Hi Jim, > I think we've hit this years ago in one SXCE installation, and just > forced lowercase domain names with entries like this (there are many > per-user definitions also, I am not sure if they are the real key to > success): > > add winname:Guest@thumper unixuser:nobody > add winuser:Administrator@thumper unixuser:root > add wingroup:*@domain.ru unixgroup:* > add winuser:*@domain.ru unixuser:* > add "wingroup:Domain us...@domain.ru" unixgroup:staff > add "wingroup:Domain adm...@domain.ru" unixgroup:sysadmin
Thanks, did try that, but whether we were using upper or lowercase domain names in the idmap listings, it was only matching against lower-case logins. We've got both upper-case and lower-case specified in the krb5.conf file as well. In the end I've used: add -d winuser:username@* unixuser:username That works, but it's unidirectional, so not ideal. Best regards, James. _______________________________________________ OpenIndiana-discuss mailing list OpenIndiana-discuss@openindiana.org http://openindiana.org/mailman/listinfo/openindiana-discuss
