samba.20.hmsdbryant@spamgourmet.com
2004-Aug-18 15:41 UTC
[Samba] Results of net idmap dump don't match input to net idmap restore
Greetings, I'm trying to pre-populate a Samba winbindd idmap database with some fixed entries. But the output from "net idmap dump" does not match up to the input to a "net idmap restore" command. Here's an example sequence. ------------- # # wc -l /tmp/usermapper.tmp 1218 /tmp/usermapper.tmp # head -3 /tmp/usermapper.tmp UID 100001 S-1-5-15-735fc311-1cda3193-320a1743-45e UID 100002 S-1-5-15-735fc311-1cda3193-320a1743-81a UID 100003 S-1-5-15-735fc311-1cda3193-320a1743-7825 # rm /usr/local/samba/var/locks/winbindd_idmap.tdb # cat /tmp/usermapper.tmp | net idmap restore USER HWM: 100864 GROUP HWM: 100314 # net idmap dump /usr/local/samba/var/locks/winbindd_idmap.tdb | wc -l 563 # ------------- There are 1218 entries in the input, but only 563 in the output! Any idea what might be going on? I can forward copies of the input and output files if that would help. Thanks! David P.S. Here's a (sanitized) copy of my smb.conf ----------------- [global] # Start of host specific entries interfaces = 127.0.0.1 1.2.3.4 netbios name = ULTRAZEN # End of Host specific entries # Global paramaters workgroup = WKGRP preferred master = No domain master = No wins server = 1.2.3.5 # AD parameters realm = HMS.HARVARD.EDU password server = * security = ADS encrypt passwords = Yes # winbind parameters winbind separator = . winbind cache time = 10 winbind enum users = yes winbind enum groups = yes winbind use default domain = yes template shell = /bin/tcsh template homedir = /export/samba/%U idmap uid = 70000-500000 idmap gid = 70000-500000 ----------------- ? David Bryant - Unix Systems Administrator Harvard Medical School - Boston Massachusetts ?
Seemingly Similar Threads
- Pre-populating winbind idmap doesn't work.
- kerberos and/or winbind ??
- User/Group HWM ignored when converting idmap from tdb to LDAP
- IDMAP dump and restore for second server.
- Machine name defined on AD Server; unable to join linux machine -- receiving error.