[Samba] winbind bug?

[Rowland Penny]

On 27/03/14 17:33, Doug Tucker wrote:
> On 03/27/2014 12:28 PM, Rowland Penny wrote:
>> On 27/03/14 16:25, Doug Tucker wrote:
>>>
>>>>>
>>>> Hi again, I hope that is a typo 'tbd', should be 'tdb', if it isn't 
>>>> or if changing it doesn't work, can you post your smb.conf, what OS 
>>>> and what you are pointing samba at.
>>>>
>>>> Rowland
>>>
>>> Working OS's regardless of unix uid #: linux smb clients, Windows XP 
>>> clients
>>>
>>> OS broken with unix id # over 11000: Windows 7
>> Hi, Yes but what is the server ?
>>
>> Anyway after a quick scan of your smb.conf, you have these in the 
>> global section:
>>
>>    hide dot files = yes
>>    posix locking = no
>>    follow symlinks = yes
>>    wide links = yes
>>    invalid users = root
>>
>> These should only be in a share
>>
>> also there are these:
>>
>>    passdb backend = tdbsam
>>    obey pam restrictions = no
>>    unix password sync = no
>>    wins support = no
>>
>> You might as well remove them, they are all the default settings.
>>
>> Apart from that, the smb.conf looks good to work with either a samba4 
>> AD or windows Server.
>>
>> Rowland
> Thanks for the once over.  Helps to have multiple eyes to verify 
> things.  But in the end I'm still in the same boat and not a single 
> suggestion to the facts of my issue.  My config does work as long as 
> the unix ID isn't over 11000 and the client windows 7. Nobody wants to 
> even acknowledge or touch that.  I've verified it down to every detail 
> I can think of.  I don't know if you read my threads earlier, but I 
> can change an existing user to a unix id less than 11000 and they then 
> work.  Switch them back, broken again.
>
> My back end windows server is 2003.

After looking at your smb.conf again, I noticed something, could you try 
changing the idmap config section to this:

    idmap config *:backend = tdb
    idmap config *:range = 3000000-3100000
    idmap config SEAS:backend = rid
    idmap config SEAS:range = 1000-40000
    idmap config SEAS:schema_mode = rfc2307
    idmap config SEAS-S:backend = rid
    idmap config SEAS-S:range = 40001-60000
    idmap config SEAS-S:schema_mode = rfc2307

Rowland