[Samba] Wither "uidNumber" and "gidNumber"? (was: Re: ldbedit: no matching records - cannot edit (newly-created user))

[Rowland Penny]

On 12/09/15 21:30, Jim Seymour wrote:
> On Sat, 12 Sep 2015 13:13:11 -0600
> Nigel W <nigel.w at nosun.ca> wrote:
>
> [snip]
>> You create the users on the directory with the same uid and
>> uidNumber as the local users and then remove local users on the
>> systems.  Same applies to the groups.
> [snip]
>
> Why would I want to remove the local users and groups?  You mean
> from /etc/passwd, /etc/group, /etc/shadow, NIS or whatever?

You cannot have a local user and an AD user with the same name, this 
also goes for groups. Apart from possibly a few admin users, *all* your 
users & groups need to be in AD.

>
> Or... did the Samba4 provisioning throw entries into PAM?  So now
> Samba4's ldap data replaces it?

Nothing in PAM, all in AD :-)

Rowland

>
> Regards,
> Jim