[Samba] Re: Winbind usage PDC and Domain menber ?

[Jérôme Fenal]

Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Alban Browaeys wrote:
> 
> | Is winbind recommended on a multi file services network
> | (SMB+NFS+AFS+etc) and when ACL are used:
> | from various it seems not , winbind get the name only
> | from the PDC and set a random id in the idmap, so id differs
> | on pdc and menbers, also between menbers
> 
> This can be corrected using the ldap backend for
> winbindd.  It's not really well documented I'm afraid.

Wow, had not seen that. Cool.
I've just had a look at the documentation, it should be ok, but would 
just need the schema used, and some example of association (LDIF format).

(I have not looked at the code) Is it using the posixAccount schema ? 
(my idea is to get the answer here, then on the Web via mail-archives ;-)

Could it use a part of an AD LDAP server ? (in the context of an 
NT4-compatible DC ADS)

Anyway, I'll work on a testbed for thing, I may need sooner than I expect...

Regards,

Jérôme