[Samba] RFC2307: Recommendations for mapping Administrator account
Marco Gaiarin
gaio at sv.lnf.it
Thu Feb 8 10:25:03 UTC 2018
Mandi! Rowland Penny via samba
In chel di` si favelave...
> > > I provisioned a new domain with "--use-rfc2307" as I want to use the
> > > "ad" idmap backend on my domain members.
> > unless you have really specific requirements, you should really stick
> > with RID mapping, it will be easier on the long run.
> Yes, but then you are stuck with using the same Unix home directory
> paths and login shells for everybody.
I add: also, using AD (on domain members) you can control what users
are windows-only (and LDAP) users, and what user are also UNIX/POSIX
ones.
Eg, only users with UID (and with a primary group that have a GID)
appear as UNIX users.
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797
Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
More information about the samba
mailing list