On Wed, Apr 11, 2012 at 3:50 PM, bakytn <bak...@gmail.com> wrote: > I tried the old config and newer. > > idmap backend = rid:DOMAIN=4000-20000 > idmap uid = 4000-20000 > idmap gid = 4000-20000
Doesn't look right - man smb.conf - for the correct syntax. For your version I think it should be more like: idmap backend = tdb idmap uid = 300000-400000 idmap gid = 300000-400000 idmap config DOMAIN:backend = rid idmap config DOMAIN:range = 2000-299999 from man smb.conf: winbind uses this parameter to find the backend that is authoritative for a unix ID to SID mapping, so it must be set for each individually configured domain, and it must be disjoint from the ranges set via idmap uid and idmap gid. > My version is SAMBA 3.5.11 If you check the release notes you'll find that 3.5.12 fixed a winbind race issue in 3.5.11. Also there's a security exploit and it's a good idea to update to 3.5.14, or 3.6.4. I'm still a bit leery of the 3.6 series for production and hopefully 3.6.5 will be released soon fixing some outstanding issues. Chris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba