[Samba] Missing secondary groups

Gaiseric Vandal gaiseric.vandal at gmail.com
Mon Nov 29 12:44:06 MST 2010

idmapping does not work perfectly for me.   idmap_ad backend means it 
should use active directory info to determine the unix uid and gid.  It 
may bypass the issues with local tdb files.

If you read the man page on wbinfo, you can manually allocate uid's and 

[--set-uid-mapping uid,sid]

On 11/29/2010 12:39 PM, Peter Trifonov wrote:
> Hi,
>> The problem seems to be with idmapping.    In you smb.conf file do you
>> have a section for "idmap"-  this tells samba which unix user id and group
> id
>> ranges can be used to correspond to windows users and id's.
>> the docs on samba.org may be a little out of date so you should also check
>> the man pages for smb.conf and idmap_ad.
> I have the following in my smb.conf:
>          idmap uid = 10000-20000
>          idmap gid = 10000-20000
> As far as I understand, Samba used tdb backend by default. I do not need
> idmap_ad, so it is not configured.
> ID mapping seems to works, since the command
> Id petert
> correctly reports UID and GID of a domain user.  However, it shows only a
> single entry in the group list.
> The key to the problem seems  to be the message "  getgrent failed:
> which is logged by winbind every time I run the id command.
> With best regards,
> P. Trifonov

More information about the samba mailing list