[Samba] Wither "uidNumber" and "gidNumber"? (was: Re: ldbedit: no matching records - cannot edit (newly-created user))

[Rowland Penny]

On 15/09/15 12:39, Jim Seymour wrote:
> On Tue, 15 Sep 2015 08:22:09 -0300
> Guilherme Boing <kolt+samba at frag.com.br> wrote:
>
>> I would recommend doing what mathias said so... that is what I am
>> doing, but instead of sssd, I am using nslcd.
>> The only server that the AD users can't connect is the DC itself,
>> because the DC runs winbind. Every other server on the network is
>> running nslcd and everyone with UNIX Attributes are properly
>> configurated to login with their correct gid.
> [snip]
>
> There is only one server.  That server will be doing *everything*.
> There are no other servers.  There will be no other server(s).  That is
> the way it has been for years.  That is the way it will remain.
>
> If a Samba4 AD DC cannot play well in that scenario: I'll downgrade (and
> I use "down" advisedly) to Samba3.  Then, if, at some time in the future
> the company wants AD, they can buy an MS-Win server.
>
> Regards,
> Jim

If in the end you decide not to use Samba 4 as an AD DC, you do not need 
to downgrade to Samba 3, Samba 4 is not just about the AD DC, it can do 
*everything* that Samba 3 could as well.

Rowland