[Samba] Winbind problem with GID range and idmap_rid

[Arendt, Volker]

Hello all,

We get a weird error on our 3.4.0 samba server. The log.winbind-idmap shows the following entries:

[2009/08/24 16:35:53,  0] winbindd/idmap.c:201(smb_register_idmap_alloc)
  idmap_alloc module ldap already registered!
[2009/08/24 16:35:53,  0] winbindd/idmap.c:201(smb_register_idmap_alloc)
  idmap_alloc module tdb already registered!
[2009/08/24 16:35:53,  0] winbindd/idmap.c:149(smb_register_idmap)
  Idmap module passdb already registered!
[2009/08/24 16:35:53,  0] winbindd/idmap.c:149(smb_register_idmap)
  Idmap module nss already registered!
[2009/08/24 16:35:53,  1] winbindd/idmap_tdb.c:445(idmap_tdb_allocate_id)
  Fatal Error: GID range full!! (max: 499999)

What can be the cause for this kind of error? Is our idmap_rid not configured correctly?  

Please have a look

Volker
smb.conf
-------------------------------------------
[global]

# --------------------------------------------------------
# setting base configuration parameters
#
# --------------------------------------------------------
workgroup = FB6
netbios name = FRIGG
server string = AFS
security = ADS
realm = FB6.UNI-WUPPERTAL.DE
auth methods = winbind
# password server = AD logon server
password server = 132.195.120.9 132.195.120.12
wins server = 132.195.120.12
client use spnego = yes
client signing = yes
# added wg. ticket #5344
#client lanman auth = no
#client ntlmv2 auth = yes
encrypt passwords = yes
host msdfs = no
#domain logons = yes

# fuer Samba 3.3.0
# damit keine verschluesselte Verbindung zum Domain Controller
# aufgebaut wird
ldap ssl = no
obey pam restrictions = no

# ---------------------------------------------------------
# printer settings
# ??? better disable these settings ???
# ---------------------------------------------------------
# printcap name = cups
# disable spoolss = Yes
# show add printer wizard = No
# ---------------------------------------------------------
# ID mapping parameters
# mapping windows users to unix users
# this is performed on the basis of sid on windows and
# unix with uid for users and gid for groups
# the backend parameter rid allows to get the same mapping
# form sid to uid because it is determined algorithmically
# that way we get the same mapping even if we use samba on
# several disparate systems
# CHANGE NOTIFICATIO: with v3.3.0 there are changes
# to idmap; idmap domains is no longer supported
# ---------------------------------------------------------
#idmap domains = FB6
#idmap backend = rid
idmap backend = tdb
idmap config FB6:backend   = rid
#idmap config FB6:base_rid  = 0
idmap config FB6:range     = 10000 - 499999
idmap uid = 10000-499999
idmap gid = 10000-499999

winbind separator =+
winbind use default domain = Yes
winbind enum users = no
winbind enum groups = no
winbind cache time = 60
winbind gid = 10000-499999
winbind uid = 10000-499999

#template homedir = /gpfs/fbb/user/%U
#template shell = /opt/pware/bin/bash
#use sendfile = Yes
#printing = cups
#ldap suffix = "dc=FB6, dc=UNI-WUPPERTAL, dc=DE"

#-------------------------------------------------------
# Logging options
#
#-------------------------------------------------------
#
# higher log levels have a negative impact on performance
log level = 3
log file = /opt/pware/var/log/fbb.frigg.log.%m
max log size = 500000
debug timestamp = yes
#utmp = yes

#-------------------------------------------------------
# ACL Support
#
#-------------------------------------------------------
map acl inherit = yes
nt acl support = yes
inherit acls = yes
inherit permissions = yes
inherit owner = yes
admin users = @"FB6+domain admins"

#-------------------------------------------------------
# Performance options
#
#-------------------------------------------------------
socket options = TCP_NODELAY IPTOS_LOWDELAY

# comment: VA, 01.05.2008
# deactivated, as it seems that this was our performance killer
# the original values were 8192 each; i have adapted both
# parameter values for AIX configuration
# SO_RCVBUF=16384 SO_SNDBUF=16384


#-------------------------------------------------------
# Include Configuration Files
#
#-------------------------------------------------------
include = /opt/pware/lib/fbb-user.conf
include = /opt/pware/lib/fbb-ls.conf
include = /opt/pware/lib/fbb-apps.conf
include = /opt/pware/lib/fbb-projekte.conf
include = /opt/pware/lib/fbb-profiles.conf