On Tue, Jun 30, 2009 at 11:15 AM, Norberto Bensa<[email protected]> wrote: > On Tue, Jun 30, 2009 at 10:39 AM, John Drescher<[email protected]> wrote: >>> On Tue, Jun 30, 2009 at 7:29 AM, David Markey<[email protected]> >>> wrote: >>>> It's possible to use nss_ldap and idmap backend = nss and no winbind, like >>>> you are describing. >>> >>> Why do I need idmap? I mean, from what I understand, idmap only >>> purpose is to help winbind ensure uid and gid are the same across >>> servers. If I use LDAP to store users accounts and groups, these id >>> are the same. >>> >> >> Without idmap ACLs do not work on member servers. I mean changing ACLs >> on files in windows does not work as expected. >> > > Ok. So, is this "idmap backend = nss" a valid option? I can't find > information about it in "man smb.conf" > > I'm using samba-3.0.28a (ubuntu hardy). >
I do not remember what version that was added. 3.0.28 is pretty old though. I am using 3.0.33 or greater on all of my production servers. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
