[Samba] map gidNumber

[Rowland penny]

On 23/07/2020 14:29, basti via samba wrote:
> On 23.07.20 15:23, Rowland penny via samba wrote:
>> On 23/07/2020 14:07, basti via samba wrote:
>>> hello,
>>> is there a way to map usergroups via winbind?
>>>
>>> I need 'getent passwd':
>>> testuser:x:7072:513::/home/users/testuser:/bin/bash
>>>
>>> but I get:
>>> testuser:x:7072:30000::/home/users/testuser:/bin/bash
>>>
>>> gidNumber is set to 513 in samba-ldap.
>>>
>>> cat /etc/samba/smb.conf
>>> [global]
>>>          # Default ID mapping configuration for local BUILTIN accounts
>>>          # and groups on a domain member. The default (*) domain:
>>>          # - must not overlap with any domain ID mapping configuration!
>>>          # - must use an read-write-enabled back end, such as tdb.
>>>          idmap config * : backend = tdb
>>>          idmap config * : range = 1000-2000
>>>
>>>          # idmap config for the SAMDOM domain
>>>          idmap config SAMDOM:backend = ad
>>>          idmap config SAMDOM:schema_mode = rfc2307
>>>          idmap config SAMDOM:range = 2001-999999
>>>          idmap config SAMDOM:unix_nss_info = yes
>> You are never going to get '513' to show as the users primary group ID,
>> because it is less than the lower DOMAIN range you have set in smb.conf.
>> Any uidNumber or gidNumber attributes containing a number less than
>> '2001' will be ignored, I am still trying to understand where the
>> '30000' came from ?
>>
>> Rowland
> ah ok i understand.
I don't ;-)
>
> dn: CN=Users,CN=Builtin,DC=samdom,DC=example,DC=com
> gidNumber: 30000
>
> in my samba ldap.
> whats your gidNumber of that dn?

Mine doesn't have a gidNumber, because it is a container, so if your 
object is similar to this:

objectClass: top
objectClass: container
cn: Users
description: Default container for upgraded user accounts
instanceType: 4
whenCreated: 20151106115615.0Z
whenChanged: 20151106115615.0Z
uSNCreated: 4832
showInAdvancedViewOnly: FALSE
name: Users
objectGUID: 71ddda0c-3c86-40c6-8ad2-1c81aeacf0da
systemFlags: -1946157056
objectCategory: 
CN=Container,CN=Schema,CN=Configuration,DC=samdom,DC=example,D
  C=com
isCriticalSystemObject: TRUE
uSNChanged: 4935
distinguishedName: CN=Users,DC=samdom,DC=example,DC=com

and also has the line:

gidNumber: 30000

Then remove the gidNumber line.

Rowland