[Samba] Samba 4.2.0 rc2 and winbindd, uid-/gidNumber and xidNumber

Davor Vusir davortvusir at gmail.com
Mon Nov 3 14:14:59 MST 2014


Trying out 4.2.0 rc2 and winbindd. Below is the AD DC's smb.conf.
Samba on the AD DC is updated from 4.1.3.
I'm having trouble getting uid-/gidNumbers. Just xidNumbers are
displayed. All domain account and groups have got it assigned. What
did I miss?

Is it possible that the outcome from the commands run on the AD DC is
a product from the fact that the domains NetBIOS-name is EXAMPLE and
not the left-most part of the dns domain (SAMDOM)? Any ideas
appreciated.

Regards
Davor


Outcome from command ran on both the AD DC and a member server:
AD DC:
root at dc1:/usr/local/samba# id davor
uid=3000023(davor) gid=100(users)
groups=100(users),3000023(davor),3000020(fileacc-common),3000021(fileacc-home),3000009(BUILTIN\users)
root at dc1:/usr/local/samba# getent passwd davor
davor:*:3000023:100:Davor Vusir:/home/%D/%U:/bin/false
root at dc1:/usr/local/samba# getent group 'Domain Users'
domain users:x:100:

Member server:
admind at ostraaros:~$ id davor
uid=11105(davor) gid=10513(domain users) groups=10513(domain
users),11106(fileacc-home),11107(fileacc-common),1000003(BUILTIN\users)
admind at ostraaros:~$ getent passwd davor
davor:*:11105:10513::/home/EXAMPLE/davor:/bin/false
admind at ostraaros:~$ getent group 'Domain Users'
domain users:x:10513:

smb.conf:
[global]
        workgroup = EXAMPLE
        realm = samdom.example.org
        netbios name = DC1
        server role = active directory domain controller
        server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
drepl, winbindd, ntp_signd, kcc, dnsupdate
        disable spoolss = yes
        log level = 3
        interfaces = 192.168.1.2/24 127.0.0.1/8
        bind interfaces only = yes
        idmap config EXAMPLE:backend = ad
        idmap config EXAMPLE:schema_mode = rfc2307
        idmap config EXAMPLE:range = 10000-999999
        idmap config *:backend = tdb
        idmap config *:range = 3000000-4000000
        winbind nss info = rfc2307
        winbind enum users  = no
        winbind enum groups = no
        winbind nested groups = yes
        winbind expand groups = 4
        winbind use default domain = yes


More information about the samba mailing list