[Samba] Using idmap backend = ad

[Anton Brinyov]

I'm sorry, I forgot to mention OS where Samba server is running.
It's FreeBSD 6.2

Best regards
Anton Brinyov.


Anton Brinyov пишет:
> Good day!
> 
> I have AD on Win2003 Server with Services For UNIX 3.5.
> When I try to set idmap backend = ad and type
> 
> # id <domain_user_name>
> 
> I get in log.winbindd-idmap following:
> 
> 
> [2007/11/07 18:09:18, 1] nsswitch/idmap_ad.c:idmap_ad_sids_to_unixids(613)
>   Could not get unix ID
> 
> AD user has SFU UID 20000000.
> 
> wbinfo -u prints correct lists of domain users,
> and when using idmap bakend = tdb winbind assign UID for users.
> 
> 
> Best regards
> Anton Brinyov.
> 
> P.S. Some configs:
> 
> smb.conf
> ----------------------------------------------------
> [global]
>         dos charset = cp866
>         unix charset = koi8-r
>         display charset = koi8-r
>         workgroup = MYDOMAIN
>         realm = MYDOMAIN.RU
>         server string = myserv
>         security = ADS
>         password server = ALPHA.MYDOMAIN.RU BETA.MYDOMAIN.RU
>         log file = /var/log/samba/log.%m
>         max log size = 50
>         socket options = SO_RCVBUF=8192 SO_SNDBUF=8192
>         local master = No
>         ldap ssl = no
>         idmap uid = 16777216-33554431
>         idmap gid = 16777216-33554431
>         template shell = /bin/csh
>         winbind separator = +
>         winbind use default domain = Yes
>         winbind nss info = template sfu
>         idmap backend = ad
>         inherit acls = Yes
>         map acl inherit = Yes
>         store dos attributes = Yes
> #       debug level = 10
> 
> [homes]
>         comment = Home Directories
>         read only = No
>         browseable = No
> 
> 
> nsswitch.conf
> ---------------------------------------------------
> group: files winbind
> group_compat: nis
> hosts: files dns
> networks: files
> passwd: files winbind
> passwd_compat: nis
> shells: files
>