Re: New samba3.schema

Dieter Kluenter wrote:

> This is correct, but the sambaSID value is put together from sambaSID
> of the sambaDomain entry (which stores the domain wide SID) and the
> individually appended old rid, thus a users sambaSID would look like
> 
> S-1-5-21-1959417264-2281170740-76488076-2006
> |    domain SID                       | |rid|
> 
> and could be easily calculated, same way as pdbedit does.

Exactly, which now adds the burden within directory_administrator of 
asking the user which domain they belong to within the user interface 
(you may have many Windows domains in one directory in Samba3). And the 
list of domains? Samba3 keeps that in LDAP (Samba2 did not), so diradmin 
must now worry about searching for and building the domain list. Then do 
the same magic over again for groups.

The work to support Samba3 has already been done, and it was not a 
trivial exercise - take a look at the patch and you will see :)

Regards,
Graham
--