[Samba] duplicate uid between over a trust

[gregorcy]

Hi,

I having a problem where different users from different domain connected via a trust are being assigned the same uid.
For example:

>> www3 ~ #  getent passwd | grep 2933    
>> >gregorcy:*:2933:1013:Brian Gregorcy:/home/CHE/gregorcy:/bin/bash
>> >USERS+mualenzu:*:2933:547:mualenzu:/home/USERS/mualenzu:/bin/bash
> 
>> > gregorcy at fluent ~ $ ssh CHE+gregorcy at 155.98.115.135
>> > Password: 
>> > Last login: Mon Nov 15 11:05:47 MST 2010 from fluent.che.utah.edu on ssh
>> > USERS+mualenzu at vwww3 ~ $ 


I am wondering if there is a way to configure samba so the users get different uid assigned.  This is what I have for a
smb.conf

> [global]
>         workgroup                       = CHE
>         netbios name                    = vwww3
>         realm                           = CHE.UTAH.EDU
>         server string                   = CHE web server
>         security                        = ADS
>         preferred master                = no
>         client use spnego               = yes
>         server signing                  = auto
>         encrypt passwords               = yes
>         nt acl support                  = yes
>         acl map full control            = yes
>         wide links                      = no
>         password server                 = *
>         log level                       = 3
>         log file                        = /var/log/samba/%m
>         max log size                    = 100
>         winbind offline logon            = yes
>         idmap backend                   = tdb
>         idmap uid = 500-100000
>         idmap gid = 500-100000
>         winbind separator               = +
>         winbind use default domain      = yes
>         winbind enum users              = yes
>         winbind enum groups             = yes
>         winbind refresh tickets         = yes
>         winbind nested groups           = yes
>         client ntlmv2 auth              = yes
>         encrypt passwords               = yes
>         template shell                  = /bin/bash
>         allow trusted domains           = no


Any ideas?  I have been playing with the settings idmap config DOMAIN : range =  but I have not had any success.

Thanks for the help,


--Brian Gregorcy