[Samba] Rights issue on GPO

Rowland penny rpenny at samba.org
Wed Jun 22 14:41:32 UTC 2016

On 22/06/16 15:27, L.P.H. van Belle wrote:
>>> https://wiki.samba.org/index.php/Idmap_config_ad
> Dont we need idmap config in the smb.conf also, or is above not used anymore, if so the we must change the wiki.
> Gr.
> Louis

 From the testing that I did, you only need the 'idmap config' block on 
a domain member i.e. adding:

idmap config *:backend = tdb
idmap config *:range = 2000-9999
idmap config SAMDOM:backend = ad
idmap config SAMDOM:schema_mode = rfc2307
idmap config SAMDOM:range = 10000-99999

to a DC, will do nothing


More information about the samba mailing list