Chattering random observations, tips, and tutorials on all things related to IT.
I’ll make this post short and sweet. Go LDAP! I am not liking a lot of things about running windbind/kerberos. For one, its ugly!
User accounts look like this:
DOMAIN+bob
I added a default domain to my /etc/samba/smb.conf file:
[code] winbind use default domain = true [/code]
Now user accounts look like this:
bob
Okay that is nice, but what about UID/GID?
id bsus
uid=10173(bsus) gid=10000(domain users) groups=10000(domain users),10003,10004,10001(domain admins),10006(BUILTIN+users),10005(BUILTIN+administrators)
I’m starting to dislike this, its messy. With LDAP+AD it just feels smoother. More to come…Gotta jet to a meeting.