I think you will need 1) to have an entry in file /etc/request-key.conf such as this: create cifs.idmap * * /usr/sbin/cifs.idmap %k 2) winbind configured and running and added to file /etc/nsswitch.conf like this passwd: compat winbind group: compat winbind shadow: compat winbind 3) need a link sudo mkdir /etc/cifs-utils sudo ln -s /usr/lib/x86_64-linux-gnu/cifs-utils/idmapwb.so /etc/cifs-utils/idmap-plugin (dpkg -L cifs-utils | grep so will show you the location in ubuntu e.g) 4) And mount cifs share with option cifsacl Hope that helps. I had a working setup which is not there anymore. Will try to reacquire Regards, Shirish On Mon, Jul 30, 2018 at 7:37 PM, L A Walsh <cifs@xxxxxxxxx> wrote: > I seem to remember some details about the smb kernel upcall > where it called a program specified in the upcall config and > passed some commands like one taking a UID and wanting a SID > back, or one taking a SID and wanting a UID back (or GID)...etc. > > But can't find where I saw this... Wanted to try writing a plugin > that did this translation for my local domain, but can't find > such. > > Did that interface disappear or is it around in a different form? > Seemed like a convenient interface - either synchronous if answer > could be returned quickly or with a transaction # for returning > asynchronous answers. > > Are there any example of this type of plugin and usage? > > Thanks, > linda > > -- > To unsubscribe from this list: send the line "unsubscribe linux-cifs" in > the body of a message to majordomo@xxxxxxxxxxxxxxx > More majordomo info at http://vger.kernel.org/majordomo-info.html