[Samba] Samba4 domain member

L.P.H. van Belle belle at bazuin.nl
Tue Jul 1 03:10:19 MDT 2014


These may not be the same or overlap. 

   idmap config *:range = 500-100000
   idmap config ESSENCE:range = 500-100000 


>-----Oorspronkelijk bericht-----
>Van: chrisa at acs-info.co.uk 
>[mailto:samba-bounces at lists.samba.org] Namens Chris Alavoine
>Verzonden: dinsdag 1 juli 2014 11:08
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] Samba4 domain member
>
>Hi gents,
>
>I have a problem with winbindd uid/gid numbering on my Samba4 
>domain member
>server.
>
>This is my smb.conf:
>
>[global]
>
>   netbios name = DOM-MEMBER
>   workgroup = EXAMPLE
>   security = ADS
>   realm = EXAMPLE.COM
>
>   encrypt passwords = yes
>
>   idmap config *:backend = tdb
>   idmap config *:range = 500-100000
>   idmap config ESSENCE:backend = ad
>   idmap config ESSENCE:schema_mode = rfc2307
>   idmap config ESSENCE:range = 500-100000
>
>   winbind nss info = rfc2307
>
>   winbind trusted domains only = no
>   winbind use default domain = yes
>   winbind enum users  = yes
>   winbind enum groups = yes
>
>   log level = 0
>
>   vfs objects = acl_xattr
>   map acl inherit = Yes
>   store dos attributes = Yes
>
>
>
>[it_support]
>   path = /data/it_support
>   read only = no
>
>
>
>
>At first glance this appears to work ok. I am seeing lots of 
>entries with
>getent passwd and groups appear to work correctly. However, 
>there appear to
>be some anomalies with the uid numbering. For example, one 
>users' uid on
>the main DC will be completely different to the same user on my domain
>member. A good majority of them are correct which has fooled me into
>thinking that the server is good for production, but as we've 
>added other
>shares to this machine these discrepancies have become more apparent.
>
>Has anyone else hit similar numbering problems?
>
>Thanks,
>Chris.
>
>
>-- 
>ACS (Alavoine Computer Services Ltd)
>Chris Alavoine
>mob +44 (0)7724 710 730
>www.alavoinecs.co.uk
>http://twitter.com/#!/alavoinecs
>http://www.linkedin.com/pub/chris-alavoine/39/606/192
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>



More information about the samba mailing list