Re: New samba3.schema

Graham Leggett <[email protected]> writes:

> Dieter Kluenter wrote:
>
>> further to my previvious mail, please change all samba related
>> attributes to the new schema definition. None of this attributes is
>> valid anymore.
>> i.e.
>> rid -> sambaSID
>> homeDrive -> sambaHomeDrive
>> lmPassword -> sambaLMPassword
>> etc.
>
> When I put together the patch to support Samba3, the attributes
> weren't a simple "replace one with another". The relative ID rid
> became an absolute id as I recall, which wasn't trivial to change,
> amongst a whole lot of other issues. Samba3 keeps more Windows domain
> information in LDAP than Samba2 did, which had to be supported (the
> main one being support for multiple distinct Windows domains within
> the same LDAP tree).

This is correct, but the sambaSID value is put together from sambaSID
of the sambaDomain entry (which stores the domain wide SID) and the
individually appended old rid, thus a users sambaSID would look like

S-1-5-21-1959417264-2281170740-76488076-2006
|    domain SID                       | |rid|

and could be easily calculated, same way as pdbedit does.

-Dieter

-- 
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:01443B53



-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt