[Samba] Problem with AD & idmap

[Lars Schimmer]

On 02/03/2022 14:49, Lars Schimmer via samba wrote:
> On 02/03/2022 14:44, Rowland Penny via samba wrote:
>> On Wed, 2022-03-02 at 14:24 +0100, Lars Schimmer via samba wrote:
> lso just did a test on members:
>>
>> members "Domain Users"
>> Admin1 Admin2 Admin3
>>
>> and no one else. Although we got >50 accounts in that group, not all
>>> with gid.
>>
>> Again, that will only show users that have a uidNumber attribute
>> containing a number inside the '1000-989999' range you set in smb.conf
>> AND Domain Users must have a gidNumber inside the same range.
> 
> Yeah, the neeeded users do all have a uidNumber between 1000 and 9999,
> and all do have the same gidNumber 10100, which is "Domain User" group.
> 
> So all these uidNumber and gidNumber are in that range.
> Thats why it is a somewhat issue we cannot fix with our knowledge...


Some more from the winbind-idmap log, a user in Domain Users, with
uidnumber  3013, it shows this:

  ids                      : *
                  ids: struct wbint_TransIDArray
                      num_ids                  : 0x00000001 (1)
                      ids: ARRAY(1)
                          ids: struct wbint_TransID
                              type_hint                : ID_TYPE_BOTH (3)
                              domain_index             : 0x00000000 (0)
                              rid                      : 0x00000614 (1556)
                              xid: struct unixid
                                  id                       : 0xffffffff
(4294967295)
                                  type                     :
ID_TYPE_NOT_SPECIFIED (0)

[2022/03/02 15:24:18.165081, 10, pid=1448, effective(0, 0), real(0, 0),
class=winbind]
../../source3/winbindd/idmap_ad.c:953(idmap_ad_sids_to_unixids)
  idmap_ad_sids_to_unixids: No xid in CN=Tobias,DC=cgv,DC=tugraz,DC=at



>> Rowland
>>
>>
>>
> 
> 
> MfG,
> Lars Schimmer


MfG,
Lars Schimmer
-- 
-------------------------------------------------------------
TU Graz, Institut für ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405       E-Mail: l.schimmer at cgv.tugraz.at
Fax: +43 316 873-5402       PGP-Key-ID: 0x4A9B1723