[Samba] Winbind backend : rid is too much underappreciated

[Rowland Penny]

On 21/02/15 20:05, Miguel Medalha wrote:
> I just came to the conclusion that the rid backend has been very much underappreciated. Too much mental inertia about how things used to be made?
>
> After strugling for two days to configure a member server against a Samba Active Directory  with the ad/RFC2307 backend, I turned to the rid backend and voilà! all my problems are gone. Having to manually edit uids/gids in UNIX Attributes under RSAT does really suck! The Administrator account is never correctly mapped and setting permissions on the member server becomes a PITA. All kinds of glitches become apparent.
>
> Deterministic conversion from SID to UID rocks! Simple and elegant. Everything is working in just a few minutes. Great! More people should know about this.
> Just use the same ranges in all your servers and you will have consistent IDs in all machines.
>
> And for really large installations theres the autorid backend!
>
> How come this is not more widely known? Even the Samba Wiki page about the RID backend is empty!
>
>
>

Just recently a user had problems getting the rid backend to work, so it 
isn't the magic solution you are suggesting. Once you get your head 
around the winbind backends, it is easy to set them up. If you did have 
problems with the 'ad' backend, you had something set incorrectly.

Rowland