[OpenIndiana-discuss] restore smb SIDs

[Marc Jakob]

I deleted once idmap.db and the permissions on zfs remaind intact. We use ephemeral mapping between AD since central provider has no SFU AD attributes in AD scheme.

Even on zfs send / receive to backup servers the mapping remains intact.

But I recommend testing before deleting idmap.db on production servers.

Kind regards,

Marc

Am 28.08.2013 um 07:45 schrieb Geoff Nordli <geoffn at gnaa.net>:

> On 13-08-27 01:45 PM, Jim Klimov wrote:
>> On 2013-08-27 22:35, Geoff Nordli wrote:
>>> I am using the built-in kcifs for smb.
>>> 
>>> I was looking around for a tdb file and I could find one.
>> 
>> could NOT find? ;)
> 
> Yes, definitely NOT find :)
>> 
>>> 
>>> This is kind of a low priority now since I have just rebuilt the users,
>>> but it would be good to know for future situations where I inadvertently
>>> boot into the wrong BE and lose some changes.  :)
>> 
>> 
>> I believe you are after /var/idmap/idmap.db which feeds the idmap
>> daemon with your static rules and overrides, at least if you are
>> integrated with an MSAD domain. Maybe is also used for standalones?
>> 
>> Also, for backups, you might want different krb5 directories and
>> files (/etc/krb* /var/krb5) with configs and/or data to communicate
>> with the MSAD controllers; /etc/pam*, nsswitch and stuff like that.
>> And maybe XML exports of SMF services for smb/server and idmap :)
> 
> I will look more at this.
> 
> thanks!!
> 
> Geoff
> 
> _______________________________________________
> OpenIndiana-discuss mailing list
> OpenIndiana-discuss at openindiana.org
> http://openindiana.org/mailman/listinfo/openindiana-discuss