----- Original Message -----
From: "Michael Wood" <esiot...@gmail.com>
To: "James Kosin" <james_ko...@cox.net>
Cc: "KJS" <li...@netzensolutions.com>; <samba@lists.samba.org>
Sent: Friday, October 23, 2009 3:38 AM
Subject: Re: [Samba] UID - high need to lower it for a test user - active
directory auth
<<-- snip -->>
What sort of problem are you having?
The higher UID for non-local users is normal and shouldn't be touched in
most cases. This is to keep the local UIDs different significantly from
the
ones that are not local.
The only problem you may be having would be if you have a huge number of
local users. In which case you would have to determine if it would be
better to create all local account for everyone on the domain to keep from
having problems. But, I seriously doubt this is the problem.
If it's a wild goose chase it's my fault. He is having trouble with
some commercial software when run by domain users instead of local
users.
The differences between them as far as I could tell are:
The local users all have UIDs and primary group IDs << 65536.
The domain users all have UIDs and primary group IDs >> 65536.
Also, the primary group name of the domain users is "Domain Users".
i.e. it has a space in it.
Since traditionally UIDs and GIDs were 16 bit numbers, I thought it
was possible that this commercial software somehow did not like the
large UIDs/GIDs.
Perhaps it would be easier to test a local user with a high UID and
primary group ID to see if that also does not work.
----
Which applications? I do know Microsoft Office products usually have some
fine tuning when run with or without domain logins.
Other than that; we would need more specifics to answer your problem...
1) You said the application being run was having problems, what error
messages or problems? Try to be as complete as possible.
2) Name the application if possible? Microsoft Excel, etc.
3) If a custom application, what type of access is giving the problem?
Database, text file, binary file, permissions, etc.
4) Is the problem random or only with users on the domain as oppose to the
local machine accounts? The local machine accounts may have special
permissions to access more features of the system. If the special
application is taking advantage of these features it may not like the domain
users.
5) Calm down...
James Kosin
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
