[Samba] idmap & migration to rfc2307

[Michael Adam]

On 2015-11-09 at 11:22 +0100, buhorojo wrote:
> On 09/11/15 10:05, Rowland Penny wrote:
> >On 09/11/15 08:03, Michael Adam wrote:
> >>On 2015-11-09 at 07:57 +0100, buhorojo wrote:
> >>>On 08/11/15 23:40, Michael Adam wrote:
> >>>>On 2015-11-08 at 22:50 +0100, buhorojo wrote:
> >>>>>On 08/11/15 21:01, Michael Adam wrote:
> >>>>>
> >>>>>>so sssd is not at all an option.
> >>>>>No? What it does do is just work.
> >>>>No. It does not work for the internals of the ad/dc.
> >>>>It may work in nsswitch.
> >>>>
> >>>>And did I mention this is neither a support
> >>>>nor an advocating forum for sssd?
> >>>>
> >>>>>winbind doesn't. It is unfair on the OP to insist it does.
> >>>>What does "OP" mean?
> >>>http://lmgtfy.com/?q=what+does+OP+mean%3F
> >>A-ha.
> >>
> >>Btw: "Works-for-me" is a completely valid statement.
> >>It is even a state in bugzilla. It simply means
> >>"I do not have enough information about your
> >>setup to reproduce your issue." It is not unfair
> >>but encourages further exchange of information
> >>until the problem is understood and can be addressed
> >>or the OP's config is fixed.
> >>
> >>>>>>>Currently it and nslcd are the only way to obtain full rfc2307
> >>>>>>>and consistent ids on DCs. Neither winbind nor winbindd can do so.
> >>>>>>Sure. winbindd can do it.
> >>>>>Sorry but you are wrong. On a DC it can't.
> >>>>If it does not fully work, then we need to fix that.
> >>>>And as you so nicely pointed out earlier yourself
> >>>>(for sssd in that case...), instead of recommending
> >>>>the use of an unsupported external application,
> >>>>please submit a bug report at https://bugzilla.samba.org/
> >>>There are already many. Start with 10886.
> >>Ah, thanks for the pointer.
> >>We need to follow up on that.
> >
> >Let's be perfectly honest here, it was a mistake to not use the
> >unixHomeDirectory & loginShell attributes from the very beginning of
> >Samba4 and as such, this makes it the longest running bug of all!
> >If it was fixed it would probably make Samba4 a good replacement for SBS.
> >
> >Rowland
> >
> >>>sssd unsupported? You must be joking. It's Red Hat! OK, it costs a
> >>>fortune
> >>>but you can always get the Fedora version with mailing list support.
> >>>Or,
> >>>build it yourslef even.
> >>I am talking about "supported by Samba upstream",
> >>not about "supported by a vendor or distribution".
> >>
> >>Also, in case you are not aware:
> >>The AD/DC setup of Samba is not (yet) supported
> >>by RedHat or Fedora. You need a self-compiled
> >>Samba for that. Not sure about the support level...
> >>
> >>And if you have not noticed (even tough you have
> >>been reminded before), this mailing list
> >>is about Samba and its components, about helping
> >>people to get the supported configurations working
> >>and about improving Samba and its components.
> >>
> >>So could you please stop sabotaging these efforts?
> 
> We are helping, not sabotaging.

We? .... Is that you ... steves?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba/attachments/20151109/7ed4a0e4/signature.sig>