[Samba] samba domain member strange behavior lost users and shares

[basti]

On 10.01.20 10:30, Rowland penny via samba wrote:
> On 10/01/2020 09:01, basti via samba wrote:
>> Hello,
>> my samba domain member file server do some strange thinks.
>>
>> First of all Version 4.9.5-Debian and smb.conf is this:
>>
>> [global]
>>     workgroup = SAMDOM
>>     security = ADS
>>     realm = SAMDOM.EXAMPLE.COM
>>
>>     log file = /var/log/samba/%m.log
>>     log level = 1
>>
>>     winbind refresh tickets = Yes
>>     vfs objects = acl_xattr
>>     map acl inherit = Yes
>>     store dos attributes = Yes
>>
>>     dedicated keytab file = /etc/krb5.keytab
>>     kerberos method = secrets and keytab
>>
>>     winbind use default domain = yes
>>
>>     load printers = no
>>     printing = bsd
>>     printcap name = /dev/null
>>     disable spoolss = yes
>>
>>     idmap config * : backend = tdb
>>     idmap config * : range = 1000-1005
> OK, just how are you going to get circa (at least) 200 users and groups
> into 6 IDs ?
>>     # idmap config for the SAMDOM domain
>>     # alf has uid 1007
>>     # yes i know its not the best
> Then change it, or change the range for the '*' domain
> 
> Rowland

alf is an old domain user, not need it anymore. so i have change the
range to

 idmap config * : range = 1000-2000
 idmap config SAMDOM:range = 2001-999999

But i do not think that this is the problem, the config before work for
a log time.

perhaps something is wrong with kerberos / keytab?