Re: [Samba] 'ldap passwd sync' not working

--===============2082969880==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="=-zSrICH6H8bgs0y9Lhbcd"


--=-zSrICH6H8bgs0y9Lhbcd
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

> > Hope this helps someone, it cost me enough pain before it worked proper=
ly
> > for me.
> Oh yes - regular (existing or new) Posix group users can be anywhere in
> your DSA,=20

I think you mean "anywhere in your Dit"; "anywhere in your DSA" doesn't
make much sense,

> in any group (though it makes sense to put computer trusts under
> ou=3Dsmb).

I think you mean "in any container".

And you're wrong, they need to be below the search base used by NSS for
the appropriate object type - groups, person, etc... You can only put
them anywhere if you are using the root of the Dit as your search base
which is generally inadvisable for a number of reasons.

> Simply run smbpasswd or pdbedit (can be done from a script) on each one t=
o
> add them to the domain. Personally I don't use the IDEALX scripts, I writ=
e
> my own awk and shell scripts.

Same, we've written .NET (Mono) 'scripts' for doing this.

--=-zSrICH6H8bgs0y9Lhbcd
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQBCB2fULRePpNle04MRAtnhAJ0anpg266QOXDzSiga5o5 FyNzwfxwCfWGVp
jeOPFaLzCikWryUzCmi5Ss0=
=VSeL
-----END PGP SIGNATURE-----

--=-zSrICH6H8bgs0y9Lhbcd--


--===============2082969880==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--===============2082969880==--