[Samba] Fwd: Re: Fwd: Re: Fwd: Re: Kerberos and NTLMv2 authentication

[Edouard Guigné]

Is it possible to make start DOMAIN range from 500 instead of 10000 ?

I realized that all my gid are in range 500 to 600 and not in range 
10000 - 14999
I thought  DOMAIN range 10000 - 14999 was reserved for DOMAIN users



-------- Message transféré --------
Sujet : 	Re: [Samba] Fwd: Re: Fwd: Re: Kerberos and NTLMv2 authentication
Date : 	Tue, 18 Jun 2019 16:25:39 -0300
De : 	Edouard Guigné via samba <samba at lists.samba.org>
Répondre à : 	Edouard Guigné <eguigne at pasteur-cayenne.fr>
Pour : 	samba at lists.samba.org



And What about Domain Admins gid ? Should also be in the DOMAIN range ?

Le 18/06/2019 à 16:07, Rowland penny via samba a écrit :
> On 18/06/2019 19:49, Edouard Guigné via samba wrote:
>>  gidNumber for 'Domain Users' is 513
>>
>> not in range  '10000-14999' of uidNumber
>>
>> Is it a problem ?
>
> Oh yes, ALL user uidNumber's and Domain Users gidNumber MUST be inside 
> the DOMAIN range you set in smb.conf, if they aren't, all your users 
> WILL be ignored by Samba.
>
> Find the next available gidNumber in AD and change the 'Domain User' 
> gidNumber to this and I am very sure everything will then work.
>
> Rowland
>
>
>

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba