[Samba] Samba as a domain member:

[Rowland penny]

On 15/06/2020 17:13, Vieri Di Paola via samba wrote:
> OK for the DC.
>
You have:

winbind use default domain = yes

And:

idmap config DOMAIN : backend = rid
idmap config DOMAIN : range = 10000-999999

idmap config SSIB.ES : backend = rid
idmap config SSIB.ES : range = 1000000-9999999

You cannot use both, remove either 'winbind use default domain = yes' or 
the last two 'idmap config' lines (SSIB.ES looks like a kerberos realm 
anyway)

You also have 'unix password sync = Yes', you should remove this, you 
cannot have users in /etc/passwd and AD.

Rowland