[Samba] UID and GID mapping throw DC and Member DC

[Jhon P]

What do you mean with different winbinds?

 I can destroy the member server, its on testing.
 It is for the version of windbind?

 I can get this from DC.


 But I can not do the same with DC.

 "Tonight 2X1 sledgehammers." :-) XD

> Date: Mon, 23 Mar 2015 18:43:21 +0000
> From: rowlandpenny at googlemail.com
> To: samba at lists.samba.org
> Subject: Re: [Samba] UID and GID mapping throw DC and Member DC
> 
> On 23/03/15 18:27, Jhon P wrote:
> > After tried to solve the problem with "getent", I found another 
> > problem with the Member server.
> >
> > The member server works well,  but the "uid" and "gid" mapping for 
> > users its incorrect.
> >
> > In the DC the "UID" "GID" its around 3000085
> >
> > In the Member Server its around 2000 - 3000
> >
> > For example:
> >
> >
> > ADDC Server.
> > ---------------------
> > root at ACDC:/# wbinfo --user-info=Prueba
> > KENNEDY\prueba:*_:3000022:100_:Prueba:/home/KENNEDY/prueba:/bin/false
> 
> The '3000022' is coming from winbind mapping the users RID
> 
> >
> > MEMBER SERVER
> > -----------------------
> > root at MEMBERSERVER/home/prueba# wbinfo --user-info=prueba
> > prueba:*:_2451:2004_:Prueba:/home/KENNEDY/prueba:/bin/false
> >
> 
> The '2451' is again coming from winbind mapping the users RID, but 
> because you are using different winbinds on the DC and the member 
> server, you are getting different numbers. This is just one of the 
> reasons not use the DC for anything other than authentication.
> 
> You could try adding a 'uidNumber' to your AD users and a 'gidNumber' to 
> 'Domain Users', these numbers need to be inside the range set in the 
> member server smb.conf, for instance if you follow the member server 
> page on the wiki, not less than 2000 and not more than 999999.
> 
> I must point out that if this does not work, it may be time to get the 
> sledgehammer out :-)
> 
> Rowland
> > Any way to solve this.
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba