[Samba] idmap ad question

[Andrew Bartlett]

On Sun, 2023-02-12 at 16:40 +0000, Vaughan, Robert J via samba wrote:
> Hi all
> 
> In the idmap_config_ad wiki, it states ..
> 
> If you use the winbind 'ad' backend, you must add a gidNumber attribute to the Domain Users group in AD.
> 
> Can someone explain this?

My guess is that failing to map the typical primary group of all users
is likely to cause major service disruption.

Andrew Bartlett

-- 
Andrew Bartlett (he/him) https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba