samba - Jul 2020 - Issues with FLOCK on NFS Share

Hello,

When I run "cat /etc/passwd | grep 'qqeda11'", on my linux
box, I get:
qqeda11:x:79846:65600:Project Account for EDA:/home/qqeda11:/bin/bash

When I run "wmic useraccount where (name='qqeda11' and
domain='MUC') get name, sid" on my windows box, I get:
Name     SID
qqeda11  S-1-5-21-43206524-2104247658-1151357142-1581344

so the user is an AD user, but also an unix user. I think this is a legal
construct.
Is there another way to tell samba to use the correct mapping? What about
modifying winbindd_idmap.tdb manually?

Georg

On 06/07/2020 15:30, Georg.Biberger--- via samba wrote:
> Hello,
>
> When I run "cat /etc/passwd | grep 'qqeda11'", on my
linux box, I get:
> qqeda11:x:79846:65600:Project Account for EDA:/home/qqeda11:/bin/bash
That makes 'qqeda11' a LOCAL Unix user
>
> When I run "wmic useraccount where (name='qqeda11' and
domain='MUC') get name, sid" on my windows box, I get:
> Name     SID
> qqeda11  S-1-5-21-43206524-2104247658-1151357142-1581344
That makes 'qqeda11' an AD user.
>
> so the user is an AD user, but also an unix user. I think this is a legal
construct.
Nope, cat /etc/passwd | grep 'rowland' produces no output for myself, 
but 'getent passwd rowland' produces:

rowland:*:10000:10000:Rowland Penny:/home/rowland:/bin/bash

You cannot have the same user in /etc/passwd and AD (and before someone 
jumps in and says you can, yes it is possible, but it isn't supported 
and leads to problems like this)

I would suggest you use my BOTCH (but do not use any other AD users or 
groups) or, better still, use the 'ad' backend and give your user the 
uidNumber '79846'. Either way, delete the user on the Unix machine.

Rowland

> Is there another way to tell samba to use the correct mapping? What about
modifying winbindd_idmap.tdb manually?
>
> Georg
>
>

Hello, 

Get same output with "getent passwd qqeda11" and with "cat
/etc/passwd | grep 'qqeda11'"
qqeda11:x:79846:65600:Project Account for EDA:/home/qqeda11:/bin/bash
 
When you say it is not supported, do you mean it is not supported by samba, or
by what else?

Georg