from NT world) there's no way to add
workstations to domain with the Administrator account. On the opposite
side when I set RID to 1000 (0 * 2 + 1000) it works fine. So I assume
that samba doesn't use the mapping between uidNumber from posixAccount
and sambaSID from sambaSamAccount, when checks whether the account has
root access.

Can you clarify this thing to me?

Have a good time,
Andrey Nepomnyaschih


-----Original Message-----
From: samba-bounces+lists-samba=chartpilot.ru at lists.samba.org
[mailto:samba-bounces+lists-samba=chartpilot.ru at lists.samba.org] On
Behalf Of Andrew Bartlett
Sent: Saturday, June 28, 2003 5:57 PM
To: Andrey Nepomnyaschih
Cc: samba at lists.samba.org
Subject: Re: [Samba] RID numbers


On Sat, 2003-06-28 at 21:01, Andrey Nepomnyaschih wrote:
> Thanks for the answer Andrew,
> 
> I've got another question on the RID numbers.
> 
> It's a long time for now RIDs for users and groups should have been 
> calculated from uidNumber and gidNumber respectively. If I set RID of 
> user to anything else than (uidNumber * 2 + 1000) I'm asking for big 
> troubles. Is there any feature in plans to remove this requirement? 
> And does sambaGroupMapping class in schema solves this for groups?

With Samba 3.0beta2 (and current CVS) if you have an entry in LDAP with
both the SambaSID and the uidNumber it should use that mapping.

Likewise for groups, with that sambaGroupMapping.

You should consider your case carefully - only do this if you need to,
and consider if you want to adjust the value of 'algrithmic RID base' to
avoid having an algorithmic RID in that space.

Andrew Bartlett

-- 
Andrew Bartlett <abartlet at bartlett.house>