[Samba] Change (fix) idmap config

Rowland Penny rpenny at samba.org
Wed Nov 2 18:18:38 UTC 2022



On 02/11/2022 18:05, Kees van Vloten via samba wrote:
> 
> On 02-11-2022 18:58, Rowland Penny via samba wrote:
>>
>>
>> On 02/11/2022 17:20, Michael Tokarev wrote:
>>> 02.11.2022 20:14, Rowland Penny via samba wrote:
>>> ..
>>>>> Some further comments report a new "join" is required before 
>>>>> restarting services.
>>>>> Can this be a correct approach?
>>>>
>>>> If all else fails, it is worth trying, but 'leave' the domain first.
>>>
>>> Rowland, why 'leave' it?
>>>
>>> This way, the machine records will be deleted, including any 
>>> customizations,
>>> say, uidNumber. Why can't it re-join "to" an existing machine object?
>>> I experimented with that yesterday and it worked fine without a 'leave'.
>>>
>>> Thanks,
>>>
>>> /mjt
>>
>> net ads leave --keep-account
>>
>> Rowland
>>
>>
> Samba seems to like to remove computer-accounts.
> 
> I noticed that a computer-account gets removed when the domain join 
> fails. It sounds logical when the join create the account. But 
> pre-provisioned computer-accounts are also removed on a failing join...
> 
> Is there a similar switch to prevent that behaviour?
> 
> - Kees.
> 
> 

Sorry to say, but no there isn't, but patches are always welcome ;-)

Rowland



More information about the samba mailing list