samba - Jul 2014 - winbind rid changing user's UID and GID numbers - Samba 3.6

Greetings,

For a number of samba iterations I've been using Samba with winbind to 
keep AD users's UNIX UIDs and GIDs the same across several systems.  I 
don't run the Active Directory set-up and those that do are NOT going to 
make any alterations to make my life easier.  So i have always used 
idmap_rid to keep consistent UID/GID numbers across all my UNIX machines.

This has worked very well, and the UIDs and GIDs were consistent across 
the different hosts...until I upgraded one of the Solaris 10 boxes to 
Samba 3.6.24 from 3.5.8.  Now it seems that user's UIDs and GIDs are 
getting altered on some random (to me) basis....but not all of them and 
not all at the same time.  Where I had seen a user that always received 
101888 as their UID for years and "Domain Users" had a GID of 10513
for
years now they receive something different.

Three other Solaris hosts have been running Samba 3.6.x for some time 
and never exhibited this sort of behavior.  Something up with winbind or 
some change in behavior that I over looked?  Documentation for winbind 
configuration for AD member servers using rid has always seems a bit 
thin to me so I'd not be surprised to see that I am missing something. 
With so many older examples of smb.conf out there it can ve difficult to 
figure out which are current/correct.

Any thoughts/help would be appreciated.


-------------------------------
# 3.6.24 IDMAP settings
    winbind use default domain = yes
    template homedir = /home/%U
    template shell = /usr/bin/bash
    idmap config * : range =  10000-100000000
    idmap config * : backend = tdb
    idmap config CSUNET:	 default = yes
    idmap config CSUNET:	 backend = rid
    idmap config CSUNET:	 range =  10000-100000000

-------------------------------
-- 
***********************************************************************
Robert M. Martel                 I met someone who looks a lot like you
System Administrator             She does the things you do
Levin College of Urban Affairs   But she is an IBM
Cleveland State University                           -Jeff Lynne
(216) 687-2214
r.martel at csuohio.edu
***********************************************************************

Robert,

You have the same range for * and CSUNET.  Those ranges cannot overlap, 
so fixing those would be the place to start.

Dale

On 07/29/2014 3:28 PM, Robert Martel wrote:
> Greetings,
>
> For a number of samba iterations I've been using Samba with winbind to 
> keep AD users's UNIX UIDs and GIDs the same across several systems.  I 
> don't run the Active Directory set-up and those that do are NOT going 
> to make any alterations to make my life easier.  So i have always used 
> idmap_rid to keep consistent UID/GID numbers across all my UNIX machines.
>
> This has worked very well, and the UIDs and GIDs were consistent 
> across the different hosts...until I upgraded one of the Solaris 10 
> boxes to Samba 3.6.24 from 3.5.8.  Now it seems that user's UIDs and 
> GIDs are getting altered on some random (to me) basis....but not all 
> of them and not all at the same time.  Where I had seen a user that 
> always received 101888 as their UID for years and "Domain Users"
had a
> GID of 10513 for years now they receive something different.
>
> Three other Solaris hosts have been running Samba 3.6.x for some time 
> and never exhibited this sort of behavior.  Something up with winbind 
> or some change in behavior that I over looked? Documentation for 
> winbind configuration for AD member servers using rid has always seems 
> a bit thin to me so I'd not be surprised to see that I am missing 
> something. With so many older examples of smb.conf out there it can ve 
> difficult to figure out which are current/correct.
>
> Any thoughts/help would be appreciated.
>
>
> -------------------------------
> # 3.6.24 IDMAP settings
>    winbind use default domain = yes
>    template homedir = /home/%U
>    template shell = /usr/bin/bash
>    idmap config * : range =  10000-100000000
>    idmap config * : backend = tdb
>    idmap config CSUNET:     default = yes
>    idmap config CSUNET:     backend = rid
>    idmap config CSUNET:     range =  10000-100000000
>
> -------------------------------

On Tue, 2014-07-29 at 16:28 -0400, Robert Martel wrote:
> 
> Any thoughts/help would be appreciated.
> 
> 
> -------------------------------
> # 3.6.24 IDMAP settings
>     winbind use default domain = yes
>     template homedir = /home/%U
>     template shell = /usr/bin/bash
>     idmap config * : range =  10000-100000000
>     idmap config * : backend = tdb
>     idmap config CSUNET:	 default = yes
>     idmap config CSUNET:	 backend = rid
>     idmap config CSUNET:	 range =  10000-100000000
Hi
Overlapping ranges.
HTH,
Steve