[Samba] winbindd losing track of RFC2307 UIDs
rpenny at samba.org
Tue Oct 4 16:40:56 UTC 2016
On Tue, 4 Oct 2016 12:29:19 -0400 (EDT)
Rob via samba <samba at lists.samba.org> wrote:
> On Tue, 4 Oct 2016, Rob wrote:
> > On Mon, 3 Oct 2016, Rowland Penny wrote:
> >> On Mon, 3 Oct 2016, Rob wrote:
> >>> # idmap config for domain
> >>> idmap config MY.AD.REALM.COM:backend = ad
> >>> idmap config MY.AD.REALM.COM:schema_mode = rfc2307
> >>> idmap config MY.AD.REALM.COM:range = 10000-99999
> > [...]
> >> You might think it works fine, but it will probably work better if
> >> you change 'idmap config MY.AD REALM.COM' to 'idmap config
> >> MYDOMAIN' The 'ad' backend should start working properly then.
> > Thanks Rowland, that works! Figured it was something simple. I'm
> > actually surprised that the realm version worked at all then.
> Spoke too soon... I just checked and auser has a 20xx UID again. It
> was fine for a bit but no longer.
> $ wbinfo -i auser
> auser:*:2018:10000:User Name:/home/auser:/bin/bash
> Oddly, this seems to only affect ~3 of my 20 users and the same ~3
> every time.
This is very strange, have you tried running 'net cache flush' on the
domain member ?
Have you compared the users AD objects ?
More information about the samba