[Samba] LDAP Q: What for use Containers

[malte.mueller at ewetel.net]

Zitat von Schlomo Schapiro <schlomo at schapiro.org>:


> Hi,
> 
> well, on NDS and Netware you could give file system access rights to a 
> container and then all users in that container would inherit these rights. 
> BTW, Windows and AD also cannot do this.

My assumptions:
Samba can not doe this as nss/the resolver libs cannot do this. Even worse: for
the same reason you can't have truely nested groups (though samba does support
that a bit).
I wish, someone would tell me, I'm wrong.

Regards,
Malte Mueller

> 
> Basically it is a way to not use groups but assign information to objects 
> based on their position in the LDAP tree. I can imagine many more uses, 
> e.g. default servers, logon servers, share access rights, ...
> 
> The point is, is there any use of the hierarchical structure of the LDAP 
> directory for Samba ? Or does Samba use the LDAP dir only like flat file 
> or SQL DB ?
> 
> AFAIK there is not yet much or maybe any support for such settings, but I 
> want to discuss why not and wether others find it a useful thing to have.
> 
> Regards,
> Schlomo
> 
> On Tue, 20 Apr 2004, Paul Gienger wrote:
> 


--
Powered by EWE TEL