[Samba] Member Server Setup Assistance

[James]

Hello Stefan,

     Wbinfo does work. Winbind is included in my nsswitch.conf. Knit and 
klist gives me a ticket.

Just checked and my local users start with 1000. I will change the range 
to start at 2000. Going off what Rowland said I have not set my UID or 
GUID mappings in Samba yet. I assume that's a precursor to 'id' working 
and possibly where I'm failing?

On 12/31/2014 10:55 AM, Stefan Kania wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hello James,
>
> do you see your users and groups with "wbinfo -u" and "wbinfo -g"?
> Did you install "heimdal-clients" to test with "kinit" to get a
> Kerberos-Ticket?
> Did you put "winbind" behind "passwd" and "group" in /etc/nsswitch.conf?
>
> Idmapping starting with 500:
>    idmap config DOMAIN:range = 500-40000
> can be a problem because most distributions use UIDs up to 1000 for
> local users
>
> Stefan
>
> Am 31.12.14 um 16:42 schrieb James:
>> Hello Stefan,
>>
>> I learned the hard way about .local. I understand going forward.
>>
>> I do have an issue with the member server. Following along with the
>> wiki I get stuck at 'Testing the Winbind user/group mapping'.
>> Wbinfo works as expected but not
>>
>> #*id DomainUser*
>>
>> #*getent passwd*
>>
>> #*getent group*
>>
>> #*chown DomainUser:DomainGroup file*
>>
>> #*chgrp DomainGroup file*
>>
>> etc.
>>
>> I receive 'id: sambauser: No such user'. It will only retrieve
>> local machine users. Let me preface by saying this is a Ubuntu
>> 12.04 server with Samba 4.1.14.  Thanks.
>>
>> On 12/31/2014 10:00 AM, Stefan Kania wrote: Hello James,
>>
>> Am 31.12.2014 um 15:48 schrieb James:> Hello,
>>>>> I'm following along with the wiki(Setup a Samba AD Member
>>>>> Server) and I have a question after reading the 'Set up a
>>>>> basic smb.conf' section.
>> Please show us your smb.conf
>>
>> Do I need to extend the schema in order for my member server to
>>>>> successfully join and service file shares?
>> No, you dont have to.
>>
>> Do I need to configure a
>>>>> krb5.conf file? Thanks.
>> If your DC is a samba4 DC just copy krb5.conf to your new
>> memberserver Stefan
>>
>> -- Stefan Kania Landweg 13 25693 St. Michaelisdonn
>>
>>
>> Signieren jeder E-Mail hilft Spam zu reduzieren. Signieren Sie
>> ihre E-Mail. Weiter Informationen unter http://www.gnupg.org
>>
>> Mein Schlüssel liegt auf
>>
>> hkp://subkeys.pgp.net
>>
>>
> - -- 
> Stefan Kania
> Landweg 13
> 25693 St. Michaelisdonn
>
>
> Signieren jeder E-Mail hilft Spam zu reduzieren. Signieren Sie ihre
> E-Mail. Weiter Informationen unter http://www.gnupg.org
>
> Mein Schlüssel liegt auf
>
> hkp://subkeys.pgp.net
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG/MacGPG2 v2.0.16 (Darwin)
>
> iEYEARECAAYFAlSkHI8ACgkQ2JOGcNAHDTYBeQCg2fW6PnVjB0Mxd1BBZQ24H66T
> COcAoMLaz/F7xtaKDld+QcfTFUQqLIqG
> =eJu2
> -----END PGP SIGNATURE-----

-- 
-James