[Samba] Winbind troubles

[steve]

On Mon, 2013-07-22 at 16:46 -0400, Matthew Daubenspeck wrote:
> On Mon, Jul 22, 2013 at 10:27:36PM +0200, steve wrote:
> > Can you post smb.conf on SRV2?
> > Steve
> 
> Certainly:
> 
> [global]
> 
>    workgroup = NWLTECH
>    security = ADS
>    realm = NWLTECH.ORG
>    encrypt passwords = yes
> 
>    idmap config *:backend = tdb
>    idmap config *:range = 70001-80000
>    idmap config NWLTECH:backend = ad
>    idmap config NWLTECH:schema_mode = rfc2307
>    idmap config NWLTECH:range = 500-40000
> 
>    winbind nss info = rfc2307
>    winbind trusted domains only = no
>    winbind use default domain = yes
>    winbind enum users  = yes
>    winbind enum groups = yes
> 

Similar to what I had when I used winbind, except the * range was lower
than the range we wanted. Try something like 3000-3500 and 3501-40000
perhaps?