The database is here (in Linux/Debian):
/var/lib/samba/winbindd_idmap.tdb
try to just delete (move/rename) it and then restart winbind.
But do not forget about BACKUP!
I had this problem and this solution helped me
In AD there are not only users but also as a special accounts like
krbtgt and groups and more...
On 30/12/2011 13:00, Bruno Martins wrote:
Hello mate,
Thanks for your answer. How can I do that?
I've noticed this:
root@sputnik:/var/lib/samba# wbinfo -u | wc -l
140
root@sputnik:/var/lib/samba# tdbbackup -v winbindd_idmap.tdb
winbindd_idmap.tdb : 521 records
Is this normal? 140 users on AD (seems correct), but 521 mappings?
Best regards,
Bruno Martins
On Fri, Dec 30, 2011 at 11:57 AM, Lantukh Sergey
<[email protected]> wrote:
Hello
I think that you need to clean the Winbind database that contains bridge
between UID/GID - SID
And then restart winbind, and he again will fill the database
On 30/12/2011 10:44, Bruno Martins wrote:
Hello list,
I am using Samba + winbind and I have some users that cannot access
shares on this server, getting the following error in
'/var/log/samba':
[2011/12/30 09:33:08.072315, 1]
smbd/sesssetup.c:454(reply_spnego_kerberos)
Username GALILEU-F\teste is invalid on this system
Also, in 'winbind-idmap' log file I am getting this:
[2011/12/30 09:32:56.902810, 1]
winbindd/idmap_tdb.c:445(idmap_tdb_allocate_id)
Fatal Error: UID range full!! (max: 120000)
So what happens in reality? Trying to 'getent' that user results in
nothing, so no mapping, right?
root@sputnik:/var/cache/samba# getent passwd bmartins
bmartins:*:100001:100000::/home/GALILEU-F/bmartins:/bin/false
root@sputnik:/var/cache/samba# getent passwd teste
root@sputnik:/var/cache/samba#
However, 'wbinfo' works for that user:
root@sputnik:/var/cache/samba# wbinfo -u | grep teste
teste
My 'smb.conf' returns this, regarding to idmap parameters:
root@sputnik:/var/cache/samba# cat /etc/samba/smb.conf | grep idmap
# idmap uid = 10000-200000
idmap uid = 100000-120000
# idmap gid = 300000-400000
idmap gid = 100000-120000
I have tried lower and higher values, did a reload on winbind service,
but nothing seems to help.
Could you please help me on this?
Best regards,
Bruno Martins
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
