[Samba] Man page for idmap_rid

[francis picabia]

On Tue, Aug 9, 2016 at 1:58 PM, Rowland Penny via samba <
samba at lists.samba.org> wrote:

> On Tue, 9 Aug 2016 13:37:18 -0300
> francis picabia <fpicabia at gmail.com> wrote:
>
>
> >
> > getent passwd username
> >
> > (or "theusername") is not the literal command.  I substitute
> > 'username' here to protect the user id.
> > genent passwd on the user does work and it returns uid and gui of
> > 1000, exactly what we see in the /etc/passwd file.  It is the same
> > output as grep 'username' on /etc/passwd
> >
> > Remember, when winbind is off, it works.  This is certainly bug 10604
> > by all measures.
>
> And I think you have just posted your problem!
>
> Lets use 'fred' as one of your users, replace 'fred' with a real users
> name
>
> Do you have a user called 'fred' in /etc/passwd *and* in AD ?
>
> If so, choose one and then delete the other, you cannot have them in
> both.
>

I don't think you've done this before.  Have you used security = ads?

I have dozens of servers and hundreds of users running just fine
with this.  Having the same user defined in both Linux and AD,
and mapping it for authentication is the whole point.