[Samba] [samba] Member server winbind issue

Rowland Penny rpenny at samba.org
Sun Jul 23 11:47:54 UTC 2017

On Sun, 23 Jul 2017 13:33:05 +0200
mathias dufresne <infractory at gmail.com> wrote:

> Samba is 4.5.8+dfsg-2+deb9u1+b1 (it's a debian).

Then you need to use the 'old' way of setting up 'idmap config'

       winbind nss info = rfc2307
       idmap config * : backend = tdb
       idmap config * : range = 3000-7999
       idmap config SAMDOM : backend = ad
       idmap config SAMDOM : schema_mode = rfc2307
       idmap config SAMDOM : range = 10000-999999

You can change the ranges if required, but all normal users and groups
MUST have a uidNumber or gidNumber attribute containing a number inside
the DOMAIN range you choose.

You MUST also give 'Domain Users' a gidNumber inside the same range.


More information about the samba mailing list