I just recently dealt with these problems myself. I had the same issues you've mentioned.
https://lists.samba.org/archive/samba/2012-December/170521.html On Thu, Feb 21, 2013 at 6:32 AM, BOTZ Franck (Informaticien) - DDT 67/SG/MGI/CI <[email protected]> wrote: > Hello > > I test your solution but if "getent" return all users and groups (AD + > local), all have the same UID/GID. Strange ... > > This morning I commented idmap config DDCS67:range = 500-40000 and it > works !! ADs users/groups > > > idmap config *:backend = tdb > idmap config *:range = 70000-79999 > idmap config DDCS67:backend = ad > idmap config DDCS67:schema_mode = rfc2307 > #idmap config DDCS67:range = 500-40000 > > > winbind nss info = rfc2307 > winbind trusted domains only = no > winbind use default domain = Yes > winbind enum users = yes > winbind enum groups = yes > > user1:*:70001:70001:user1l:/**data/individuel/DDCS67/user1:/**bin/false > user2:*:70002:70001:user2:/**data/individuel/DDCS67/user2:/**bin/false > user3:*:70011:70001:user3:/**data/individuel/DDCS67/user3:/**bin/false > administrator:*:70003:70001:**Administrator:/data/**individuel/DDCS67/** > administrator:/bin/false > user4:*:70004:70001:user4:/**data/individuel/DDCS67/user4:/**bin/false > user5:*:70005:70001:user5:/**data/individuel/DDCS67/user5:/**bin/false > > It's good but I don't understand why > > Franck > > > Le 21/02/2013 08:21, "> Hervé Hénoch (par Internet)" a écrit : > > Hello Franck >> >> I had the same problem. When I removed "config" in the two lines, getent >> group worked. >> >> idmap config *:backend = tdb >> idmap config *:range = 70001-80000 >> >> For the role of idmap you can read : http://www.samba.org/samba/** >> docs/man/Samba-HOWTO-**Collection/idmapper.html<http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/idmapper.html> >> >> Regards >> >> Le 20/02/2013 21:39, BOTZ Franck (Informaticien) - DDT 67/SG/MGI/CI a >> écrit : >> >>> Without idmap line, it work too. >>> >>> [global] >>> >>> workgroup = DDCS >>> security = ADS >>> realm = DDCS.LOCAL >>> encrypt passwords = yes >>> >>> # idmap config *:backend = tdb >>> # idmap config *:range = 70001-80000 >>> # idmap config DDCS:backend = ad >>> # idmap config DDCS:schema_mode = rfc2307 >>> # idmap config DDCS:range = 500-40000 >>> >>> winbind nss info = rfc2307 >>> winbind trusted domains only = no >>> winbind use default domain = yes >>> winbind enum users = yes >>> winbind enum groups = yes >>> >>> What is the really role of idmap's line ? >>> >>> I have of to miss something >>> >> >> -- > To unsubscribe from this list go to the following URL and read the > instructions: > https://lists.samba.org/**mailman/options/samba<https://lists.samba.org/mailman/options/samba> > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
