[Samba] idmap problems after update from 3.0.33 to 3.6.6

[Thomas Attenberger]

Thanks for your help.

How can I manually populate the rfc2307 attributes?

Before I tried it with "backend = ad", but then "wbinfo -u" lists only
local users.
Now it seems, there's no difference between using ad or tdb.

Do I really need to use rfc2307 mode? Before I was running samba 3.0
without it...

What can I do now?

Thanks
Tom

2013/10/23 Jonathan Buzzard <jonathan at buzzard.me.uk>

> On Wed, 2013-10-23 at 14:27 +0200, Thomas Attenberger wrote:
> > I tried that already (changed the "+" to a "/"), no changes...
> >
> > Some more strange things:
> >
> > getent passwd (the output lists all Domain Users, but the new-user is not
> > included)
> >
> > getent group (lists only local unix groups)
> >
>
> Bear in mind that when a new user is created in AD the rfc2307
> attributes are not populated. You have to do that manually.
>
> I note that you have conflicting entries in your smb.conf as well for
> example
>
>     winbind nss info = rfc2307
>     template shell  = /bin/bash
>
> The first line says get NSS info from the AD, but the second line is
> attempting to use a template shell.
>
> Also
>
>     idmap config ATRON:backend = tdb
>     idmap config ATRON:schema_mode = rfc2307
>
> The schema_mode option is not valid with the tdb backend... My guess is
> winbind will get confused at the least.
>
>
> JAB.
>
> --
> Jonathan A. Buzzard                 Email: jonathan (at) buzzard.me.uk
> Fife, United Kingdom.
>
>