[Samba] Results of net idmap dump don't match input to net idmap restore

[samba.20.hmsdbryant at spamgourmet.com]

Greetings,

I'm trying to pre-populate a Samba winbindd idmap database with some fixed entries. But the output from "net idmap dump" does not match up to the input to a "net idmap restore" command.

Here's an example sequence.
-------------
#
# wc -l /tmp/usermapper.tmp
    1218 /tmp/usermapper.tmp
# head -3 /tmp/usermapper.tmp
UID 100001 S-1-5-15-735fc311-1cda3193-320a1743-45e
UID 100002 S-1-5-15-735fc311-1cda3193-320a1743-81a
UID 100003 S-1-5-15-735fc311-1cda3193-320a1743-7825
# rm /usr/local/samba/var/locks/winbindd_idmap.tdb
# cat /tmp/usermapper.tmp | net idmap restore
USER HWM: 100864  GROUP HWM: 100314
# net idmap dump /usr/local/samba/var/locks/winbindd_idmap.tdb | wc -l
     563
#
-------------

There are 1218 entries in the input, but only 563 in the output! Any idea what might be going on? 

I can forward copies of the input and output files if that would help.

Thanks!

David

P.S.

Here's a (sanitized) copy of my smb.conf
----------------- 
[global]
        # Start of host specific entries
        interfaces = 127.0.0.1 1.2.3.4
        netbios name = ULTRAZEN
        # End of Host specific entries

        # Global paramaters
        workgroup = WKGRP
        preferred master = No
        domain master = No
        wins server = 1.2.3.5

        # AD parameters
        realm = HMS.HARVARD.EDU
        password server = *
        security = ADS
        encrypt passwords = Yes

        # winbind parameters
        winbind separator = .
        winbind cache time = 10
        winbind enum users = yes
        winbind enum groups = yes
        winbind use default domain = yes
        template shell = /bin/tcsh
        template homedir = /export/samba/%U
        idmap uid = 70000-500000
        idmap gid = 70000-500000
-----------------
 
David Bryant - Unix Systems Administrator
Harvard Medical School - Boston Massachusetts