[Samba] Upgraded a member server to 4.8, rfc2307 data?

[L.P.H. van Belle]

Hai Marco, 

The idmap config part. The this for the member. 

    ## map id's outside to domain to tdb files.
    idmap config *: backend = tdb
    idmap config *: range = 5000-9999

    ## map ids from the domain and (*) the range may not overlap !
    idmap config LNFFVG: backend = ad
    idmap config LNFFVG: schema_mode = rfc2307
    idmap config LNFFVG: range = 10000-49999

    idmap config LNFFVG: unix_nss_info = yes
    idmap config LNFFVG: unix_primary_group = yes


And about : 
[2018/09/04 16:37:11.137151,  0] ../lib/param/loadparm.c:398(lp_bool)
   lp_bool(yes	# Samba 4.6+): value is not boolean!

Put the comment above or below the line and see what happens. 

It looks like "yes	# Samba 4.6+" is seen as the value. 

Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Marco Gaiarin via samba
> Verzonden: dinsdag 4 september 2018 17:15
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] Upgraded a member server to 4.8, rfc2307 data?
> 
> 
> I'm starting to upgrade my domain members to debian stretch/samba 4.8,
> using louis packages.
> Domain controllers still on jessie/samba45.
> 
> Upgrade went smooth, but after upgrade seems that the DM was not able
> anymore to retrieve rfc2307 data, eg:
> 
>   root at vdmsv2:~# getent passwd gaio
>   gaio:*:10000:10513:Marco Gaiarin:/home/LNFFVG/gaio:/bin/false
> 
>   root at vdmsv2:~# ldbsearch -H ldap://vdcsv1.ad.fvg.lnf.it -P 
> -b DC=ad,DC=fvg,DC=lnf,DC=it 
> "(&(objectClass=user)(sAMAccountName=gaio))"  | egrep -i 
> "(unixhome|shell)"
>   loginShell: /bin/bash
>   unixHomeDirectory: /home/gaio
> 
> smb.conf seems ok to me:
> 
>   root at vdmsv2:~# samba-tool testparm
>   Press enter to see a dump of your service definitions
>   
>   # Global parameters
>   [global]
> 	disable spoolss = Yes
> 	log file = /var/log/samba/log.%m
> 	log level = 0
> 	map to guest = Bad User
> 	max log size = 5000
> 	netbios aliases = MEDIASV
> 	panic action = /usr/share/samba/panic-action %d
> 	printcap name = /dev/null
> 	realm = AD.FVG.LNF.IT
> 	security = ADS
> 	username map = /etc/samba/user.map
> 	winbind nss info = rfc2307 # Samba 4.5-
> 	winbind offline logon = Yes
> 	winbind use default domain = Yes
> 	workgroup = LNFFVG
> 	idmap config lnffvg : unix_nss_info = yes	# Samba 4.6+
> 	idmap config lnffvg : range = 10000-49999
> 	idmap config lnffvg : backend = ad
> 	idmap config * : range = 5000-9999
> 	idmap config * : backend = tdb
> 	include = /etc/samba/smb.conf.%m
> 
>   [...]
> 
> 
> What i'm missing?! Thanks.
> 
> -- 
> dott. Marco Gaiarin				        GNUPG 
> Key ID: 240A3D66
>   Associazione ``La Nostra Famiglia''          
> http://www.lanostrafamiglia.it/
>   Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al 
> Tagliamento (PN)
>   marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   
> f +39-0434-842797
> 
> 		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
>       http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
> 	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>