[Samba] Winbind with krb5auth for trust users

Rowland Penny rpenny at samba.org
Tue Aug 22 12:10:32 UTC 2017

On Tue, 22 Aug 2017 13:51:24 +0200
Andreas Hauffe via samba <samba at lists.samba.org> wrote:

> Hi,
> sorry for not reading the comment above idmap config. I uninstalled
> and reinstalled samba and configs to remove all old id mappings and
> so on. Then changed all configs as adviced. The id mapping is working
> correctly (wbinfo -i) for local and trusted domain. But I still
> cannot logon with wbinfo -K with a trusted domain account.

You will probably need a couple more lines in smb.conf:

          idmap config OTHERDOM : backend = rid
          idmap config OTHERDOM : range = 2000001-3000000


More information about the samba mailing list