[Samba] use of ‘idmap_ldb:use rfc2307 = yes’ in DCs

[Rowland Penny]

On Thu, 20 Jun 2024 10:06:02 +1200
Douglas Bagnall via samba <samba at lists.samba.org> wrote:

> On 12/06/24 04:12, Rowland Penny via samba wrote:
> > On Tue, 11 Jun 2024 17:02:58 +0100
> > Luis Peromarta via samba <samba at lists.samba.org> wrote:
> > 
> >> In what scenario should I use idmap_ldb:use rfc2307 = yes ? For
> >> what purpose ?
> > 
> > Good question. The only real use could be if you are adding rfc2307
> > attributes to AD AND using the DC as a fileserver (not recommended)
> > AND also running Unix domain members using the 'ad' idmap backend.
> > Even then, I am not convinced.
> >  
> >>
> >> I don’t see any use for it then.
> > 
> > I am beginning to think the same.
> 
> I see https://bugzilla.samba.org/show_bug.cgi?id=9840
> ('"idmap_ldb:use rfc2307" is undocumented') is ready for anyone who
> wants to fix a bug!
> 
> Douglas
> 
> 

If I remember correctly (and I cannot seem to get into bugzilla to
check), there is also an open bug to remove 'idmap_ldb:use rfc2307'
which is only set by default on the first DC in a domain.

Rowland