[Samba] id mapping on a dc+file server
rpenny at samba.org
Sat Aug 10 08:47:39 UTC 2019
On 10/08/2019 09:34, Stefan G. Weichinger via samba wrote:
> Am 10.08.19 um 09:49 schrieb Rowland penny via samba:
>> On a DC, as standard, the numeric IDs are allocated on a first come
>> basis from the '3000000' range.
>> On Unix domain members it depends on two things, which winbind backend
>> you use, linked with the Domain range set in AD, the examples on the
>> Samba wiki use '10000-999999'
> What is the reason for these decisions? Why don't DCs and DMs "behave"
> the same?
I wasn't party to these decisions, but I think Samba at one point
planned to provision member servers (in fact the code is still there,
but doesn't actually work), if this had worked, perhaps we would all be
using numeric IDs in the '3000000' range.
As I said, you can get DCs and Unix domain members to work similarly by
using the 'ad' backend, but even here there are problems, you can only
get the IDs from AD on a DC.
More information about the samba