[Samba] Validate Ids Multiple DC

Mueller mueller at tropenklinik.de
Fri Jan 29 08:20:46 UTC 2016


You can try to do it with the unix tab in rsat on the master dc (as I did) .  Both DCs have the same ids.
On your memberservers this will be mapped by winbind(d)
EX:

[root at s4master ~]# id tester
uid=90000(TPLK\tester) gid=100(users) Gruppen=100(users),3000051(TPLK\TerminalServer User),3000027(TPLK\Dienstplan),3000028(TPLK\Direktionv),3000048(TPLK\Schreiben),3000045(TPLK\pflege),3000038(TPLK\orbis),3000023(TPLK\agfa),3000033(TPLK\HS3)

[root at s4slave ~]# id tester
uid=90000(TPLK\tester) gid=100(users) Gruppen=100(users),3000051(TPLK\TerminalServer User),3000027(TPLK\Dienstplan),3000028(TPLK\Direktionv),3000048(TPLK\Schreiben),3000045(TPLK\pflege),3000038(TPLK\orbis),3000023(TPLK\agfa),3000033(TPLK\HS3)

winbind(d)  mapping the same ids on 2 memberservers:
[root at centclust1 ~]# id tester
uid=1606(tester) gid=1013(domain users) Gruppen=1013(domain users),1619(dienstplan),1625(hs3),1640(schreiben),1615(agfa),1637(pflege),1643(terminalserver user),1630(orbis),1620(direktionv),4000001(BUILTIN\users)


[root at centclust2 ~]# id tester
uid=1606(tester) gid=1013(domain users) Gruppen=1013(domain users),1615(agfa),1619(dienstplan),1625(hs3),1630(orbis),1637(pflege),1640(schreiben),1643(terminalserver user),1620(direktionv),100001(BUILTIN\users)


EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen 
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de 




-----Ursprüngliche Nachricht-----
Von: Carlos A. P. Cunha [mailto:carlos.hollow at gmail.com] 
Gesendet: Freitag, 29. Januar 2016 00:43
An: samba at lists.samba.org
Betreff: [Samba] Validate Ids Multiple DC

Hello!
I have 2 Samba 4 server (4.3.3) as VC and other Samba 4 (4.3) as Fileserver, until now all ok, but I'm one doubts, how to validate that in both servers the domain IDs of the users of this identical, a simple way to do this validation?
I wanted to make sure it is a DC die fileserver has to go 100%.
thank you

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba




More information about the samba mailing list