[Samba] Rights issue on GPO

[Rowland penny]

On 22/06/16 15:27, L.P.H. van Belle wrote:
>>> https://wiki.samba.org/index.php/Idmap_config_ad
> Dont we need idmap config in the smb.conf also, or is above not used anymore, if so the we must change the wiki.
>
>
>
> Gr.
>
> Louis
>
>

 From the testing that I did, you only need the 'idmap config' block on 
a domain member i.e. adding:

idmap config *:backend = tdb
idmap config *:range = 2000-9999
idmap config SAMDOM:backend = ad
idmap config SAMDOM:schema_mode = rfc2307
idmap config SAMDOM:range = 10000-99999

to a DC, will do nothing

Rowland