[Samba] Winbind idmap question

[Jonathan Hunter]

Hi,

Does "wbinfo -i <user>" work, and return the same results, on all the DCs?

Are the DCs running the distribution & versions (e.g. CentOS, Debian,
whatever) or are there differences there, also?

On 21 April 2016 at 11:16, mathias dufresne <infractory at gmail.com> wrote:

> Hi Jonathan,
>
> Thank you for that, that solved the issue.
>
> Unfortunately I get another issue: on one DC id <user> gives "no such
> user".
> Adding domain (id ad.domain\\<user>) does not help.
> Adding the whole domain (id ad.domain.tld\\<user>) does not help more.
>
> I did checked PAM, NSS and Samba configurations, this server is using same
> configurations as the two working DC. I'm puzzled.
>
> 2016-04-21 11:52 GMT+02:00 Jonathan Hunter <jmhunter1 at gmail.com>:
>
>> You can try "net cache flush" (if you want to inspect the cache, use "net
>> cache list")
>>
>> On 21 April 2016 at 10:40, mathias dufresne <infractory at gmail.com> wrote:
>>
>> > Hi all,
>> >
>> > Back on playing winbind I first configure PAM and NSS then tried id
>> > <my_user_name> without setting for that user uidNumber.
>> >
>> > This user get UID from idmap.
>> >
>> > I set up uidNumber into LDAP tree for that user but this user still get
>> uid
>> > from idmap rather than from uidNumber attribute.
>> >
>> > I set up another user with uidNumber into LDAP tree and after doing
>> that I
>> > tried "id <my_second_user>". Here id returns the content of uidNumber
>> LDAP
>> > attribute as user UID.
>> >
>> > Question: how to make the first user to get rid of idmaped UID?
>> > --
>> > To unsubscribe from this list go to the following URL and read the
>> > instructions:  https://lists.samba.org/mailman/options/samba
>> >
>>
>>
>>
>> --
>> "If we knew what it was we were doing, it would not be called research,
>> would it?"
>>       - Albert Einstein
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>
>


-- 
"If we knew what it was we were doing, it would not be called research,
would it?"
      - Albert Einstein