> We're running s3/LDAP with uid:gid, shell and home directory all in 
> LDAP. No winbind anywhere.


is this the only samba server? do you have any samba server as member of that 
one?


anyway, i've read more carefully the docs and found that(1):

"it stores mappings between UNIX UIDs, GIDs, and NT SIDs. This mapping is used 
only for users and groups that do not have a local UID/GID"

so i can assume that local unix attributes are always looked first and winbind 
is used only if that first resolution fails. the key is that "local" here means 
any account seen by NSS (getent passwd), for example LDAP.

i found much more usefull and even easy to configure NSS/PAM against LDAP than 
winbind, but in the docs(2), when talking about adding members, it seems that 
winbind is the only way to go.

i think it would be really usefull that official docs provides an example of 
this other kind of setup.

abosch

References:
1 - http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html
2 - http://www.samba.org/samba/docs/man/Samba-Guide/unixclients.html

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to