samba - Jun 2018 - is "map untrusted to domain" possible?

hi:

   at RHEL 7.4 we had used "map untrusted to domain = yes". so users
can login with "username" instead of "sam-dom\username".

   after upgrade to RHEL 7.5, samba version upgrade from 4.6 to 4.7.
now "map untrusted to domain = yes" or "map untrusted to domain
auto" are not working.

   can we still let user to use "usename" instead of
"sam-dom\username" like old days?

   thanks a lot for help!!

On Fri, 29 Jun 2018 12:56:33 +0800
d tbsky via samba <samba at lists.samba.org> wrote:
> hi:
> 
>    at RHEL 7.4 we had used "map untrusted to domain = yes". so
users
> can login with "username" instead of
"sam-dom\username".
> 
>    after upgrade to RHEL 7.5, samba version upgrade from 4.6 to 4.7.
> now "map untrusted to domain = yes" or "map untrusted to
domain > auto" are not working.
> 
>    can we still let user to use "usename" instead of
> "sam-dom\username" like old days?
> 
>    thanks a lot for help!!
> 
The default for 'map untrusted to domain' was changed from 'no'
to
'auto' when 4.7.0 was released, but setting it to 'yes' should
still
work.

Can you please post the '[global]' portion of your smb.conf.

Rowland

2018-06-29 15:12 GMT+08:00 Rowland Penny via samba <samba at
lists.samba.org>:
> On Fri, 29 Jun 2018 12:56:33 +0800
> d tbsky via samba <samba at lists.samba.org> wrote:
>
>> hi:
>>
>>    at RHEL 7.4 we had used "map untrusted to domain = yes".
so users
>> can login with "username" instead of
"sam-dom\username".
>>
>>    after upgrade to RHEL 7.5, samba version upgrade from 4.6 to 4.7.
>> now "map untrusted to domain = yes" or "map untrusted to
domain >> auto" are not working.
>>
>>    can we still let user to use "usename" instead of
>> "sam-dom\username" like old days?
>>
>>    thanks a lot for help!!
>>
>
> The default for 'map untrusted to domain' was changed from
'no' to
> 'auto' when 4.7.0 was released, but setting it to 'yes'
should still
> work.
>
> Can you please post the '[global]' portion of your smb.conf.
>
> Rowland
hi:
 samba file server global configuration below:

[global]
   workgroup = SAM-DOM
   netbios name = file
   # password server = DC.AD.SAM-DOM.EXAMPLE.COM
   realm = AD.SAM-DOM.EXAMPLE.COM
   security = ads

   idmap config *:backend = tdb
   idmap config *:range = 1000000-1999999

   idmap config SAM-DOM:backend = ad
   idmap config SAM-DOM:default = yes
   idmap config SAM-DOM:range = 1000-999999
   idmap config SAM-DOM:schema_mode = rfc2307

   winbind enum users = yes
   winbind enum groups = yes
   winbind nested groups = yes
   winbind use default domain = yes
   winbind offline logon = no
   obey pam restrictions = no

   winbind nss info = template
   template homedir = /share/samba/home/%U
   template shell = /bin/bash

   lanman auth = yes
   map untrusted to domain = yes