According to the smb.conf man page in samba 3.0.28a, the only two
legal settings for 'winbind nss info' are 'template' and 'sfu':
---8<---
winbind nss info (G)
This parameter is designed to control how Winbind
retrieves Name Service Information to construct a
user's home directory and login shell. Currently the
following settings are available:
o template - The default, using the parameters of
template shell and template homedir)
o sfu - When Samba is running in security = ads
and your Active Directory Domain Controller does
support the Microsoft "Services for Unix" (SFU)
LDAP schema, winbind can retrieve the login
shell and the home directory attributes directly
from your Directory Server. Note that retrieving
UID and GID from your ADS-Server requires to use
idmap backend = idmap_ad as well.
Default: winbind nss info = template
Example: winbind nss info = template sfu
--->8---
However, it appears that 'rfc2307' is a kosher value, too. [1] Is
the smb.conf man page incorrect?
-David
[1] http://us1.samba.org/samba/security/CVE-2007-4138.html
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
