Samba4 Linux user has two uid's

Gémes Géza geza at kzsdabas.hu
Thu Mar 21 16:10:53 MDT 2013


2013-03-21 21:01 keltezéssel, Rowland Penny írta:
> HI,
> If You join a S3 client to a S4 domain you get a different uid on the 
> client and server i.e.
>
> Info from the client
> $ id user
> uid=21105(user) gid=20513(domain_users) 
> groups=20513(domain_users),1101(BUILTIN\users)
>
> Info from the server
> # id user
> uid=3000016(DOMAIN\user) gid=100(users) groups=100(users)
>
> Now if you mount a share onto the client from the server via pam_script:
>
> mount -t cifs //server/dropbox /home/dropbox -o 
> username=user,cruid=userid,sec=krb5i,multiuser,nobrl,mapchars,mfsymlinks,noserverino 
>
>
> If a file is now created in the share by the user, the user 
> immediately looses all rights to it from the client.
>
> Is this a CIFS problem or a Samba4 problem?
>
Hi,

Please check that you have the following:

For samba4 use rfc2370 and specify the uids gids (using e.g. ADUC), 
copy/symlink the libnss files and allow winbind in /etc/nsswitch.conf
For samba3 use idmap_ad with a range that covers the assigned uids/gids.

If that is configured and don't work as expected please post your 
smb.conf (both from AD and client system) and an ldif for an user 
obtained by ldbsearch.

Regards

Geza Gemes


More information about the samba-technical mailing list