What do you mean with different winbinds?
I can destroy the member server, its on testing.
It is for the version of windbind?
I can get this from DC.
But I can not do the same with DC.
"Tonight 2X1 sledgehammers." :-) XD
> Date: Mon, 23 Mar 2015 18:43:21 +0000
> From: rowlandpenny at googlemail.com
> To: samba at lists.samba.org
> Subject: Re: [Samba] UID and GID mapping throw DC and Member DC
>
> On 23/03/15 18:27, Jhon P wrote:
> > After tried to solve the problem with "getent", I found
another
> > problem with the Member server.
> >
> > The member server works well, but the "uid" and
"gid" mapping for
> > users its incorrect.
> >
> > In the DC the "UID" "GID" its around 3000085
> >
> > In the Member Server its around 2000 - 3000
> >
> > For example:
> >
> >
> > ADDC Server.
> > ---------------------
> > root at ACDC:/# wbinfo --user-info=Prueba
> > KENNEDY\prueba:*_:3000022:100_:Prueba:/home/KENNEDY/prueba:/bin/false
>
> The '3000022' is coming from winbind mapping the users RID
>
> >
> > MEMBER SERVER
> > -----------------------
> > root at MEMBERSERVER/home/prueba# wbinfo --user-info=prueba
> > prueba:*:_2451:2004_:Prueba:/home/KENNEDY/prueba:/bin/false
> >
>
> The '2451' is again coming from winbind mapping the users RID, but
> because you are using different winbinds on the DC and the member
> server, you are getting different numbers. This is just one of the
> reasons not use the DC for anything other than authentication.
>
> You could try adding a 'uidNumber' to your AD users and a
'gidNumber' to
> 'Domain Users', these numbers need to be inside the range set in
the
> member server smb.conf, for instance if you follow the member server
> page on the wiki, not less than 2000 and not more than 999999.
>
> I must point out that if this does not work, it may be time to get the
> sledgehammer out :-)
>
> Rowland
> > Any way to solve this.
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba