[Samba] Samba as a domain member:

Rowland penny rpenny at samba.org
Mon Jun 15 16:29:48 UTC 2020

On 15/06/2020 17:13, Vieri Di Paola via samba wrote:
> OK for the DC.
You have:

winbind use default domain = yes


idmap config DOMAIN : backend = rid
idmap config DOMAIN : range = 10000-999999

idmap config SSIB.ES : backend = rid
idmap config SSIB.ES : range = 1000000-9999999

You cannot use both, remove either 'winbind use default domain = yes' or 
the last two 'idmap config' lines (SSIB.ES looks like a kerberos realm 

You also have 'unix password sync = Yes', you should remove this, you 
cannot have users in /etc/passwd and AD.


More information about the samba mailing list