[Samba] Sysvol replication with Unison for more than 2 server.
rowlandpenny at googlemail.com
Sat Oct 4 03:36:18 MDT 2014
On 04/10/14 09:46, Vash wrote:
> Rowland Penny <rowlandpenny <at> googlemail.com> writes:
>> Ahh, I dropped a right clanger there, when I said SID I meant RID, it
>> would seem that when you join a DC to a domain, idmap.ldb does not get
>> replicated to the new DC and so the RID's could be and probably are
>> different. This is not really a problem, just copy idmap.ldb from the
>> original DC to the new one.
OK, clanger again
For RID read xidNumber ( definitely right this time)
> SID and uid/gid are not replicated between DCs.
Yes they are, if you create a new user on a DC, it will replicate to any
other DC's and if you examine the users SID on each DC, they will all be
> There is no need to copy idmap.ldb.
There is if you want to ensure that the builtin users have the same
xidNumbers on all DC's
> The right method should be to activate idmap_ldb:use rfc2307 = yes and NIS
Using rfc2307 should be the default (in my opinion), NIS extensions are
the default. But having said that, this has nothing to do with the problem.
> Read this document:
Read it, I could have written it :-D
> Instead I think SID and RID should be in sync between DCs, because mapping
> is stored in sam.ldb. Right?
correct, but as I said we really are discussing xidNumber's.
More information about the samba