[Samba] ldap idmap backend

[Vladimir Vassiliev]

17.03.2011 16:27, Frank Mori Hess пишет:
> On Thursday, March 17, 2011, Vladimir Vassiliev wrote:
>> Hi all,
>>
>> i use Samba 3.5.6 in ads mode (Windows 2008R2) with ldap idmap backend.
>> Servers run Centos 4 and 5. I can't cope with next issue for long time.
>>
>> On all servers in domain winbind constantly tries to create mapping for
>> <SID>-513
>> and fails because of already existing entry.
>> It just wastes gid range.
>
>
> I had that problem.  In my case, doing an "ldapsearch -x sambaSID=<SID>-513"
> found two idmap entries (in different ou).  After I deleted one of them with
> ldapdelete, it stopped having that error and stopped trying to create new
> entries.

Were these mappings identical or not?

-- 
Vladimir Vassiliev