[Samba] Unix Attributes not working as expected in a member server

Rowland Penny rpenny at samba.org
Thu Apr 27 10:09:43 UTC 2023



On 27/04/2023 10:56, Luis Peromarta via samba wrote:
> Thanks Rowland, replaced as per the indication:
> 
> # Default ID mapping configuration for local BUILTIN accounts
> 
>          idmap config * : backend = tdb
>          idmap config * : range = 3000-7999
> 
> # idmap config for the MAD domain
> 
>          idmap config MAD : backend = ad
>          idmap config MAD : schema_mode = rfc2307
>          idmap config MAD : range = 10000-999999
> 
> # winbind config:
> 
>          idmap config MAD : unix_nss_info = yes
> #       winbind nss info = rfc2307
>          winbind use default domain = yes
> #       winbind enum users = yes
> #       winbind enum groups = yes
> 
> But still no luck.
> 
> getent passwd luis
> luis:*:10005:10000:Luis Peromarta:/home/MAD/luis:/bin/false
> 

Very strange, provided you are not using a very old version of Samba, 
that should have worked, but perhaps I should also have told you to run 
'net cache flush' as well, you could still be reading from the winbind 
cache there.

If that doesn't fix it it, run:

sudo samba-tool user show luis

And check if the attributes are there.

Rowland




More information about the samba mailing list