On Wed, Sep 10, 2008 at 12:44:43PM +0000, simo wrote: > and optionally (to avoid a 1000 ids hole at the start of each range): > idmap config PRIMARYDOMAIN:base_rid = 1000 > idmap config OTHERDOMAIN:base_rid = 1000
I'd stronly recomment not to use base_rid=1000, because in many configurations "Domain Users" is the default primary group ID of users. As the well-known RID of "domain users" is 513, this prevents all these users from logging in, as winbind will not be able to map the primary group's RID anymore. Volker
pgpfdSNx4ZDRo.pgp
Description: PGP signature
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
