Il 04/05/2012 23:47, Kevin Elliott ha scritto:

So what's happening is that the idmap cache is expiring but winbind is unable 
to create new entries until its restarted?


Here's my idmap cache values:

         idmap backend = tdb
         idmap alloc backend =
         idmap cache time = 604800
         idmap negative cache time = 120
         idmap uid = 10000-79999
         idmap gid = 10000-79999
         winbind separator = +
         winbind cache time = 300
         winbind reconnect delay = 30
         winbind enum users = Yes
         winbind enum groups = Yes
         winbind use default domain = Yes
         winbind trusted domains only = No
         winbind nested groups = Yes
         winbind expand groups = 1
         winbind nss info = template
         winbind refresh tickets = No
         winbind offline logon = No
         winbind normalize names = No


After playing with parameters I found that lowering idmap cache time has some effects.
Now, with a value of 300, looks good.
I have to do other tests to understand what is happening, but it seems a good staring point.

Daniele
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to