[Samba] Consistent UID/GID mappings?

[Alexandre Beauclair]

Thanks for the help Marc.
With your guidance I was able to make winbind retrieve the user's UID in a consistent manner across machines.
I was able to fill the info in ADUC, and retrieve it with the ad backend. However, whenever I "getent" or "id" the user, it shows me the correct UID, but doesn't show the additional groups it is a member of. It stays as Domain Users, even though I created the group under ADUC, gave it UNIX attributes, and filled the field for the user for Primary GID.

Also, I tried creating a file in an NFS share, then mounting it on another system (which is able to retrieve the user info), and ownerships appear as nobody for both the user and group. Is this normal behavior?

Thanks!

Alexandre Beauclair

----- Original Message -----
From: "Marc Muehlfeld" <samba at marc-muehlfeld.de>
To: "Alexandre Beauclair" <beauclaira at lexum.com>, samba at lists.samba.org
Sent: Monday, April 7, 2014 3:52:39 PM
Subject: Re: [Samba] Consistent UID/GID mappings?

Hello Alexandre,

Am 07.04.2014 21:43, schrieb Alexandre Beauclair:
> The problem I have is I can't seem to be able to get
 > consistent UIDs and GIDs across all platforms.

You have to fill the stuff in the unix attributes tab in ADUC.

It it isn't there, you haven't provisioned your domain with 
--use-rfc2307. You enable the NIS extension later (not tried):
https://serverfault.com/questions/558090/enable-nis-extensions-rfc2307-on-samba-4-ad-after-installation




> I've seen sample configurations using the
 > "idmap config DOM : backend = ad" configuration, but
 > did not have any kind of success with it

If you have filled the attributes in AD (UID, home, etc.) have a look here:
https://wiki.samba.org/index.php/Samba/Domain_Member#Setting_up_a_basic_smb.conf

As an alternative you can setup sssd instead of Winbind and retrieve the 
account data from AD:
https://wiki.samba.org/index.php/Local_user_management_and_authentication/sssd



Regards,
Marc