[Samba] duplicate uid between over a trust

[gregorcy]

On 11/15/10 11:33, gregorcy wrote:
> Hi,
> 
> I having a problem where different users from different domain connected via a trust are being assigned the same uid.
> For example:
> 
>>> www3 ~ #  getent passwd | grep 2933    
>>>> gregorcy:*:2933:1013:Brian Gregorcy:/home/CHE/gregorcy:/bin/bash
>>>> USERS+mualenzu:*:2933:547:mualenzu:/home/USERS/mualenzu:/bin/bash
>>
>>>> gregorcy at fluent ~ $ ssh CHE+gregorcy at vwww3
>>>> Password: 
>>>> Last login: Mon Nov 15 11:05:47 MST 2010 from fluent.che.utah.edu on ssh
>>>> USERS+mualenzu at vwww3 ~ $ 
> 
> 
> I am wondering if there is a way to configure samba so the users get different uid assigned.  This is what I have for a
> smb.conf
> 
>> [global]
>>         workgroup                       = CHE
>>         netbios name                    = vwww3
>>         realm                           = CHE.UTAH.EDU
>>         server string                   = CHE web server
>>         security                        = ADS
>>         preferred master                = no
>>         client use spnego               = yes
>>         server signing                  = auto
>>         encrypt passwords               = yes
>>         nt acl support                  = yes
>>         acl map full control            = yes
>>         wide links                      = no
>>         password server                 = *
>>         log level                       = 3
>>         log file                        = /var/log/samba/%m
>>         max log size                    = 100
>>         winbind offline logon            = yes
>>         idmap backend                   = tdb
>>         idmap uid = 500-100000
>>         idmap gid = 500-100000
>>         winbind separator               = +
>>         winbind use default domain      = yes
>>         winbind enum users              = yes
>>         winbind enum groups             = yes
>>         winbind refresh tickets         = yes
>>         winbind nested groups           = yes
>>         client ntlmv2 auth              = yes
>>         encrypt passwords               = yes
>>         template shell                  = /bin/bash
>>         allow trusted domains           = no
> 
> 
> Any ideas?  I have been playing with the settings idmap config DOMAIN : range =  but I have not had any success.
> 

Found the issue, I removed this line:

> idmap backend                   = rid:KPAK=500-100000000


Readded it and everything is working.


--Brian