Afshin:

Natalie states AD/RFC 2307 is currently not supported.

Are you saying that there is a way to setup idmap to redirect it to AD/RFC 2307 for UID/GID lookups, as oppose to passwd, its internal db, or ephemeral ID generation? Is this question better asked in the sparks-discuss forum?

Thanks,

nola



On Nov 29, 2007, at 2:34 PM, Afshin Salek wrote:

Rob,

Whether or not CIFS authenticates with AD or how CIFS server
performs user authentication in general is irrelevant to identity
mapping here because it's the idmap service which does the mapping not
CIFS server. idmap engineers can comment on any ID mapping questions.
You can also take a look at the project webpage here:

http://opensolaris.org/os/project/winchester/

Thanks,
Afshin

Natalie Li wrote:
This blog should address your first question:
http://blogs.sun.com/dougm/entry/thoughts_on_extending_sharemgr_to
Currently, CIFS server doesn't authenticate with AD/RFC 2307 schema.
Regards,
Natalie
Rob Nelson wrote:
Goodday group.

Question1: Is there a sharectl/sharesmb/sharemgr command to config the share to be browsable on the Windows network?


Question2: The ephemeral IDs are nice. In a Windows only shop, no config required in the AD server. It has the "it works" option.

But if your in a true Solaris/Mac/Windows shop, where you need to support users that will log into all OSs, and need only one SID and one UID, don't ephemeral ID break down here? What are the options here? Will the integration into AD with RFC 2307 support installed work? I.e. http://blog.scottlowe.org/2007/04/25/ solaris-10-ad-integration-version-3/

In other words how do you have the CIFS server authenticate with AD/RFC 2307 schema, retrieve the UID/GID from AD lookup and use these on the OpenSolaris side?

How do you set this up?

Thanks,

nola


This message posted from opensolaris.org
_______________________________________________
storage-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/storage-discuss

_______________________________________________
storage-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/storage-discuss


_______________________________________________
storage-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/storage-discuss

Reply via email to