[Samba] Samba group duplicated

Rafał Sanocki rafal.sanocki at gmail.com
Tue May 29 11:41:09 UTC 2018


HI,
I have samba DC Version 4.5.15 , i have problem with Domain Users group

on samba server:
  # getent group 100
DC1\domain users:x:100:
  # getent group 40000
DC1\domain users:x:100:
  # getent group "dc1.i.com\\Domain Users"
DC1\domain users:x:100:

On Windows in Active Directory Users and Computers on Administrator 
domain account:
gidNumber = 40000 for Domain Users.


smb.conf
[global]
         server role check:inhibit=yes
         dsdb:schema update allowed = yes
         netbios name = DC1
         realm = I.COM
         workgroup = DC1
         server role = active directory domain controller
         idmap_ldb:use rfc2307 = yes
         ldap server require strong auth = no
         unix extensions = no
         security = user
         dns forwarder = 192.168.10.2
         allow dns updates = nonsecure
         log level = 1
         max log size = 450000
         log file = /var/log/samba/log.%m
         include = /etc/samba/smb.conf.debug-%I
         idmap config * : range = 40000-50000
         idmap config * : backend = tdb
         winbind enum users = yes
         winbind enum groups = yes
[netlogon]
         path = /var/lib/samba/sysvol/i.mp.pl/scripts
         read only = No
[sysvol]
         path = /var/lib/samba/sysvol
         read only = No

Can i change gid to 100  in windows? Where does this discrepancy come from?


Thanks,

Rafal Sanocki




More information about the samba mailing list