[Samba] Group mapping giving incorrect GIDs

Gerald (Jerry) Carter jerry at samba.org
Wed Nov 9 18:00:18 GMT 2005

Hash: SHA1

Eric Roseme wrote:
> a.nielsen at research.uq.edu.au wrote:
>> Hi,
>> I think I've narrowed down my problem to the fact that the group
>> mapping is
>> not giving me the same GID for all 'equivalent' groups, as seen here:
>> $ net groupmap list
>> DOMAIN\Group1 (S-1-5-21-620321403-24207062-1845911597-172256) -> unixgrp1
>> $ getent group unixgrp1
>> unixgrp1:x:203:
>> $ getent group DOMAIN\\Group1
>> DOMAIN\Group1:x:10001:DOMAIN\User1
>> This means that the GID of unixgrp1 is 203, however the GID of
>> DOMAIN\Group1
>> is completely different!  Given the group mapping, I was expecting
>> that both
>> groups would be returned with a GID of 203, so that according to the
>> Linux
>> box both those groups are the same.

group mapping on domain members is mutually exclusive with running
winbindd.  Usually that is.

If you do not define a idmap uid and idmap gid ranges, then winbindd
should fall back to using the group mapping. and you better have
mappings for all domain groups.  It's an all or none decision.

cheers, jerry
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org


More information about the samba mailing list