[Samba] LDAP-Backend: How to store 'employeeNumber' in 'sambaGroupMapping'?

[David Collins]

Matthias,

If you don't already have a GUI for looking at the LDAP structure, I
suggest that you install one - then you will easily be able to browse
through the schema. Luma is the nicest LDAP GUI that I have been able to
find.

When I look at the sambaGroupMapping in the schema area in luma, I see
the 'allowed attributes' -
description
displayName
sambaSIDList

Maybe you can use one of the first 2 to store your link string.

Regards,
David Collins


On Fri, 2008-09-19 at 12:35 +0200, Matthias Nagel wrote:

> Hello,
> 
> this is a little bit off-topic, because it is rather LDAP related. I need to store an additional string in every 'posixGroup/sambaGroupMapping' object in the LDAP backend. (This string is used to hold an key to an external database.)
> 
> For user accounts I can use the 'employeeNumber' attribute which is provided by 'inetOrgPerson'. Any ideas what I could use for group accounts accordingly? Of course it must not interfere with Samba and PAM. The main problem is that 'posixGroup' is an structural class and thus all extra classes must be auxiliary.
> 
> Thank you Matthias
>