[Samba] RFC2307: Recommendations for mapping Administrator account

Marco Gaiarin gaio at sv.lnf.it
Thu Feb 8 10:25:03 UTC 2018


Mandi! Rowland Penny via samba
  In chel di` si favelave...

> > > I provisioned a new domain with "--use-rfc2307" as I want to use the
> > > "ad" idmap backend on my domain members.
> > unless you have really specific requirements, you should really stick 
> > with RID mapping, it will be easier on the long run.
> Yes, but then you are stuck with using the same Unix home directory
> paths and login shells for everybody.

I add: also, using AD (on domain members) you can control what users
are windows-only (and LDAP) users, and what user are also UNIX/POSIX
ones.

Eg, only users with UID (and with a primary group that have a GID)
appear as UNIX users.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the samba mailing list