[Samba] winbind in 3.5.x does not automatically allocate uids

Christopher Chan christopher.chan at bradbury.edu.hk
Mon Jan 30 18:51:50 MST 2012

hi all,

I am using samba 3.5.5 with ldap as the backend for winbind.

It will create entries in ou=Idmap,dc=bradbury,dc=lan if I run wbinfo 
--set-u/gid-mapping but it won't do it automatically. What gives? What's 
different about idmap_ldap in 3.5.x compared to previous versions of samba?

Config below for winbind.

passdb backend = ldapsam
ldap ssl = off
ldap delete dn = yes
ldap user suffix = ou=People
ldap group suffix = ou=Groups
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=Idmap
ldap suffix = dc=bradbury,dc=lan

winbind normalize names = no
         winbind use default domain = yes
         winbind enum users = yes
         winbind enum groups = yes
         winbind nss info = template
         template homedir = /export/home/%D/%U
         template shell = /bin/bash
         idmap uid = 500 - 550000
         idmap gid = 500 - 100000
         idmap config BRADBURY:backend = ldap
         idmap config BRADBURY:default = yes
         idmap config BRADBURY:readonly = no
         idmap config BRDABURY:ldap_base_dn = ou=Idmap,dc=bradbury,dc=lan
         idmap config BRADBURY:ldap_user_dn = cn=Directory Manager
         idmap config BRADBURY:ldap_url = ldap://localhost
         idmap config BRADBURY:range = 500 - 550000

         idmap alloc backend = ldap
         idmap alloc config:ldap_base_dn = ou=Idmap,dc=bradbury,dc=lan
         idmap alloc config:ldap_user_dn = cn=Directory Manager
         idmap alloc config:ldap_url = ldap://localhost
         idmap alloc config:range = 500 - 550000

         idmap backend = ldap:ldap://localhost

More information about the samba mailing list