[Samba] idmap ad question

[Vaughan, Robert J]

>Hi all



>In the idmap_config_ad wiki, it states ..



>If you use the winbind 'ad' backend, you must add a gidNumber attribute to the Domain Users group in AD.



>Can someone explain this?

>>My guess is that failing to map the typical primary group of all users is likely to cause major service disruption

But not all my AD users use Samba, and those that do have the gidNumber set, and also we have this line in smb.conf ..

unix_primary_group = yes

So does it make sense in that case?

Thanks,

Robert Vaughan




----------------------------------------------------------------------
This is an e-mail from General Dynamics Land Systems. It is for the intended recipient only and may contain confidential and privileged information.  No one else may read, print, store, copy, forward or act in reliance on it or its attachments.  If you are not the intended recipient, please return this message to the sender and delete the message and any attachments from your computer. Your cooperation is appreciated.