[Samba] use of =?utf-8?Q?=E2=80=98idmap=5Fldb=3Ause_?=rfc2307 =?utf-8?Q?=3D_yes=E2=80=99_?=in DCs

Luis Peromarta lperoma at icloud.com
Tue Jun 11 17:08:10 UTC 2024


Let me know if I got this right.

Are you saying "--use-rfc2307 “ when provisioning is no longer needed ? And the rfc2307 attributes will still be there ?

Again, we are telling people how they need this if they plan to use AD mapping, but now it seems they don’t ?

Correct ?

If we provision without "--use-rfc2307 “, then no “idmap_ldb:use rfc2307 = yes” lines in smb.conf in DCs, then no more worries about ‘Domain Admins’ having gidNumber, no need for ‘Unix Admins’ and complexity of the AD mapping is no longer there ?

Is this correct ?

LP
On Jun 11, 2024 at 17:44 +0100, samba at lists.samba.org <samba at lists.samba.org>, wrote:
>
> I think it worse than that, as I said, the rfc2307 attributes are part
> of the standard AD schema and nothing now uses the ypServ30.ldif
> framework


More information about the samba mailing list