mirror of
https://github.com/samba-team/samba.git
synced 2025-01-27 14:04:05 +03:00
3e07406ade
This patch removes 'non unix account range' (same as idra's change in HEAD), and uses the winbind uid range instead. More importanly, this patch changes the LDAP schema to use 'ntSid' instead of 'rid' as the primary attribute. This makes it in common with the group mapping code, and should allow it to be used closely with a future idmap_ldap. Existing installations can use the existing functionality by using the ldapsam_compat backend, and users who compile with --with-ldapsam will get this by default. More importantly, this patch adds a 'sambaDomain' object to our schema - which contains 2 'next rid' attributes, the domain name and the domain sid. Yes, there are *2* next rid attributes. The problem is that we don't 'own' the entire RID space - we can only allocate RIDs that could be 'algorithmic' RIDs. Therefore, we use the fact that UIDs in 'winbind uid' range will be mapped by IDMAP, not the algorithm. Andrew Bartlett
-
-
-
-
-
-
-
-
-
-
-
-
-
-
Copyright(C) Samba-Team 1993-2001 This directory contains example config files and related material for Samba. At a minimum please refer to the smb.conf.default file for current information regarding global and share parameter settings. Send additions to: samba@samba.org