On 06/09/2011 03:37 PM, John S. Skogtvedt wrote:
Den 09. juni 2011 14:31, skrev Simo Sorce:
You probably want to use the DNA plugin to generate the sambaSid for you
once you have a domain SID, it's not too difficult and will be much less
error prone.


Thanks. The solution outlined at
http://www.mail-archive.com/freeipa-users@redhat.com/msg00111.html works
for me, at least for user objects (didn't try the group part yet).

It should be relatively trivial to add support in the WebUI for Samba, but nothing would be broken without it. All that would happen is that the WebUI would lack fields for the Samba specific attributes. Assuming that ipa user-add works, you would want to add the field as an attribute in user.py. To add it after groupID:

            doc=_('Group ID Number'),
            default_from=lambda uid: uid,
            label=_('SAMBA SID'),
            doc=_('Samba SID Number')

I have to admit I'm not sure what the rules would be for default values for sambaSID.

Once you have ipa user-add working, if you want to extend the web UI, the file to modify is /usr/share/ipa/ui/user.js. What you would want to do is to add in a filed sambaSID. I'd be prone to put it under the section with the name: 'account'. It should be a text field, so you just need to add an entry for sambasid. I'd put it under 'gidnumber'. That looks like this:

                name: 'account',
                fields: [
{ factory: IPA.user_status_widget, name: 'nsaccountlock' },
{ factory: IPA.user_password_widget, name: 'userpassword' },

Freeipa-users mailing list

Freeipa-users mailing list

Reply via email to