Hai Mathieu, The user got also reply on the list now but Rowland ( from samba devs ) pointed a good thing out.
Linux user nobody : uid 65534 That wil conflic with the defaults used for the domain id ranges. Quote from Rowland: So, what I recommend is, use '1000-2999' for local Unix users & groups, '3000-7999' for the 'Well known SIDS' and anything outside the Domain and start the main AD DOMAIN at '10000' (which is, incidentally, the number Microsoft chose). This leads to lines such as these in smb.conf: idmap config *:backend = tdb idmap config *:range = 3000-7999 idmap config SAMDOM : backend = rid idmap config SAMDOM : range = 10000-999999 Now, for Debian that would be idmap config SAMDOM : range = 10000-65533 But that is a small range or debian should advice idmap config SAMDOM : range = 100000-999999 Anything from/above 100.000 for samba AD. So imo, the debian setup the README.Debian should mention something about this. Best regards, Louis > -----Oorspronkelijk bericht----- > Van: Mathieu Parent [mailto:math.par...@gmail.com] > Verzonden: woensdag 20 juni 2018 15:08 > Aan: Louis; 899...@bugs.debian.org > CC: Chad William Seys > Onderwerp: Re: Bug#899269: [Pkg-samba-maint] Bug#899269: > Bug#899269: changes to 4.8 > > Le mer. 20 juin 2018 à 12:39, L.P.H. van Belle > <be...@bazuin.nl> a écrit : > > > > No, dont try below. > > > > Thats wrong ( sorry Mathieu ) > > Yes. This was copied from manpage, then (few minutes) later corrected. > (I removed the ad backend, because it requires SFU to be enabled and > other requirements.) > > The idea Chad William Seys, is that specifying the idmap > range is mandatory. > > > Regards > > -- > Mathieu Parent > >