[Samba] Acls

Rowland penny rpenny at samba.org
Mon Sep 7 09:39:34 UTC 2020

On 07/09/2020 10:11, L.P.H. van Belle via samba wrote:
> Hai,
> Not that its wrong what Rowland made you change ( AD to RID backend).
> But this "should" simply not be needed.
The big mistake that users make is to think that the ID's produced on a 
DC are uidNumbers or gidNumbers and that they can then use the 'ad' 
backend on Unix domain members. This is what appears to be the problem 
in this thread, so it was easier to change the OP to 'rid'. This proved 
that there was a connection to the domain and will work, if the OP now 
wants to use the 'ad' backend he can do. It just means adding RFC2307 
attributes to AD, altering smb.conf to the 'ad' backend and restarting 
Samba on the Unix domain member.

More information about the samba mailing list