[Samba] Can we update idmap documentation for 3.6?

Heather Choi hceuterpe at gmail.com
Tue Apr 16 21:49:15 MDT 2013


Just when I thought I had idmap changes correct for 3.6, I realize I 
have a setup that's not quite right:
getent passwd
->No AD users
getent passwd DOMAINA\\aduser
aduser:*:1001601:1000513::/home/aduser:/bin/bash

Shouldn't "getent passwd" show both local and AD users?

Samba has had such an identity crisis over the years with idmap 
documentation.  Depending, on where you look, even samba.org, different 
documentation states outdated configuration examples if you are using 
3.6. And some of it almost even seems to contradict each other? Now I'm 
not really sure anymore what to reference for 3.6's latest id mapping 
configuration file changes..
For instance, I'm not sure which one is correct anymore:
is it:
     idmap config * : backend        = tdb
     idmap config * : range          = 9000000-9999999

     idmap config DOMAINA : backend     = rid
     idmap config DOMAINA : range       = 1000000 - 1999999

     idmap config DOMAINB : backend     = rid
     idmap config DOMAINB : range       = 2000000 - 2999999
or:
     idmap config * : backend        = tdb
     idmap config * : range          = 1000000-2999999

     idmap config DOMAINA : backend     = rid
     idmap config DOMAINA : range       = 1000000 - 1999999

     idmap config DOMAINB : backend     = rid
     idmap config DOMAINB : range       = 2000000 - 2999999


Can we have a sane effort to publish updated documentation for id 
mapping that's relevant to Samba 3.6?



More information about the samba mailing list