[Samba] 'check password script' and Join...

[Rowland Penny]

On Thu, 26 Oct 2017 15:38:55 +0200
Marco Gaiarin via samba <samba at lists.samba.org> wrote:

> Mandi! Rowland Penny via samba
>   In chel di` si favelave...
> 
> > > No one have tried to add 'shadow' context in winbind? I'm simply
> > > curious... ;-)
> > If you mean adding 'winbind' to the shadow line
> > in /etc/nsswitch.conf,
> 
> Ahem, no: i meant adding to winbind nss library the support for the
> 'shadow' context, so i suppose this means adding some sort of
> ''transcoding'' between expiration data in AD and in POSIX worlds.
> 
> 
> > then yes, this has been tried and it didn't work, in fact it broke
> > things ;-)
> 
> I supposed was not supported at all, i've never added 'winbind' in
> shadow contex. ;-)
> 

You would do well to forget how you did things in your old PDC domain,
there are many differences. You do not need Unix users and Groups for
instance, you extend Domain Users and Groups to be Unix users and
Groups.

Rowland