[Samba] multiple passdb backends for standalone fileserver?

[Harry Jede]

Am Montag, 20. August 2018, 16:43:24 CEST schrieb Matthias Leopold via 
samba:
> Hi,
> 
> i (naively) would like to have local AND ldap users (and groups...) on
> my standalone fileserver (security = user). "passdb backend =
> ldapsam" already works OK and i found some old posts on the internet
> about "chaining" passdb backends.
Round about 12 years ago "chaining passdb backends" was removed! But 
their are other possibilities:

1. You can map local unix users and groups to their windows entrys.

2. You can use winbind's idmap feature; obey the "idmap ranges" and 
honor that the syntax has changed several times.

Just read the man pages of the samba version you are using!!! before 
searching the web.

> so i tried "chaining" ldapsam and
> tdbsam, but although testparm doesn't complain and i can add local
> users with "pdbedit -b tdbsam" this setup doesn't actually work (ldap
> users are found, local are not)
> 
> is this supposed to work? are there other ways to achieve this?
> 
> samba version: 4.7.1 (on CentOS)
> 
> thx
> matthias


-- 

Gruss
	Harry Jede