Hi all, Samba newbie again...I thought I was sorted out yesterday but a few more thing are plaguing me.... I have in my smb.conf: idmap uid = 10000-20000 idmap gid = 10000-20000 and winbind enum users = yes winbind enum groups = yes however, 'getent passwd' shows users within the default enumeration range (ie:16777550 or something like that!).This goes for groups too. I can't shake them off. All users are currently being asked for a username and password which are rejected (which I assume is due to this mix up - im not sure) If anyone can offer advice I'd be extremely grateful! Cheers, Kris
Gerald (Jerry) Carter
2007-May-24 12:10 UTC
[samba] User/group enumeration range not being used
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Kris Monstad wrote:> Hi all, > > Samba newbie again...I thought I was sorted out yesterday but a few more > thing are plaguing me.... > > I have in my smb.conf: > > idmap uid = 10000-20000 > idmap gid = 10000-20000 > > and > > winbind enum users = yes > winbind enum groups = yes > > however, 'getent passwd' shows users within the default enumeration > range (ie:16777550 or something like that!).This goes for groups too. I > can't shake them off. All users are currently being asked for a username > and password which are rejected (which I assume is due to this mix up - > im not sure)Sounds like you are on RedHat and the high watermark in winbindd_idmap.tdb is already set above you range defined in smb.conf. I suggest you rename winbindd_idmap.tdb to something else and restart winbindd (if you don't care about the existing SID/uid/gid mappings). cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGVYCMIR7qMdg1EfYRAugzAKDbih7qNBRngwkfxN2ZbQ/WyhzECQCfV0zW FSonnVh7t12ssTbzRyS3aqQ=hanX -----END PGP SIGNATURE-----