What do you mean with different winbinds? I can destroy the member server, its on testing. It is for the version of windbind? I can get this from DC. But I can not do the same with DC. "Tonight 2X1 sledgehammers." :-) XD> Date: Mon, 23 Mar 2015 18:43:21 +0000 > From: rowlandpenny at googlemail.com > To: samba at lists.samba.org > Subject: Re: [Samba] UID and GID mapping throw DC and Member DC > > On 23/03/15 18:27, Jhon P wrote: > > After tried to solve the problem with "getent", I found another > > problem with the Member server. > > > > The member server works well, but the "uid" and "gid" mapping for > > users its incorrect. > > > > In the DC the "UID" "GID" its around 3000085 > > > > In the Member Server its around 2000 - 3000 > > > > For example: > > > > > > ADDC Server. > > --------------------- > > root at ACDC:/# wbinfo --user-info=Prueba > > KENNEDY\prueba:*_:3000022:100_:Prueba:/home/KENNEDY/prueba:/bin/false > > The '3000022' is coming from winbind mapping the users RID > > > > > MEMBER SERVER > > ----------------------- > > root at MEMBERSERVER/home/prueba# wbinfo --user-info=prueba > > prueba:*:_2451:2004_:Prueba:/home/KENNEDY/prueba:/bin/false > > > > The '2451' is again coming from winbind mapping the users RID, but > because you are using different winbinds on the DC and the member > server, you are getting different numbers. This is just one of the > reasons not use the DC for anything other than authentication. > > You could try adding a 'uidNumber' to your AD users and a 'gidNumber' to > 'Domain Users', these numbers need to be inside the range set in the > member server smb.conf, for instance if you follow the member server > page on the wiki, not less than 2000 and not more than 999999. > > I must point out that if this does not work, it may be time to get the > sledgehammer out :-) > > Rowland > > Any way to solve this. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
On 23/03/15 19:15, Jhon P wrote:> What do you mean with different winbinds?On the DC, winbind is built into the samba daemon, you do not run a separate winbind daemon. On a member server you run the nmbd & smbd daemons along with a separate winbind daemon.> > I can destroy the member server, its on testing. > It is for the version of windbind? > > I can get this from DC. > > > But I can not do the same with DC. > > "Tonight 2X1 sledgehammers." :-) XD >What you could try (and I never told you this) is sssd instead of winbind, you can use this on both the DC and the member server along with RFC2307 attributes. The only problem would be getting a new enough version, you may have to update to jessie. Rowland> > Date: Mon, 23 Mar 2015 18:43:21 +0000 > > From: rowlandpenny at googlemail.com > > To: samba at lists.samba.org > > Subject: Re: [Samba] UID and GID mapping throw DC and Member DC > > > > On 23/03/15 18:27, Jhon P wrote: > > > After tried to solve the problem with "getent", I found another > > > problem with the Member server. > > > > > > The member server works well, but the "uid" and "gid" mapping for > > > users its incorrect. > > > > > > In the DC the "UID" "GID" its around 3000085 > > > > > > In the Member Server its around 2000 - 3000 > > > > > > For example: > > > > > > > > > ADDC Server. > > > --------------------- > > > root at ACDC:/# wbinfo --user-info=Prueba > > > KENNEDY\prueba:*_:3000022:100_:Prueba:/home/KENNEDY/prueba:/bin/false > > > > The '3000022' is coming from winbind mapping the users RID > > > > > > > > MEMBER SERVER > > > ----------------------- > > > root at MEMBERSERVER/home/prueba# wbinfo --user-info=prueba > > > prueba:*:_2451:2004_:Prueba:/home/KENNEDY/prueba:/bin/false > > > > > > > The '2451' is again coming from winbind mapping the users RID, but > > because you are using different winbinds on the DC and the member > > server, you are getting different numbers. This is just one of the > > reasons not use the DC for anything other than authentication. > > > > You could try adding a 'uidNumber' to your AD users and a > 'gidNumber' to > > 'Domain Users', these numbers need to be inside the range set in the > > member server smb.conf, for instance if you follow the member server > > page on the wiki, not less than 2000 and not more than 999999. > > > > I must point out that if this does not work, it may be time to get the > > sledgehammer out :-) > > > > Rowland > > > Any way to solve this. > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: https://lists.samba.org/mailman/options/samba
Question: When you add users to the ADDC the UID users are always going to be different from those obtained by the DC winbind Member? I talk about destroy the member server, because I have the freedom to do it again if necessary, this server is not in production. Regards.> Date: Mon, 23 Mar 2015 19:28:19 +0000 > From: rowlandpenny at googlemail.com > To: samba at lists.samba.org > Subject: Re: [Samba] UID and GID mapping throw DC and Member DC > > On 23/03/15 19:15, Jhon P wrote: > > What do you mean with different winbinds? > > On the DC, winbind is built into the samba daemon, you do not run a > separate winbind daemon. On a member server you run the nmbd & smbd > daemons along with a separate winbind daemon. > > > > > I can destroy the member server, its on testing. > > It is for the version of windbind? > > > > I can get this from DC. > > > > > > But I can not do the same with DC. > > > > "Tonight 2X1 sledgehammers." :-) XD > > > > What you could try (and I never told you this) is sssd instead of > winbind, you can use this on both the DC and the member server along > with RFC2307 attributes. The only problem would be getting a new enough > version, you may have to update to jessie. > > Rowland > > > Date: Mon, 23 Mar 2015 18:43:21 +0000 > > > From: rowlandpenny at googlemail.com > > > To: samba at lists.samba.org > > > Subject: Re: [Samba] UID and GID mapping throw DC and Member DC > > > > > > On 23/03/15 18:27, Jhon P wrote: > > > > After tried to solve the problem with "getent", I found another > > > > problem with the Member server. > > > > > > > > The member server works well, but the "uid" and "gid" mapping for > > > > users its incorrect. > > > > > > > > In the DC the "UID" "GID" its around 3000085 > > > > > > > > In the Member Server its around 2000 - 3000 > > > > > > > > For example: > > > > > > > > > > > > ADDC Server. > > > > --------------------- > > > > root at ACDC:/# wbinfo --user-info=Prueba > > > > KENNEDY\prueba:*_:3000022:100_:Prueba:/home/KENNEDY/prueba:/bin/false > > > > > > The '3000022' is coming from winbind mapping the users RID > > > > > > > > > > > MEMBER SERVER > > > > ----------------------- > > > > root at MEMBERSERVER/home/prueba# wbinfo --user-info=prueba > > > > prueba:*:_2451:2004_:Prueba:/home/KENNEDY/prueba:/bin/false > > > > > > > > > > The '2451' is again coming from winbind mapping the users RID, but > > > because you are using different winbinds on the DC and the member > > > server, you are getting different numbers. This is just one of the > > > reasons not use the DC for anything other than authentication. > > > > > > You could try adding a 'uidNumber' to your AD users and a > > 'gidNumber' to > > > 'Domain Users', these numbers need to be inside the range set in the > > > member server smb.conf, for instance if you follow the member server > > > page on the wiki, not less than 2000 and not more than 999999. > > > > > > I must point out that if this does not work, it may be time to get the > > > sledgehammer out :-) > > > > > > Rowland > > > > Any way to solve this. > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: https://lists.samba.org/mailman/options/samba > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba