samba - Dec 2022 - R: group 'Domain User' has changed rid in a new server

On 19/12/2022 13:17, Corrado Ravinetto via samba wrote:
> Hi at all
> After many time spent to investigate why my new dm don't enable access
to everyone i found the problem: rid assigned to 'Domain user' is
changed.
> On old samba server i have 'Domain user' with rid=513, in new
server the rid for 'Domain user' is changed and is 110513.
> On each user i have 513 as PrimaryGroup and then i can't access to my
new server, how can i change rid on new server ???
> 
>
Let me guess, you are using the 'rid' idmap backend and you have a line 
similar to this in your smb.conf:

idmap config DOMAIN : range = 110000-???????

Where 'DOMAIN' is your workgroup name.

If so, then that it is how it is supposed to work, the groups (and 
users) ID is calculated from the RID and the low range:

ID = RID + low range

110513 = 513 + 110000

Lots of bad ideas were used in the past, using '513' to identify Domain 
Users was, in my opinion, a bad idea.

The easiest way out of this will be to write a script that checks for 
group ownership and chown any '513' to Domain Users.

Rowland

Rowland thanks a lot.
This choice arrive from an old samba 3 installed many years ago, i think quite
20 years, then upgraded, upgraded and upgraded.
The problem is not how to change rights on files but how can i change
PrimaryGroupID on all users ??




Corrado Ravinetto
Sistemi informativi
corrado.ravinetto at lanificiocerruti.com <mailto:corrado.ravinetto at
lanificiocerruti.com>
T: +39 015 3591283
[Lanificio F.lli CERRUTI]
Lanificio F.lli Cerruti S.p.A.
Via Cernaia 40, 13900 - Biella (BI) Italy
www.lanificiocerruti.com <http://www.lanificiocerruti.com/>

[Twitter] <https://twitter.com/Lan_Cerruti> [Facebook] 
<https://www.facebook.com/LanificioCerruti> [Instagram] 
<https://www.instagram.com/lanificiocerruti/>

Rispetta l'ambiente, non stampare questa mail se non necessario
Respect the environment, don't print unless necessary

[Unesco]