Thanks for your answer, Dale. You were right, I had that line wrong. However, I think it just affected what uids the users would get, because the problem remains. I have configured the TDB, LDAP and AD backends successfully; only the RID backend gives me the problem I explained in my original message.

I tried using the "idmap config" directive as well...
  idmap backend = tdb
  idmap uid = 1000000-1000010
  idmap gid = 1000000-1000010

  idmap config WBLABB : backend  = rid
  idmap config WBLABB : range    = 10000 - 1000000
  winbind use default domain = yes

...with the same result, i.e I need to retrieve the "passwd" entry by username before I can do the reverse.

Jakob

Dale Schroeder wrote:
I believe smb.conf line should be
   idmap backend = rid:DOMAIN=100000-10000000

Dale


Jakob Ahlin wrote:
Hi,

I'm having a problem using the RID idmap backend with Winbind. Having configured NSS with the Winbind module, I can use "getent passwd" to look up a user by its username, but not by its uidnumber. However, if I first do a lookup using the username or run wbinfo on the user (specifying either the username or uid), and then try "getent passwd" with the uidnumber, I get the correct result.

See here:
debianrid:~# getent passwd 161907
debianrid:~# wbinfo --uid-info 161907
lokr:*:161907:100513:Lovisa Kristiansson (lokr):/home/WBLABB/lokr:/bin/sh
debianrid:~# getent passwd 161907
lokr:*:161907:100513:Lovisa Kristiansson (lokr):/home/WBLABB/lokr:/bin/sh
debianrid:~#

Related smb.conf lines:
  idmap backend = rid
  idmap uid = 100000-10000000
  idmap gid = 100000-10000000
  winbind use default domain = yes
  winbind enum groups = yes
  winbind enum users = yes

Version information:
  Version 3.3.7-SerNet-Debian

From log.winbindd-idmap:
[2009/08/12 10:13:58,  0] lib/module.c:do_smb_load_module(69)
Module '/usr/lib/samba/idmap/rid.so' initialization failed: NT_STATUS_OBJECT_NAME_COLLISION
[2009/08/12 10:13:58,  1] winbindd/idmap.c:idmap_alloc_init(580)
 could not find idmap alloc module rid

Any ideas?

Regards,
Jakob


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to