[Samba] idmap range and xidNumber
kushnirenko at gmail.com
Sat Feb 29 14:15:19 UTC 2020
There recommended range in Samba4 share for BUILTIN users is usually (from
# Default ID mapping configuration for local BUILTIN accounts
# and groups on a domain member. The default (*) domain:
# - must not overlap with any domain ID mapping configuration!
# - must use a read-write-enabled back end, such as tdb.
idmap config * : backend = tdb
idmap config * : range = 3000-7999
but if we check for BUIlTIN\administrators in idmap.tdb on PDC we have
# record 59
So xidNumber is our of idmap range.
Does this mean that the domain is minconfigured?
More information about the samba