Samba + ACL + NT Domena

[Dan Bar]

Jan Kasprzak wrote:
> 	Mam takovy dotaz ohledne Samby a ACL - mam Linuxovy server,
> ucty v LDAPu, Samba s autentizaci vuci PDC na Windows. Lze pripojit
> svazek (ma-li clovek ucet v LDAPu a heslo v PDC), ale nelze nastavovat
> access control listy. Samba hlasi do logu neco takovehoto:
> 
> [2003/01/23 18:01:09, 0] smbd/posix_acls.c:create_canon_ace_lists(823)
>   create_canon_ace_lists: unable to map SID S-1-5-21-1456231919-1440836737-2099212325-6442 to uid or gid.
> 

man winbind (?)

Tuhle vec se budu snazit teprve vyzkouset, takze je to z me strany 
trochu hadani. Nicmene dle popisu funkci a vlastnosti z man stranky by 
to mohlo souviset.

"...
Winbind uses various MSRPC calls to enumerate domain users and groups 
and to obtain detailed information about individual users or groups. 
Other MSRPC calls can be used to authenticate NT domain users and to 
change user passwords.
"

a hlavne pak

"By directly querying a Windows PDC for user and group information, 
winbind maps the NT account information onto UNIX user and group names."

Dan