[Samba] problems after migrating NT domain to AD (samba 4.7.x)

[Rowland penny]

On 28/09/2019 21:39, Bartłomiej Solarz-Niesłuchowski via samba wrote:
> W dniu 28.09.2019 o 21:29, Rowland penny via samba pisze:
>> On 28/09/2019 19:40, Bartłomiej Solarz-Niesłuchowski via samba wrote:
>>> Dear List,
>>>
> on those machine i have no sssd installed
Good ;-)
>>
>>
>>
>
>
> so if i have on every user on my ad domain rfc2307 attributes lines 
> must looks like:
>
>         idmap config WSISIZ.EDU.PL:backend = ad
>         idmap config WSISIZ.EDU.PL:schema_mode = rfc2307
>         idmap config *:range = 500-200000
>
> ?

Close, you will need lines similar to these:

idmap config * : backend = tdb

idmap config * : range = 300000-301000

idmap config WSISIZ.EDU.PL : backend = ad

idmap config WSISIZ.EDU.PL : schema_mode = rfc2307

idmap config WSISIZ.EDU.PL : range = 500-20000

Rowland