-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Eric Roseme wrote: > [EMAIL PROTECTED] wrote: > >> Hi, >> >> I think I've narrowed down my problem to the fact that the group >> mapping is >> not giving me the same GID for all 'equivalent' groups, as seen here: >> >> $ net groupmap list >> DOMAIN\Group1 (S-1-5-21-620321403-24207062-1845911597-172256) -> unixgrp1 >> >> $ getent group unixgrp1 >> unixgrp1:x:203: >> >> $ getent group DOMAIN\\Group1 >> DOMAIN\Group1:x:10001:DOMAIN\User1 >> >> This means that the GID of unixgrp1 is 203, however the GID of >> DOMAIN\Group1 >> is completely different! Given the group mapping, I was expecting >> that both >> groups would be returned with a GID of 203, so that according to the >> Linux >> box both those groups are the same.
group mapping on domain members is mutually exclusive with running winbindd. Usually that is. If you do not define a idmap uid and idmap gid ranges, then winbindd should fall back to using the group mapping. and you better have mappings for all domain groups. It's an all or none decision. cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDcjkyIR7qMdg1EfYRAsYcAKCK2oOlebBBncMlnUIhflF/Wuqf8QCbBU7z F9SQfhcbhVksKzjfmQ01B1U= =f1Ld -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
