On Tuesday 12 October 2004 20:46, jamrock wrote: > "John H Terpstra" <[EMAIL PROTECTED]> wrote in message > news:[EMAIL PROTECTED] > ... > Hmmm... > > I am not sure I understand the process well enough to do that. All I know > is that I have found a way to get group mapping to work based on Section > 6.3.5 of Samba 3 by example. > > "At this time, Samba-3 requires that on a PDC all UNIX (Posix) group > accounts that are mapped (linked) to Windows Domain Group accounts must be > in the LDAP database." > > I don't know how or why. I just know that since I have done this, group > mapping works beautifully on the systems that I have installed. > > See also chapter 6 of LDAP System Administration by Gerald Carter. The > section on Information Migration gives detailed instructions on how to use > the migration tools from www.padl.com. > > I copy the /etc/group account to another directory. I delete all the groups > that don't map to Windows groups. (It is important to make sure that you > are working with the copy when doing this). I then migrate the groups to a > LDIF file and use the standard LDAP commands to import them into the > directory. > > I will have a look at the Samba Howto and see if I can find a good place to > stick in that sentence. I think it makes or breaks the process.
OK. I look forward to anything you can provide to help clarify the docs. Cheers, John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 OpenLDAP by Example, ISBN: 0131488732 Other books in production. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
