[Samba] idmap_ad - winbind - Wrong $HOME

Aiko Barz aiko at deepco.de
Mon Sep 29 13:11:07 GMT 2008


Hi,

my winbind installation lists the wrong $HOME for my users. While
ldapsearch shows the correct $HOME, getent does not. 

### ldapsearch ###
$ ldapsearch -x -LLL -H ldaps://ad.domain.de -D Administrator at domain.local -S dn -s sub -W "(&(objectCategory=user)(sAMAccountName=aba))" unixHomeDirectory
Enter LDAP Password:
dn: CN=Aiko Barz,OU=Users,DC=domain,DC=local
unixHomeDirectory: /net/homeserver.domain.de/home/aba
### ldapsearch ###

### getent ###
$ getent passwd aba
aba:*:12345:1024:Aiko Barz:/home/DOMAIN/aba:/bin/false
### getent ###

=> "/net/homeserver.domain.de/home/aba" != "/home/DOMAIN/aba"

### smb.conf ###
[global]
netbios name = SERVER
workgroup = DOMAIN
realm = DOMAIN.LOCAL
preferred master = no
domain master = No
server string = %h
security = ADS
log level = 3
log file = /var/log/samba/%m
max log size = 50
syslog = 0
panic action = /usr/share/samba/panic-action %d
wins server = 10.11.12.13
winbind separator = +
printcap name = cups
printing = cups
nt acl support = yes

idmap domains = DOMAIN
idmap config DOMAIN:backend = ad
idmap config DOMAIN:default = yes
idmap config DOMAIN:range = 1024-1000000
idmap config DOMAIN:schema_mode = rfc2307

winbind enum users = Yes
winbind cache time = 86400
winbind enum groups = Yes
winbind nss info = rfc2307
winbind use default domain = Yes

[data]
comment = Data
path = /data/samba
read only = No
read list = @DOMAIN+Workgroup
write list = @DOMAIN+Workgroup
hide dot files = Yes
create mask = 0666
fstype = Samba
### smb.conf ###

I use Debian/Lenny at the moment:
ii winbind 2:3.2.3-1

Thanks in advance,
  Aiko
-- 
:wq ✉


More information about the samba mailing list