[Samba] Winbind with krb5auth for trust users

[Rowland Penny]

On Tue, 22 Aug 2017 13:51:24 +0200
Andreas Hauffe via samba <samba at lists.samba.org> wrote:

> Hi,
> 
> sorry for not reading the comment above idmap config. I uninstalled
> and reinstalled samba and configs to remove all old id mappings and
> so on. Then changed all configs as adviced. The id mapping is working
> correctly (wbinfo -i) for local and trusted domain. But I still
> cannot logon with wbinfo -K with a trusted domain account.
> 

You will probably need a couple more lines in smb.conf:

          idmap config OTHERDOM : backend = rid
          idmap config OTHERDOM : range = 2000001-3000000

Rowland