[Samba] winbind user mapping problem

[Lantukh Sergey]

Hello
I think that you need to clean the Winbind database that contains bridge 
between UID/GID - SID
And then restart winbind, and he again will fill the database

On 30/12/2011 10:44, Bruno Martins wrote:
> Hello list,
>
> I am using Samba + winbind and I have some users that cannot access
> shares on this server, getting the following error in
> '/var/log/samba':
> [2011/12/30 09:33:08.072315,  1] smbd/sesssetup.c:454(reply_spnego_kerberos)
>    Username GALILEU-F\teste is invalid on this system
>
> Also, in 'winbind-idmap' log file I am getting this:
> [2011/12/30 09:32:56.902810,  1] winbindd/idmap_tdb.c:445(idmap_tdb_allocate_id)
>    Fatal Error: UID range full!! (max: 120000)
>
> So what happens in reality? Trying to 'getent' that user results in
> nothing, so no mapping, right?
> root at sputnik:/var/cache/samba# getent passwd bmartins
> bmartins:*:100001:100000::/home/GALILEU-F/bmartins:/bin/false
> root at sputnik:/var/cache/samba# getent passwd teste
> root at sputnik:/var/cache/samba#
>
> However, 'wbinfo' works for that user:
> root at sputnik:/var/cache/samba# wbinfo -u | grep teste
> teste
>
> My 'smb.conf' returns this, regarding to idmap parameters:
> root at sputnik:/var/cache/samba# cat /etc/samba/smb.conf | grep idmap
> #       idmap uid = 10000-200000
>          idmap uid = 100000-120000
> #       idmap gid = 300000-400000
>          idmap gid = 100000-120000
>
> I have tried lower and higher values, did a reload on winbind service,
> but nothing seems to help.
>
> Could you please help me on this?
>
> Best regards,
>
> Bruno Martins