[Samba] Linux member server, or something else?

[John Drescher]

On Tue, Jun 30, 2009 at 11:15 AM, Norberto Bensa<nbensa at gmail.com> wrote:
> On Tue, Jun 30, 2009 at 10:39 AM, John Drescher<drescherjm at gmail.com> wrote:
>>> On Tue, Jun 30, 2009 at 7:29 AM, David Markey<dmarkey at dodds.dmarkey.com> wrote:
>>>> It's possible to use nss_ldap and idmap backend = nss and no winbind, like
>>>> you are describing.
>>>
>>> Why do I need idmap? I mean, from what I understand, idmap only
>>> purpose is to help winbind ensure uid and gid are the same across
>>> servers. If I use LDAP to store users accounts and groups, these id
>>> are the same.
>>>
>>
>> Without idmap ACLs do not work on member servers. I mean changing ACLs
>> on files in windows does not work as expected.
>>
>
> Ok. So, is this "idmap backend = nss" a valid option? I can't find
> information about it in "man smb.conf"
>
> I'm using samba-3.0.28a (ubuntu hardy).
>

I do not remember what version that was added. 3.0.28 is pretty old
though. I am using 3.0.33 or greater on all of my production servers.

John