> On Tue, Jun 30, 2009 at 7:29 AM, David Markey<[email protected]> 
> wrote:
>> It's possible to use nss_ldap and idmap backend = nss and no winbind, like
>> you are describing.
>
> Why do I need idmap? I mean, from what I understand, idmap only
> purpose is to help winbind ensure uid and gid are the same across
> servers. If I use LDAP to store users accounts and groups, these id
> are the same.
>

Without idmap ACLs do not work on member servers. I mean changing ACLs
on files in windows does not work as expected.


-- 
John M. Drescher
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to