UCS 2.4 - Univention

4 Univention Directory Manager
64
• UMC Access
’General’ tab
Name (*)
The name of the group has to begin and end with a letter or a numeral. The rest of the characters
which form the group name may include letters, numerals, spaces, hyphens, or dots.
Description
A description of the group can be entered here.
Group ID
If a group is to be assigned a certain group ID, the ID in question can be entered in this field. Other-
wise, Univention Directory Manager will automatically assign the next available group ID when adding
the group. The group ID cannot be subsequently changed. When editing the group, the group ID will
be represented in grey. The group ID may consist of integers between 1000 and 59999 and between
65536 and 100000.
Relative ID
The relative ID (RID) is the local part of the Security ID (SID) and is used in Windows and Samba
domains. If a group is to be assigned a certain RID, the ID in question can be entered in this field.
Otherwise, Univention Directory Manager will automatically assign the next available group ID when
adding the group. The RID cannot be subsequently changed. When editing the group, the group
ID will be represented in grey. Since RIDs have to be unique across the domain, Univention Direc-
tory Manager prevents an RID from being assigned twice. For RIDs, integers higher than 999 are
permitted. RIDs below 1000 are reserved for standard groups and other special objects.
Samba group type
Three types of groups can be distinguished:
• Domain Group:
These groups are known across the domain. In Univention Directory Manager, new groups
belong to the type ’Global group’ by default.
• Local Group:
Local groups are relevant on Windows servers exclusively. If a local group is created on a
Windows server, this group is known solely to the server; it is not available across the domain.
UCS, in contrast, does not differentiate between local and global groups. After taking over an
NT domain, local groups in UCS can be handled in the same way as global groups.
• Well-Known Group:
This type contains groups pre-configured by Samba servers or by Windows servers, which can
be available across the domain or locally restricted.
Example:
Adminusers, Printer Admins, etc.