[Samba] ADS Domain Member smb.conf using idmap_ad

Jonathan Buzzard jonathan at buzzard.me.uk
Wed Nov 23 04:45:16 MST 2011


On Tue, 2011-11-22 at 16:47 -0500, Freeman wrote:

[SNIP]

> # this doesn't seem to work for some reason
> # i am trying to use idmap_ad
> #   idmap backend = ad
>     idmap backend = tdb
>     idmap uid = 1000-5000000
>     idmap gid = 1000-5000000
> 
>     idmap config AD : default = yes
>     idmap config AD : cache time = 180
>     idmap config AD : backend  = ad
>     # idmap config AD : range = 100001-200000
>     idmap config AD : schema_mode = rfc2307
> 
> 

Your problem is the id ranges for the tdb and ad backends overlap. I am
not sure exactly why this is a problem, but the basics are it don't work
if they do. Fix that, and restart everything and it will all start
magically working.

JAB.

-- 
Jonathan A. Buzzard                 Email: jonathan (at) buzzard.me.uk
Fife, United Kingdom.




More information about the samba mailing list