[Samba] Groups and LDAP

[Beast]

Friday, November 21, 2003, 5:44:54 AM, Robert wrote:

> I think I understand.  So, if I want a user (in LDAP) to be a part of 
> your ntadmins group, I'd set his gidNumber to 1000, correct?  Would I 
> also need to add a memberUid field in the ntadmins group for this user? 
>   IE for user bob:
> dn: cn=ntadmins,ou=Groups,dc=firerun,dc=net
> cn: ntadmins
> objectClass: top
> objectClass: posixGroup
> gidNumber: 1000
> memberUid: root
> memberUid: patrick
> memberUid: bob

> Can an LDAP user have a gidNumber of 0 and be a root user on a Unix machine?

It depends. if that host is using ldap as auth server, yes. If not
then it has no effect.
Try using 'id <username>' to see all groups id for that username.


> Rob



--beast