[Samba] Upgraded to 4.8 - forced to use winbindd - retro how to missing?

[Rowland Penny]

On Wed, 28 Nov 2018 16:06:01 -0500
Richard Bollinger via samba <samba at lists.samba.org> wrote:

> Well it *almost* works as before.  With this stanza and version 4.8.3,
> access seems to only be granted per the single group listed in a
> user's entry in /etc/passwd, not including groups listed in /etc/group
> 
> [global]
>         workgroup = AMERICAS
>         realm = AMERICAS.X.Y
>         security = ADS
>         idmap config * : range = 100000:199999
>         idmap config AMERICAS : backend = nss
>         idmap config AMERICAS : range = 1000:99999
> 
> Thoughts?

You mean apart from thinking 'I wouldn't use idmap_nss' ? ;-)

It should be '100000-199999' not '100000:19999'

You will also need winbind running.

Rowland