Samba4 winbind: use rfc2307 not working with winbind [SOLVED]

[steve]

On 07/08/12 07:37, Andrew Bartlett wrote:
> On Tue, 2012-08-07 at 01:08 +0200, steve wrote:
>> On 08/06/2012 08:55 PM, Jeremy Allison wrote:
>>> On Mon, Aug 06, 2012 at 08:29:28PM +0200, steve wrote:
>>>> On 08/06/2012 01:42 PM, Gémes Géza wrote:
>>>>> 2012-08-06 12:31 keltezéssel, steve írta:
>>>>>> Hi
>>>>>> Here is my smb.conf:
>>>>>> [global]
>>>>>>          workgroup = ALTEA
>>>>>>          realm = hh3.site
>>>>>>          netbios name = HH30
>>>>>>          server role = active directory domain controller
>>>>>>          passdb backend = samba4
>>>>>>          idmap_ldb : use rfc2307 = Yes
>>>> It was the syntax.
>>>> The syntax needs to be very tight:
>>>> Compare:
>>>> idmap_ldb : use rfc2307 = Yes
>>>> with:
>>>> idmap_ldb:use rfc2307=Yes
>>>>
>>>> The latter works. I thought that white space was ignored in smb.conf. . .
>>> Ah - yes, white space is ignored, but maybe not in
>>> parameterized options.
>>>
>>> So you need:
>>>
>>> "idmap_ldb:use rfc2307" to be exact, but we shouldn't care
>>> about the spacing around the "= yes" I don't think.
>>>
>>> Jeremy.
>> Hi
>> Thanks. But anyway it only works for groups, not users.
>> If posixGroup and gidNumber are present for a group it maps from AD. For
>> posixAccount and uidNumber, an entry is created in idmap.ldb and that is
>> used instead of the uidNumber in AD
>>
>> Is there anything we can do to fix this?
>
> Steve,
>
> Indeed, there is something you can do.  As I suggested when you last had
> trouble here:
>
> I would suggest debugging the source.
>

I found it. samba (and winbindd?) have to be restarted if any changes 
are made to smb.conf
Cheers,
Steve