[Samba] Re: idmap backend, LDAP & Windows AD

[Rex Dieter]

Yanick Quirion wrote:

>         #### ACTIVE DIRECTORY
>         ldap admin dn = cn=Administrator,dc=TOTO,dc=COM
>         ldap idmap suffix = ou=Idmap
>         ldap passwd sync = yes
>         ldap suffix = dc=TOTO,dc=COM
           ^^^^^^^^^^^
...
>         winbind nss info = template, sfu
>         #winbind use default domain = yes
>         template shell = /bin/bash
>         template homedir = /u/%D/%U
>         winbind cache time = 5

AFAIK, when using
winbind nss info = sfu
all those
ldap parameters are superfluous (or worse, can conflict or cause other 
problems).

-- Rex