[Samba] Winbind group mapping problem

[Dale Schroeder]

Which winbind idmap backend are you using?
The default tdb backend generates id's randomly (which appears to be 
your case), meaning you will have to do a lot of chown commands on box B.
For consistent mappings, use something like idmap_rid.

http://us6.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html#id2598850

Dale


Ben Tisdall wrote:
> Hello all,
>
> I have 2 boxes with identical smb.conf files apart from the netbios
> name. The contents of the shares have been copied from one to the other
> preserving the UNIX UIDs/GIDs and both boxes join to the AD domain
> without problems. The domain sid is the same on both machines.
>
> However, something isn't right with the group mapping:
>
> Box A (shows the correct AD groups with ls -l)
>
> //user at host//:~$ getent group 10012
> OURDOMAIN\domain users:*:10012:
>
> Box B (show mostly UIDs/GIDs with ls -l)
>
> //user at host//:~$ getent group 10004
> OURDOMAIN\domain users:*:10004:
>
> Can anyone give me a clue as to where to start looking to debug this?
>
> Many thanks in advance.
>
> Ben Tisdall
>