OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Active Directory and virtual delivery agent

From: Jeroen Geilman (jeroenadaptr.nl)
Date: Mon Aug 16 2010 - 16:02:11 CDT


On 08/16/2010 01:52 PM, Aaron Roberts wrote:
>> -----Original Message-----
>> From: owner-postfix-userspostfix.org [mailto:owner-postfix-
>> userspostfix.org] On Behalf Of zhong ming wu
>> Sent: 16 August 2010 12:02
>> To: Postfix users
>> Subject: Re: Active Directory and virtual delivery agent
>>
>> On Fri, Aug 13, 2010 at 9:18 AM, Aaron Roberts
>> <arobertsdomicilium.com> wrote:
>>
>>> Hi,
>>> I'm looking for a bit of inspiration...
>>>
>>> I have a number of linux boxes using winbind to provide UNIX system
>>>
>> users from a Win2008R2 Active Directory domain. I'm using winbind's
>> RID idmap backend thing to provide consistent UNIX UIDs and GIDs across
>> multiple servers. For non-windows people, the RID is a 32 bit integer
>> which uniquely identifies an object in a domain, and forms the right-
>> most part of the Active Directory forest-wide SID.
>>
>>> A SID looks like:
>>> S-1-5-21-993118751-601841214-1674189692-1134
>>>
>>> The RID, in the above case, is 1134.
>>>
>>> My UNIX UIDs are always (RID + 1000).
>>>
>> I always thought unix uid (or at leaset linux) is unsigned short;
>> won't you run into problem at one point with this?
>>
> I understand that linux, since 2.4, supports 32 bit UIDs.
>

Not only supports, but has.
As are PIDs, FDs, etc. etc.

> Aaron
>