[Samba] Problem idmap_ad

Rowland Penny rpenny at samba.org
Tue Dec 13 17:30:57 UTC 2022



On 13/12/2022 17:08, Balke IT via samba wrote:
> Hello,
> 
> I have a problem with idmap_ad. Only some of our users are mapped and I do not get why. The working users are not especially low or high uid or sid. The uidNumber, gidNumber, loginshell and unixhomedirectory are all set with the correct values, although unix_nss_info is set to no so that only uid and gid should be neccesary.
> ADS is a Windows Server 2016.
> 
> idmap_rid is working so that all users can use the shares but with this mapping they do not get the uid and gid from the ads attributes
> 
> The samba installation on Centos 8 is version 4.16.4. The following parameters are set in the smb.conf:
> 
>          idmap config * : backend = tdb
>          idmap config * : range = 117000-117999
>          idmap config DOMAIN:backend = rid
> ;       idmap config DOMAIN:backend = ad

You do not appear to be using the 'ad' idmap backend, you have commented 
it out.

Also, did your finger get stuck, you asked the same question 5 times.

Rowland



More information about the samba mailing list