[Samba] Samba AD-DC idmap config

[Rowland penny]

On 21/10/2019 20:05, John Redmond wrote:
> Yes, the latest versions of those packages are installed.
>
> I added these lines to the domain controller smb.conf file:
>         log file = /var/log/samba/%m.log
>         log level = 1 auth:5 winbind:5
>
> And this to the file server smb.conf file:
>        log level = 1 auth:5 winbind:5
>
> When I issue the getent passwd command on the fileserver, these logs 
> on the fileserver update :
> tlc-admin at fsvr0:/var/log/samba$ ls -l -t
> total 104
> -rw-r--r-- 1 root root 13998 Oct 21 18:53 log.wb-LAN
> -rw-r--r-- 1 root root  8813 Oct 21 18:53 log.winbindd-idmap
> -rw-r--r-- 1 root root  3718 Oct 21 18:53 log.wb-BUILTIN
> -rw-r--r-- 1 root root 17100 Oct 21 18:53 log.winbindd
>
> The log.winbindd file is the only one showing any "error". Here's a 
> snippet of that log.
> [2019/10/21 18:53:43.608298,  3] 
> ../source3/winbindd/winbindd_misc.c:395(winbindd_interface_version)
>   [ 1894]: request interface version (version = 29)
> [2019/10/21 18:53:43.608491,  3] 
> ../source3/winbindd/winbindd_misc.c:428(winbindd_priv_pipe_dir)
>   [ 1894]: request location of privileged pipe
> [2019/10/21 18:53:43.608760,  3] 
> ../source3/winbindd/winbindd_getpwent.c:50(winbindd_getpwent_send)
>   [ 1894]: getpwent
> [2019/10/21 18:55:02.158877,  3] 
> ../source3/winbindd/winbindd_misc.c:395(winbindd_interface_version)
>   [ 1896]: request interface version (version = 29)
> [2019/10/21 18:55:02.159075,  3] 
> ../source3/winbindd/winbindd_misc.c:428(winbindd_priv_pipe_dir)
>   [ 1896]: request location of privileged pipe
> [2019/10/21 18:55:02.159345,  3] 
> ../source3/winbindd/winbindd_getgroups.c:60(winbindd_getgroups_send)
>   getgroups root
> [2019/10/21 18:55:02.159477,  5] 
> ../source3/winbindd/winbindd_getgroups.c:235(winbindd_getgroups_recv)
>   Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
>
> None of the logs on the domain controller update in response to the 
> getent passwd command on the fileserver.
>
OK, I can know assure it does work, I know this because I have installed 
Ubuntu 18.04 server in a VM, set it up as Samba Unix domain member and 
got this:

getent passwd rowland
rowland:*:11107:10513::/home/rowland:/bin/bash

Would you like a copy of my notes ?

Rowland