[Samba] winbind user mapping problem

[Lantukh Sergey]

The database is here (in Linux/Debian):
  /var/lib/samba/winbindd_idmap.tdb
try to just delete (move/rename) it and then restart winbind.
But do not forget about BACKUP!

I had this problem and this solution helped me

In AD there are not only users but also as a special accounts like 
krbtgt and groups and more...

On 30/12/2011 13:00, Bruno Martins wrote:
> Hello mate,
>
> Thanks for your answer. How can I do that?
>
> I've noticed this:
> root at sputnik:/var/lib/samba# wbinfo -u | wc -l
> 140
>
> root at sputnik:/var/lib/samba# tdbbackup -v winbindd_idmap.tdb
> winbindd_idmap.tdb : 521 records
>
> Is this normal? 140 users on AD (seems correct), but 521 mappings?
>
> Best regards,
>
> Bruno Martins
>
> On Fri, Dec 30, 2011 at 11:57 AM, Lantukh Sergey
> <sergey.lantukh at docpath.com>  wrote:
>> Hello
>> I think that you need to clean the Winbind database that contains bridge
>> between UID/GID - SID
>> And then restart winbind, and he again will fill the database
>>
>>
>> On 30/12/2011 10:44, Bruno Martins wrote:
>>> Hello list,
>>>
>>> I am using Samba + winbind and I have some users that cannot access
>>> shares on this server, getting the following error in
>>> '/var/log/samba':
>>> [2011/12/30 09:33:08.072315,  1]
>>> smbd/sesssetup.c:454(reply_spnego_kerberos)
>>>    Username GALILEU-F\teste is invalid on this system
>>>
>>> Also, in 'winbind-idmap' log file I am getting this:
>>> [2011/12/30 09:32:56.902810,  1]
>>> winbindd/idmap_tdb.c:445(idmap_tdb_allocate_id)
>>>    Fatal Error: UID range full!! (max: 120000)
>>>
>>> So what happens in reality? Trying to 'getent' that user results in
>>> nothing, so no mapping, right?
>>> root at sputnik:/var/cache/samba# getent passwd bmartins
>>> bmartins:*:100001:100000::/home/GALILEU-F/bmartins:/bin/false
>>> root at sputnik:/var/cache/samba# getent passwd teste
>>> root at sputnik:/var/cache/samba#
>>>
>>> However, 'wbinfo' works for that user:
>>> root at sputnik:/var/cache/samba# wbinfo -u | grep teste
>>> teste
>>>
>>> My 'smb.conf' returns this, regarding to idmap parameters:
>>> root at sputnik:/var/cache/samba# cat /etc/samba/smb.conf | grep idmap
>>> #       idmap uid = 10000-200000
>>>          idmap uid = 100000-120000
>>> #       idmap gid = 300000-400000
>>>          idmap gid = 100000-120000
>>>
>>> I have tried lower and higher values, did a reload on winbind service,
>>> but nothing seems to help.
>>>
>>> Could you please help me on this?
>>>
>>> Best regards,
>>>
>>> Bruno Martins
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba