[Samba] Group mapping giving incorrect GIDs

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Eric Roseme wrote:
> a.nielsen at research.uq.edu.au wrote:
> 
>> Hi,
>>
>> I think I've narrowed down my problem to the fact that the group
>> mapping is
>> not giving me the same GID for all 'equivalent' groups, as seen here:
>>
>> $ net groupmap list
>> DOMAIN\Group1 (S-1-5-21-620321403-24207062-1845911597-172256) -> unixgrp1
>>
>> $ getent group unixgrp1
>> unixgrp1:x:203:
>>
>> $ getent group DOMAIN\\Group1
>> DOMAIN\Group1:x:10001:DOMAIN\User1
>>
>> This means that the GID of unixgrp1 is 203, however the GID of
>> DOMAIN\Group1
>> is completely different!  Given the group mapping, I was expecting
>> that both
>> groups would be returned with a GID of 203, so that according to the
>> Linux
>> box both those groups are the same.

group mapping on domain members is mutually exclusive with running
winbindd.  Usually that is.

If you do not define a idmap uid and idmap gid ranges, then winbindd
should fall back to using the group mapping. and you better have
mappings for all domain groups.  It's an all or none decision.





cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDcjkyIR7qMdg1EfYRAsYcAKCK2oOlebBBncMlnUIhflF/Wuqf8QCbBU7z
F9SQfhcbhVksKzjfmQ01B1U=
=f1Ld
-----END PGP SIGNATURE-----