Just when I thought I had idmap changes correct for 3.6, I realize I have a setup that's not quite right:
getent passwd
->No AD users
getent passwd DOMAINA\\aduser
aduser:*:1001601:1000513::/home/aduser:/bin/bash

Shouldn't "getent passwd" show both local and AD users?

Samba has had such an identity crisis over the years with idmap documentation. Depending, on where you look, even samba.org, different documentation states outdated configuration examples if you are using 3.6. And some of it almost even seems to contradict each other? Now I'm not really sure anymore what to reference for 3.6's latest id mapping configuration file changes..
For instance, I'm not sure which one is correct anymore:
is it:
    idmap config * : backend        = tdb
    idmap config * : range          = 9000000-9999999

    idmap config DOMAINA : backend     = rid
    idmap config DOMAINA : range       = 1000000 - 1999999

    idmap config DOMAINB : backend     = rid
    idmap config DOMAINB : range       = 2000000 - 2999999
or:
    idmap config * : backend        = tdb
    idmap config * : range          = 1000000-2999999

    idmap config DOMAINA : backend     = rid
    idmap config DOMAINA : range       = 1000000 - 1999999

    idmap config DOMAINB : backend     = rid
    idmap config DOMAINB : range       = 2000000 - 2999999


Can we have a sane effort to publish updated documentation for id mapping that's relevant to Samba 3.6?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to