On 01/21/2011 4:54 AM, marius klausen wrote:
Hi Takahashi,
While you need not run winbindd if you want to use Active Directory
for authentication, if you need to run, idmap_nss map help you?
i want to use winbind to be able to log in just by providing the accountname,
not domainname\accountname.
i now added the following to my smb.conf:
idmap domains = MYDOMAIN
idmap uid = 6000-61000
idmap gid = 100-3000
idmap config MYDOMAIN: backend = nss
which does not change anything so far (smb+winbind restarted). The uid/gid
ranges cover values which are given to the account in /etc/passwd /etc/group -
maybe that is wrong?
That is correct. winbind generated uid's/gid's should not overlap the
range of the local uid's/gid's.
The idmap gid values that are currently set could cause problems on the
low end; but I can't say with all certainty that that is the cause of
the symptoms you are seeing.
Dale
best regard,
Marius
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
