[Samba] winbind bug? [correction]

[steve]

On Thu, 2014-03-27 at 16:24 +0100, steve wrote:
> On Thu, 2014-03-27 at 07:40 -0700, Shane Robinson wrote:
> > Am I wrong thinking the overlapping idmap ranges are (part of) the problem?
> > Shane Robinson
> 
> Hi
> Yes.
> 
> The ranges must not overlap AT ALL. Try:
> 
>  idmap config * : backend = rid
CORRECT:
idmap config * backend = tdb

Disculpe.

>     idmap config * : range = 3000000 - 3100000
>     idmap config SEAS:backend = rid
>     idmap config SEAS:range = 1000 - 40000
>     idmap config SEAS-S:backend = rid
>     idmap config SEAS-S:range = 40001 - 50001
> HTH
> Steve
> 
> Oh, I'd really recommend using the ad backend with the uid values stored
> in AD. That way, there are no algorithms and no separate database to get
> in the way. If it's in the directory and you pull it from there (like
> all other attributes) then it can nnly be one single value. On all DC's.
> 
>