Il 04/08/2012 13:40, steve ha scritto: >> Too bad my AD controllers are M$ W2k3, w/o rfc2307 extension :( That's >> why I'm stuck with rid. > Ah I see. I didn't mean to offend. No offense perceived :) > I simply assumed you were using Samba4. If only I could... > I think m$ gave them the 2008 schema as a result of a court > case. That _does_ have rfc2307. I don't know the background... I'm just a normal user w/ usually big troubles. So big that it seems nobody knows the answer :(
>> Should work at the first try. > Really need this one. I have to compare winbind with nss-ldapd to do > this stuff. Have the latter going fine. What you can't do with ldap (IIUC) is nested group membership. W/ AD you can have it. Up to you if that's important enough (for me it was: I usually place the service.admins group into the service.allowed one, so that all admins are automatically allowed... BYtE, Diego -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
