[Samba] winbind bug?

Chan Min Wai dcmwai at gmail.com
Thu Mar 27 09:25:52 MDT 2014


I'm sure that this will be explain later in the docs.

You are welcome to join the docs team :)



On Thu, Mar 27, 2014 at 11:21 PM, Doug Tucker <tuckerd at lyle.smu.edu> wrote:

> For the record, that's actually the way I had it at first.  All different
> ranges.  But I can't find any documentation to support that, and someone
> who replied to my original thread sent me his conf file and he uses the
> same range for everything.  Which is frankly what prompted me to change
> mine to reflect what he had.  The bottom line though, is neither way does
> it affect any working users, nor does it make it better for users with unix
> id's over 11000.
>
> Sincerely,
>
> Doug Tucker
>
>
> On 03/27/2014 10:17 AM, Chan Min Wai wrote:
>
>> Hi Doug,
>>
>> From my understand
>>
>> You cannot have any duplication idmap range.
>> Each AD will need a different range
>> the * --> Other also need to be in different range.
>>
>> And I believes that is the reason why winbind follow the number strictly.
>> So you don't overlap any idmap number and confuse the samba server.
>>
>>
>> What happen if you have 2 AD DC with the same idmap range...
>>
>> I believes that you will have to change either one.
>>
>> Hope this help.
>>
>>
>>
>>
>> On Thu, Mar 27, 2014 at 10:48 PM, Doug Tucker <tuckerd at lyle.smu.edu<mailto:
>> tuckerd at lyle.smu.edu>> wrote:
>>
>>     The way I understand that it's totally arbitrary.  As long as the
>>     unix id and AD sid are unique (which they have to be) the idmap is
>>     always going to be unique as well. And keep in mind, 95% of my
>>     users unix id is under 11000, and everything works for them.  The
>>     unix id being > 11000 for some reason is THE reason for my issue.
>>
>>     Sincerely,
>>
>>     Doug Tucker
>>
>>
>>     On 03/27/2014 09:40 AM, Shane Robinson wrote:
>>
>>
>>         Am I wrong thinking the overlapping idmap ranges are (part of)
>>         the problem?
>>
>>
>>         Shane Robinson
>>
>>
>>         Sent from phone.
>>         Please excuse my brevity.
>>
>>
>>     --     To unsubscribe from this list go to the following URL and read
>> the
>>     instructions: https://lists.samba.org/mailman/options/samba
>>
>>
>>
>


More information about the samba mailing list