[Samba] Linux integration with AD

[Doug VanLeuven]

Nir B wrote:

>Hi All,
>I extended my AD schema (SFU 3.5) and migrated the users and groups from my 
>NIS domain.
>
>The groups migrated from the NIS have the same GID like on the NIS.
>I added linux machines to my AD domain using windbind, and define on the 
>smb.conf  "idmap gid = 10000-20000".
>
>I logged in using my AD user account, and when I'm doing "id", I see that 
>all the AD groups GID start at 10000.
>
>How can I define that groups GID will be exactly like on my AD? (The 
>"msSFU30GidNumber" attribute)
>  
>
I use padl xad_oss_plugins subcomponent idmap_ad to lookup the uid/gid 
from the SFU schema extension.  Use it as a backend.
idmap backend = ad:ldap://dc.mydomain.com
I copied it to source/modules and patched Makefile.in to recompile and 
install it for the various svn's.

Regards, Doug