[Samba] multiple winbind w/ common backend?

[Thomas Limoncelli]

I'm successfully running multiple Samba 3.0.14a hosts as Domain Member Servers with winbind (default TDB backend) against a single AD domain. However, the Un*x uids and gids for the AD accounts are created by winbind as it comes across them, so they're not necessarily in sync between the Un*x hosts (although in the same configured range), thus violating good practise.

Is there a way to achieve synchronized uids/gids on multiple winbind hosts? E.g. is it possible (read: advisable) to point all winbinds to the exact same LDAP idmap backend? If there are caveats concerning concurrent access, is there a different way?

Suggestions highly appreciated.


-- Thomas
_________________________________________________________________________
Mit der Gruppen-SMS von WEB.DE FreeMail können Sie eine SMS an alle 
Freunde gleichzeitig schicken: http://freemail.web.de/features/?mc=021179