[Samba] Winbind backend = ldap pull uid-number and gid-number ldap values ?

[Rowland Penny]

On 03/12/13 21:07, Werthmuller, Derek wrote:
> If I use sudo samba-tool user add <username> --uid-number=5000 and manually ad the gid-number via ldapadd to the Samba AD, does the winbind backend=ldap make use of those values?   Or does it just use LDAP to retrieve the sAMAccountName and primaryGroupID ?
>
>
> Thanks
>                  Derek
>
> Derek Werthmuller
> Director of Technology Innovation and Services
> Center for Technology in Government
> 518.442.3892
> www.ctg.albany.edu
>
>
Hi, you can use samba-tool to add the gidNumber in the same way as 
adding the uidNumber, but I think that you are mixing up gidNumber and 
primaryGroupID, they are separate things. gidNumber being the users 
Linux group and primaryGroupID being the users primary window group.
Winbind can be setup to extract the values that you require, but the 
backend would be ADS i.e.
idmap config WORKGROUP:backend = ad

I think it might help if you posted what version of samba 4 you are 
using, what version of samba you want to connect to the AD and the 
relevant conf files you think you should be using, then we can try to 
get you up and running.

Rowland