samba - Apr 2023 - Unix Attributes not working as expected in a member server

Thanks Rowland, replaced as per the indication:

# Default ID mapping configuration for local BUILTIN accounts

        idmap config * : backend = tdb
        idmap config * : range = 3000-7999

# idmap config for the MAD domain

        idmap config MAD : backend = ad
        idmap config MAD : schema_mode = rfc2307
        idmap config MAD : range = 10000-999999

# winbind config:

        idmap config MAD : unix_nss_info = yes
#       winbind nss info = rfc2307
        winbind use default domain = yes
#       winbind enum users = yes
#       winbind enum groups = yes

But still no luck.

getent passwd luis
luis:*:10005:10000:Luis Peromarta:/home/MAD/luis:/bin/false

Anything else I can try?

Thanks,
> On 27 Apr 2023, at 11:28, Rowland Penny via samba <samba at
lists.samba.org> wrote:
> 
> Which means, replace 'winbind nss info = rfc2307' with 'idmap
config MAD : unix_nss_info = yes'

On 27/04/2023 10:56, Luis Peromarta via samba wrote:
> Thanks Rowland, replaced as per the indication:
> 
> # Default ID mapping configuration for local BUILTIN accounts
> 
>          idmap config * : backend = tdb
>          idmap config * : range = 3000-7999
> 
> # idmap config for the MAD domain
> 
>          idmap config MAD : backend = ad
>          idmap config MAD : schema_mode = rfc2307
>          idmap config MAD : range = 10000-999999
> 
> # winbind config:
> 
>          idmap config MAD : unix_nss_info = yes
> #       winbind nss info = rfc2307
>          winbind use default domain = yes
> #       winbind enum users = yes
> #       winbind enum groups = yes
> 
> But still no luck.
> 
> getent passwd luis
> luis:*:10005:10000:Luis Peromarta:/home/MAD/luis:/bin/false
> 
Very strange, provided you are not using a very old version of Samba, 
that should have worked, but perhaps I should also have told you to run 
'net cache flush' as well, you could still be reading from the winbind 
cache there.

If that doesn't fix it it, run:

sudo samba-tool user show luis

And check if the attributes are there.

Rowland