[Samba] LDAP Q: What for use Containers

malte.mueller at ewetel.net malte.mueller at ewetel.net
Tue Apr 20 15:20:06 GMT 2004

Zitat von Schlomo Schapiro <schlomo at schapiro.org>:

> Hi,
> well, on NDS and Netware you could give file system access rights to a 
> container and then all users in that container would inherit these rights. 
> BTW, Windows and AD also cannot do this.

My assumptions:
Samba can not doe this as nss/the resolver libs cannot do this. Even worse: for
the same reason you can't have truely nested groups (though samba does support
that a bit).
I wish, someone would tell me, I'm wrong.

Malte Mueller

> Basically it is a way to not use groups but assign information to objects 
> based on their position in the LDAP tree. I can imagine many more uses, 
> e.g. default servers, logon servers, share access rights, ...
> The point is, is there any use of the hierarchical structure of the LDAP 
> directory for Samba ? Or does Samba use the LDAP dir only like flat file 
> or SQL DB ?
> AFAIK there is not yet much or maybe any support for such settings, but I 
> want to discuss why not and wether others find it a useful thing to have.
> Regards,
> Schlomo
> On Tue, 20 Apr 2004, Paul Gienger wrote:

Powered by EWE TEL

More information about the samba mailing list