[Samba] user works on DC, not on DM

[Stefan G. Weichinger]

Am 2017-09-01 um 09:17 schrieb Rowland Penny via samba:

>> The user can login to the domain, it only can't connect to a share on
>> the DM (group membership is OK, we only filter for "Domain Users", and
>> the GPOs are applied).
> 
> Have you given the user a 'uidNumber' attribute containing a unique
> number inside 10000-9999999 ? and have you given Domain Users a
> gidNumber attribute containing a number inside the same range (I don't
> think you have, or it wouldn't be '100' above)

We expected that creating the user via RSAT would be enough.
But now as I read this I remember a similar thread from back then.

How to add that uidNumber in the easiest way?
I would like to be able to let the local admin do that ...

can't remember the steps anymore, something with LDAP, I assume?

thx