[samba] User/group enumeration range not being used

Kris Monstad kris.monstad at absolutestudios.co.uk
Thu May 24 13:19:15 GMT 2007



Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Kris Monstad wrote:
>   
>> Hi all,
>>
>> Samba newbie again...I thought I was sorted out yesterday but a few more
>> thing are plaguing me....
>>
>> I have in my smb.conf:
>>
>> idmap uid = 10000-20000
>> idmap gid = 10000-20000
>>
>> and
>>
>> winbind enum users = yes
>> winbind enum groups = yes
>>
>> however, 'getent passwd' shows users within the default enumeration
>> range (ie:16777550 or something like that!).This goes for groups too.  I
>> can't shake them off. All users are currently being asked for a username
>> and password which are rejected (which I assume is due to this mix up -
>> im not sure)
>>     
>
> Sounds like you are on RedHat and the high watermark
> in winbindd_idmap.tdb is already set above you range defined
> in smb.conf.  I suggest you rename winbindd_idmap.tdb to something
> else and restart winbindd (if you don't care about the existing
> SID/uid/gid mappings).
>
>
>
>
>
>
>
> cheers, jerry
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQFGVYCMIR7qMdg1EfYRAugzAKDbih7qNBRngwkfxN2ZbQ/WyhzECQCfV0zW
> FSonnVh7t12ssTbzRyS3aqQ=
> =hanX
> -----END PGP SIGNATURE-----
>   
Yeah, Im using RedHat. I tried as suggested above and the enumeration is 
behaving now.

Thanks again,
Kris





More information about the samba mailing list