[Samba] idmap_ad

[Gaiseric Vandal]

Yes, I missed that at first.   Some the documentation indicated that the 
users need to have a gidNumber for their primary group.

On 09/22/16 08:18, Rowland Penny via samba wrote:
> On Thu, 22 Sep 2016 08:02:36 -0400
> Gaiseric Vandal via samba <samba at lists.samba.org> wrote:
>
>> Thanks to various people for the feedback.
>>
>>
>> I had created a test domain group "IT"  with a gidNumber.   Under
>> active directory users and groups, the test users had IT as the
>> primary group.   Under the regular windows settings , the primary
>> group was still "Domain Users" which did not have a gidNumber. Once I
>> set a gidNumber , all was OK.
>>
>> This also worked on Samba 3.6.25 on Solaris 11.
>>
> I could have sworn I asked you this:
>
> Have you also given Domain Users a gidNumber ??
>
> Oh look, I did, two days ago ;-)
>
> In AD all users have Domain Users as their primary group, this
> includes Unix users. winbind will only display users if Domain Users has
> a gidNumber and they have a uidNumber.
> If you give a user a gidNumber, it will not be used as the users
> primary Unix group.
>    
> Rowland
>