[Samba] IDMAP_RID with Winbind works for groups but not users
andrew.lyon at gmail.com
Wed Mar 24 14:07:34 MDT 2010
I've also tried storing the gid and uid in active directory by
installing the nisprop dll and exposing the unix attributes in aduac,
again it works for groups but not for users, users still have
sequential uid and it differs between samba servers.
Am I missing something? Could somebody post a example working config
for consistent mapping of uid and gid to thise held in ad or using
On 3/22/10, Andrew Lyon <andrew.lyon at gmail.com> wrote:
> I've setup samba 3.4.7 to use idmap_rid as per the documentation:
> idmap backend = rid:DOMAIN=500-100000000
> idmap gid = 500-100000000
> imap uid = 500-100000000
> It seems to work for groups:
> wbinfo --group-info="domain admins"
> domain admins:x:100512
> PsGetSid v1.43 - Translates SIDs to names and vice versa
> Copyright (C) 1999-2006 Mark Russinovich
> Sysinternals - www.sysinternals.com
> SID for DOMAIN\domain admins:
> But not for users:
> wbinfo --user-info=administrator
> SID for DOMAIN\administrator:
> wbinfo --user-info="Test User"
> test user:*:10048:10005:Test User:/home/DOMAIN/test user:/bin/zsh
> SID for DOMAIN\test user:
> Have I made a mistake in the configuration?
Sent from my mobile device
More information about the samba