[Samba] Security = ADS and uidnumbers

[Jim Potter]

Hi JAB

I've tried this every whichway, including making ranges not overlap. It
looks to me to depend on this line:

 idmap config BECAUSE : range = 1000-8000

If I add it, wbinfo <SID-ToUID option> for jingram gives a UID of 2338, but
no getent passwd entry.
If I remove it, getent passwd jingram gives a uidnumber in the  idmap
config * : range =... range.

I can't replicate the state of affairs I had in the first email where one
user had the correct uidnumber - no users have the correct number now.

Does it make any difference that the BECAUSE domain trusts another domain?

I've tried it on samba4 as well now.

what goes on? Does anyone have this setup working? If anyone could send me
a complete smb.conf that works for them, I could start narrowing down where
the problem is here.

cheers

Jim


On 4 June 2013 13:57, Jonathan Buzzard <jonathan at buzzard.me.uk> wrote:

> On Tue, 2013-06-04 at 13:20 +0100, Jim Potter wrote:
>
> [SNIP]
>
> >         idmap config * : base_rid = 0
> >         idmap config * : backend = tdb
> >         idmap config * : range = 1000 - 60000
> >
> > #       idmap config BECAUSE : default = yes
> > #       idmap config BECAUSE : backend  = ad
> > #       idmap config BECAUSE : schema_mode = rfc2307
> > #       idmap config BECAUSE : range    = 1000-8000
> > #       idmap config BECAUSE : cache time = 1800
> > ###     idmap alloc config:range = 5000-9999
>
> Two backends with overlapping ranges, won't work. The ranges *must* be
> orthogonal.
>
> JAB.
>
> --
> Jonathan A. Buzzard                 Email: jonathan (at) buzzard.me.uk
> Fife, United Kingdom.
>
>