[Samba] Winbindd on 4.2+ full functionality?

[Rowland penny]

On 13/12/15 05:07, George wrote:
> Hi,
>
> I recently upgraded from 4.1.17 to 4.3.1.
>
> I thought that the winbindd daemon for AD included since 4.2 would allow
> proper and complete winbind operation as in member servers, but that
> doesn't seem to be the case.
>
> In particular, I want consistent UIDs on DCs for files created within
> Windows (so I can avoid the "somehow keep idmap.ldb in sync between DCs"
> hell). I made several tests but winbindd on the DC doesn't seem to be
> honouring the idmap directives on smb.conf and still relies on the XIDs
> provided by idmap.ldb
>
> Am I missing something? Is this by design?
>
> Best regards,
> George

Yes, this is how it works at the moment, if you want your users & groups 
to have the same IDs everywhere, you will have to add uidNumber & 
gidNumber attributes to your users & groups.

Adding the member server 'idmap config' lines to a DC smb.conf will have 
no effect.

Rowland