Looking through the ldapsam stuff, it looks like in samba 3 a user can only be a member of one domain at a time in an ldap tree.

attributetype ( 1.3.6.1.4.1.7165.2.1.20 NAME 'sambaSID'
       DESC 'Security ID'
       EQUALITY caseIgnoreIA5Match
       SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{64} SINGLE-VALUE )

Does anyone know if it's safe to drop SINGLE-VALUE from sambaSid, to allow one user to be in two domains at once?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to