[Samba] issue with multiple Samba DC and uid/gid assignment.

[Rowland Penny]

On 25/08/13 15:06, dahopkins at comcast.net wrote:
> Steve and Rowland,
>
> Thanks! I checked smb.conf on both servers and they are identical except for the netbios name. I still get different uid/gid numbers between the servers with wbinfo, even for accounts such as mine (dhopkins) that have been active for years (previous ldap+samba authentication) The smb.conf for the second server is:
>
> # Global parameters
> [global]
> workgroup = NEWARKCHARTER
> realm = ncs.k12.de.us
> netbios name = NCSSAMBA1
> server role = active directory domain controller
> idmap_ldb:use rfc2307 = yes
> dns forwarder=10.1.1.10
> allow dns updates=nonsecure and secure
> # server services = +smb -s3fs
> # dcerpc endpoint servers = +winreg +srvsvc
>
> [netlogon]
> path = /usr/local/samba/var/locks/sysvol/ncs.k12.de.us/scripts
> read only = No
>
> [sysvol]
> path = /usr/local/samba/var/locks/sysvol
> read only = No
>
> [Profiles]
> path = /opt/samba/Profiles
> read only = no
>
> [home]
> path=/home
> read only=no
>
> I am a little confused about nscd and nslcd. I run nscd. Should I also be running nslcd on the samba 4 DCs? I am using nss-pam-ldapd with nslcd and nscd on my linux LTSP servers and the linux samba4/samba3 file servers but apparently I had a mistaken impression that I shouldn't run these on the domain controllers. I will add them. Finally, for the names, I can use lower case but our prior account naming convention was using the format given and this is the format of many names in the existing ldap database that was used via classicupgrade to provision samba4. If it will cause issues, I'll have to find a way to resolve it.
>
> Thanks!
> Dave
>
> ----- Original Message -----
>
> From: "steve" <steve at steve-ss.com>
> To: samba at lists.samba.org
> Sent: Sunday, August 25, 2013 6:56:37 AM
> Subject: Re: [Samba] issue with multiple Samba DC and uid/gid assignment.
>
> On Sat, 2013-08-24 at 23:27 +0000, dahopkins at comcast.net wrote:
>> A quick follow-on ... if I examine the local sam.ldb on the server2 via ldbedit, it appears the information is correct, but wbinfo still reports different numbers:
>>
> Replication OK then.
>
>> wbinfo -i Test24.User
>> Domain\Test24.User:*:3000134:100::/home/Domain/Test24.User:/bin/false
> idmap_ldb use:rfc2307 = Yes
> nscd not running
> ??
>
>
Hi, could you please post the smb.conf from both the RHEL5.9 & Ubuntu 
12.04 fileservers

Rowland