[Samba] winbind on server have different UIDs on each Member Server

William Antonin antonin at geovariances.com
Fri May 23 02:56:56 MDT 2014


I have a big problem.

I'm in labs situation with  2 domain controllers DC1,DC2 samba 4 (Ubuntu
14.04) in different networks and each of them have a client (Ubuntu 12.04).

When I want to get  uid/gid, I use "wbinfo –i user" and I get the same
results on each clients if they have the same configuration. It's ok for

But when I install winbind on servers (Ubuntu 14.04), just to be able to
use the wbinfo command, I can use "wbinfo –i name" but on my 2 DCs I get a
not expected result for the uid/gid. It seems that the idmap mapping is not

Here is my smb.conf excerpt and the results on a client and a server:

Excerpt smb.conf of server

Global parameters


                workgroup = PREVERT

                realm = PREVERT.LAN

                netbios name = DCFR

                server role = active directory domain controller

                server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
drepl, winbind, ntp_signd, kcc, dnsupdate

                idmap_ldb:use rfc2307 = yes

                winbind nss info = rfc2307


                path = /var/lib/samba/sysvol/prevert.lan/scripts

                read only = No


                path = /var/lib/samba/sysvol

                read only = No

Excerpt smb.conf of client


; Basic server settings

  workgroup = PREVERT

  realm = PREVERT.LAN

  smb ports = 139

  log file = /var/log/samba/%m.log

  max log size = 1024

; security options

  ;hosts allow = 10.1.1.

  security = ADS

  null passwords = no

  password server = dcfr.prevert.lan

  encrypt passwords = yes

  guest ok = no

  invalid users = root bin daemon named sys tty disk mem kmem users sshd

  idmap config PREVERT:backend = rid

  idmap config PREVERT:schema_mode = rfc2307

  idmap config PREVERT:range = 10000-19999

  idmap config PREVERT:read only = yes

  winbind nss info = rfc2307

  winbind uid = 60000-70000

  winbind use default domain = Yes

  winbind enum users = Yes

  winbind enum groups = Yes

  wins server = dcfr.prevert.lan

  inherit acls = Yes

  template homedir = /home/%U

  template shell = /bin/false

Wbinfo –I bob sur client


Wbinfo –I guy sur server


Someone can help me, please.

More information about the samba mailing list