-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ralf Gross wrote:
> CG schrieb:
>> I'm trying to use winbindd to enumerate and link AD users to their pre-
>> existing UNIX accounts. Right now, winbindd creates new "users" for UNIX 
>> based 
>> on windows username and groups.
>>
>> What I can't figure out is how to explicitly map the AD users to their pre-
>> existing UNIX accounts. I'd like the users to be able to access their UNIX 
>> accounts with their UNIX authentication information /and/ their AD 
>> authentication information. I had hung my hat on the "username map" smb.conf 
>> directive, but I find now that it doesn't apply to winbindd.


See the idmap_nss backend in Samba 3.0.25.  But it is an all
or none.  You cannot have winbindd allocate a uid for some
users in a domain and use existing Unix accounts for others.

On older versions, see the "winbind trusted domains only" option.

I also have a pending username map plugin for winbindd that might
be available in 3.0.26.  it's still under discussion.




cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGMf2UIR7qMdg1EfYRAtZwAJ4j+I2HQ7TnpRu7q97DAF7ef5pcpwCZAR8I
X1cWVU7/PizwwkUf611twrs=
=ugk2
-----END PGP SIGNATURE-----
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to