Re: [cifs-discuss] idmap and SFU

2010-05-27 Thread Michael Anderson
Quoting Jordan Brown : Michael Anderson wrote: Aha! After 'c)' above, things are looking better: Excellent. Interesting: when I copy a file from the CIFS share to the windows desktop, the user's unix GID disappears from the permissions, and the 'SYSTEM' g

Re: [cifs-discuss] idmap and SFU

2010-05-25 Thread Michael Anderson
Quoting Jordan Brown : Michael Anderson wrote: Here's a query that may help to illuminate matters. You have to run it as root so that it can use your system's credentials. This is roughly the query that the mapping code uses; if it doesn't retrieve the appropriate attribut

Re: [cifs-discuss] idmap and SFU

2010-05-21 Thread Michael Anderson
Quoting Jordan Brown : Michael Anderson wrote: So, this means that the entries are being found in the directory, but for some reason aren't being or can't be used for mapping - is that correct? get-namemap and set-namemap operate on the "real" data stored on th

Re: [cifs-discuss] idmap and SFU

2010-05-21 Thread Michael Anderson
Quoting Jordan Brown : Michael Anderson wrote: What's interesting, is that: svccfg -s svc:/system/idmap setprop config/ds_name_mapping_enabled=boolean: true svccfg -s svc:/system/idmap setprop config/ad_unixuser_attr=astring:msSFU30Name svccfg -s svc:/system/idmap setprop c

Re: [cifs-discuss] idmap and SFU

2010-05-20 Thread Michael Anderson
Quoting Jordan Brown : Michael Anderson wrote: We're migrating from a BSD Samba/NFS server to OpenSolaris CIFS/NFS, using a W2k3 AD Server with MS SFU for auth and user database. What build are you running? # uname -a SunOS opensolaris-svn 5.11 snv_111b i86pc i386 i86pc and

[cifs-discuss] idmap and SFU

2010-05-19 Thread Michael Anderson
least for uids, but would be too cumbersome to maintain in our environment. Has anybody gotten AD idmapping working with SFU? Thanks, Michael Anderson -- Michael Anderson IT Services & Support elego Software Solutions GmbH Gustav-Meyer-Allee 25 Building 12.3 (BIG) room 227 13355 Berlin