[Samba] winbind user mapping problem

Bruno Martins bmomartins at gmail.com
Fri Dec 30 02:44:34 MST 2011


Hello list,

I am using Samba + winbind and I have some users that cannot access
shares on this server, getting the following error in
'/var/log/samba':
[2011/12/30 09:33:08.072315,  1] smbd/sesssetup.c:454(reply_spnego_kerberos)
  Username GALILEU-F\teste is invalid on this system

Also, in 'winbind-idmap' log file I am getting this:
[2011/12/30 09:32:56.902810,  1] winbindd/idmap_tdb.c:445(idmap_tdb_allocate_id)
  Fatal Error: UID range full!! (max: 120000)

So what happens in reality? Trying to 'getent' that user results in
nothing, so no mapping, right?
root at sputnik:/var/cache/samba# getent passwd bmartins
bmartins:*:100001:100000::/home/GALILEU-F/bmartins:/bin/false
root at sputnik:/var/cache/samba# getent passwd teste
root at sputnik:/var/cache/samba#

However, 'wbinfo' works for that user:
root at sputnik:/var/cache/samba# wbinfo -u | grep teste
teste

My 'smb.conf' returns this, regarding to idmap parameters:
root at sputnik:/var/cache/samba# cat /etc/samba/smb.conf | grep idmap
#       idmap uid = 10000-200000
        idmap uid = 100000-120000
#       idmap gid = 300000-400000
        idmap gid = 100000-120000

I have tried lower and higher values, did a reload on winbind service,
but nothing seems to help.

Could you please help me on this?

Best regards,

Bruno Martins


More information about the samba mailing list