[Samba] samba 4 ad member - idmap = ad for machine accounts

Rowland Penny rpenny at samba.org
Mon Sep 18 14:41:36 UTC 2017


On Mon, 18 Sep 2017 16:24:23 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:

> The op tells us : 
>         idmap config *:backend = tdb
>         idmap config *:range = 100-2000
>         # idmap config for domain MYDOMAIN
>         idmap config MYDOMAIN:backend = ad
>         idmap config MYDOMAIN:schema_mode = rfc2307
>         idmap config MYDOMAIN:range = 4000-99999
> 
> I dont know the OS here, but what happens if uid 100 is a linux
> system users. Then it also maps into BUILTIN\username 
> 
> You might check need to check this out also. 
> 

I have already told him these aren't recommended ranges, all I got was
'they work for me' or words to that affect.

I don't think I have seen what OS he is using.

Rowland



More information about the samba mailing list