[Samba] Samba4 and idmap backend (ad/rid)
rpenny at f2s.com
Thu Apr 25 07:36:44 MDT 2013
On 25/04/13 14:11, Jaymzwise Jaymzwise wrote:
> I eventually managed to install and join a Samba4 server as a member in an
> AD environment but I have a problem with the id command.
> wbinfo commands work but when I launch id command with a domain user I get
> "user unknown".
> Here is my smb.conf (Took from Samba Wiki) :
> idmap config *:backend = tdb
> idmap config *:range = 70001-80000
> idmap config MYDOMAINNAME:backend = ad
> idmap config MYDOMAINNAME:schema_mode = rfc2307
> idmap config MYDOMAINNAME:range = 500-40000
> winbind nss info = rfc2307
> winbind trusted domains only = no
> winbind use default domain = yes
> winbind enum users = yes
> winbind enum groups = yes
> If I replace "idmap config MYDOMAINNAME:backend = ad" by "idmap config
> MYDOMAINNAME:backend = rid", id command works well. Why id command doesn't
> work with ad backend ?
Hi, what version of samba4 did you use? reason is, before 4.0.5 winbind
required the posix objectclasses posixAccount & posixGroup, these are no
longer required. But having said that, forget winbind and use sssd, it
is easier to use, have a look here:
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
More information about the samba