[Samba] Samba Fatal Error: GID range full!! (max: 20000)

[Eric Diven]

A couple of obvious questions:  

I'm going to assume you've restarted winbindd and smbd, but I thought
I'd mention it because I've done similarly dumb things.

How many users/groups are you enumerating into winbind?  It seems like
unless you're on a huge domain, you're not going to have 20000.  wbinfo
-u | wc -l will tell you how many mappings it has currently.  If it's a
large number, say 20000, you may need to set winbind enum users = no
(and likewise for groups)

Does the new range overlap the previous working range?  If not, is it
possible you've orphaned the uids and gids in the old range?  I haven't
looked at the winbind code, that's purely speculative, but it's
something to try while somebody more authoritative mulls over your
question.

~Eric

-----Original Message-----
From: samba-bounces+eric.diven=edsiohio.com at lists.samba.org
[mailto:samba-bounces+eric.diven=edsiohio.com at lists.samba.org] On Behalf
Of Tim Evans
Sent: Monday, November 19, 2007 4:19 PM
To: samba at lists.samba.org
Subject: Fw: Re: [Samba] Samba Fatal Error: GID range full!! (max:
20000)


On Mon, 19 Nov 2007 12:32:39 -0600, Dale Schroeder wrote
> Tim,
> 
> My guess is that your "idmap uid =" and "idmap gid =" ranges are not 
> large enough.  See:
> http://www.linuxquestions.org/questions/linux-networking-3/samba-
> problem-getent-differs-from-wbinfo-493615/

I have set large, non-overlapping ranges for idmap uid and gid.

Although the error messages about the GID range are no longer seen,
users still cannot access their shares.

> If this doesn't help you, please post your smb.conf

Only changes from the working smb.conf from yesterday are the reset
idmap ranges and the debug level setting.

[global]
workgroup = JJS-SDM
netbios name = appian
server string = appian
hosts allow = 192.168.1. 127.
log file = /var/log/samba/%m.log
debug level = 5
max log size = 50
security = user
encrypt passwords =  no
unix password sync = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
*passwd
:*all*authentication*tokens*updated*successfully*
winbind separator = +
idmap uid = 100000-300000
idmap gid = 100000-300000
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
template homedir = /home/winnt/%D/%U
template shell = /bin/bash
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 local master
= no domain master = no preferred master = no domain logons = no wins
server = 192.168.1.250 dns proxy = no


--
Tim Evans, TKEvans.com, Inc.    |    5 Chestnut Court
UNIX System Admin Consulting    |    Owings Mills, MD 21117
http://www.tkevans.com/         |    443-394-3864
http://www.come-here.com/News/  |    tkevans at tkevans.com

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
an/listinfo/samba