[KLUG Members] Help for upgrade to Samba 3.0.1 (LDAPSAM) fm 2.2.8a anybody?

[Jim C.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 

|
|Oh!  Use LDAP or don't.  Having things locatable by both libnss_files
|and libnss_ldap is BAD BAD BAD news.  That way lies bloody carnival
|death.  I have "root" in both, and everything else is carefully one or
|the other.
|
Is "carnival" death more entertaining than regular death?  Perhaps you
ment "carnal." ;-)
Right.  gid's/gidNumber's and uid's/uidNumbers must be unique
throughout the namespace (i.e. regardless of backend)... uh... except
perhaps when they are admin gid=0/uid=0 ?

|>Hmmm... you know I don't think I've ever seen a case where a
|>group belonged to a group and having two groups used for the same
|
|
|Something like an NIS triple?  I can be done.  I don't.  You get
|potential group-loops (grd contains sales which contains grd....) and it
|is just way to confusing.

Gotcha. We'll avoid that and stick to the KISS principle then.

|>This would make having those system accounts such as nobody and
|>nogroup in the LDAP database mandatory.  mmm...
|
|
|Yes.

OK. I'll have to go through and decide which ones I need.

|>I suppose I could just
|>wack the data in with gq, it would take and work but I couldn't manage
|>it from remote or anything.
|
|
|There is a directory call Migration installed with most openldap-server
|...

|is (and really can be) no "canned" solution.

I'm already familiar with this directory. Thanks. :-)
The real problem right now then,  is that I don't know which posix
groups match up with which samba builtins.  I can make guesses but I
would rather find some at least semi-explicit info somewhere. I would
jump on the Mandrake list and ask but sympa (the listserv) hates my
email addy's for some reason.  I got a new Earthlink address a few
days ago so I'll try again this evening.

Jim C.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iD8DBQFABdJW57L0B7uXm9oRAg5dAJ9hbug2wOgLrC6IPbe8KpIVKju8WwCfTNmk
A84n2jP9+WoNgpoQ0oDXgJ8=
=Lktx
-----END PGP SIGNATURE-----