[Samba] winbind user mapping problem

[Bruno Martins]

Hello mate,

Thanks for your answer. How can I do that?

I've noticed this:
root at sputnik:/var/lib/samba# wbinfo -u | wc -l
140

root at sputnik:/var/lib/samba# tdbbackup -v winbindd_idmap.tdb
winbindd_idmap.tdb : 521 records

Is this normal? 140 users on AD (seems correct), but 521 mappings?

Best regards,

Bruno Martins

On Fri, Dec 30, 2011 at 11:57 AM, Lantukh Sergey
<sergey.lantukh at docpath.com> wrote:
> Hello
> I think that you need to clean the Winbind database that contains bridge
> between UID/GID - SID
> And then restart winbind, and he again will fill the database
>
>
> On 30/12/2011 10:44, Bruno Martins wrote:
>>
>> Hello list,
>>
>> I am using Samba + winbind and I have some users that cannot access
>> shares on this server, getting the following error in
>> '/var/log/samba':
>> [2011/12/30 09:33:08.072315,  1]
>> smbd/sesssetup.c:454(reply_spnego_kerberos)
>>   Username GALILEU-F\teste is invalid on this system
>>
>> Also, in 'winbind-idmap' log file I am getting this:
>> [2011/12/30 09:32:56.902810,  1]
>> winbindd/idmap_tdb.c:445(idmap_tdb_allocate_id)
>>   Fatal Error: UID range full!! (max: 120000)
>>
>> So what happens in reality? Trying to 'getent' that user results in
>> nothing, so no mapping, right?
>> root at sputnik:/var/cache/samba# getent passwd bmartins
>> bmartins:*:100001:100000::/home/GALILEU-F/bmartins:/bin/false
>> root at sputnik:/var/cache/samba# getent passwd teste
>> root at sputnik:/var/cache/samba#
>>
>> However, 'wbinfo' works for that user:
>> root at sputnik:/var/cache/samba# wbinfo -u | grep teste
>> teste
>>
>> My 'smb.conf' returns this, regarding to idmap parameters:
>> root at sputnik:/var/cache/samba# cat /etc/samba/smb.conf | grep idmap
>> #       idmap uid = 10000-200000
>>         idmap uid = 100000-120000
>> #       idmap gid = 300000-400000
>>         idmap gid = 100000-120000
>>
>> I have tried lower and higher values, did a reload on winbind service,
>> but nothing seems to help.
>>
>> Could you please help me on this?
>>
>> Best regards,
>>
>> Bruno Martins
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba