[Samba] Samba 4 Consistent uid gid mapping across servers.

GintsN gintsn at gmail.com
Sun Oct 20 13:18:03 MDT 2013


On 10/19/2013 10:58 AM, steve wrote:

> Not a big deal. You can use wbinfo -i to pull the info fr uidNumber and
> gidNumber and ldbmodify. But be warned: do this on a _single_ DC and
> add:
> idmap_ldb use:rfc2307 = Yes
> to smb.conf to all your DC's afterwards.

Should I add any additional attributes to smb.conf or user entries?

I have migrated W2K3 AD -> Samba 4.0.7 -> Samba 4.1.0. Now I wish to add 
uidNumber to user object:

I added string "idmap_ldb:use rfc2307 = yes" to smb.conf, restarted samba.

Now:

ldbedit  -H /usr/local/samba/private/sam.ldb sAMAccountName=janis.ozols
... Added:
uidNumber: 300999


... close and got:

failed to modify CN=janis.ozols,OU=2009,DC=xyz,DC=abc,DC=lv - 
objectclass_attrs: attribute 'uidNumber' on entry 
'CN=janis.ozols,OU=2009,DC=xyz,DC=abc,DC=lv' was not found in the schema!


which entries exactly shoud I add, modify to user data?


Current entries for edited user now are:
==
# editing 1 records
# record 1
dn: CN=janis.ozols,OU=2009,DC=xyz,DC=abc,DC=lv
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
cn: janis.ozols
sn: Janis
description: Test account
givenName: Ozols
instanceType: 4
whenCreated: 20130809130646.0Z
whenChanged: 20130809130646.0Z
displayName: Ozols Janis
uSNCreated: 7575
name: janis.ozols
objectGUID: 05af67f7-c5e0-439c-9cae-cfe667cf19ea
badPwdCount: 0
codePage: 0
countryCode: 0
homeDirectory: \\someserver\janis.ozols
homeDrive: G:
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
scriptPath: logon.bat
primaryGroupID: 513
profilePath: \\someserver\PROFILE\janis.ozols
objectSid: S-1-5-21-2016371725-1493893514-1541874228-20143
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: janis.ozols
sAMAccountType: 805306368
userPrincipalName: janis.ozols at xyz.abc.lv
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=xyz,DC=abc,DC=lv
pwdLastSet: 130205272060000000
userAccountControl: 512
uSNChanged: 7577
distinguishedName: CN=janis.ozols,OU=2009,DC=xyz,DC=abc,DC=lv
===

G.


More information about the samba mailing list