[Samba] 3.0.23 ldapsam:trusted=yes problem

[simo]

On Mon, 2007-03-19 at 09:57 -0300, Carlos Eduardo Pedroza Santiviago
wrote:
> Hi,
> 
> On 3/15/07, Asier Baranguán <abaranguan at elpagestion.com> wrote:
> > Hi all!
> >
> > I've a running Samba PDC (LDAP backend) with windows clients. All the users
> > are in the LDAP, including the 'guest' user. All except the 'root' user which
> > is a regular user. Then change in the smb.conf
> >
> > ldapsam:trusted = yes
> > ldapsam:editposix = yes
> >
> > and noticed some speed-up when listing groups, look file ownerships, and so
> > on. But I can't add machines to the domain: neither with the 'root' user,
> > neither some users with privileges to join computers.
> >
> > If I comment the ldapsam:trusted/editposix everything is fine and machines get
> > added to teh domain. ¿Why? All the users are in the LDAP so ldapsam:trusted
> > should work :-?
> >
> 
> IIRC, when you use the editposix flag, samba tries to manage all
> user/groups functions and doesn't use the smbldap scripts you've
> defnied. But i don't know if this is already finished. Maybe simo can
> answer this?

It is finished.

> For now, just use ldapsam:trusted, since it will speed things a lot.

Yes, you can use trusted without editposix if you want to manage
user/group/machine creation yourself.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer
email: idra at samba.org
http://samba.org