samba - Feb 2015 - Samba 4, winbind and Active Directory integration Microsoft Windows Services for UNIX

Hi,
I've successfully configure idmap_rid to read id mappings from our AD
servers:

        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        winbind nested groups = Yes
        winbind separator = +
        winbind offline logon = false
        idmap config *:backend = rid
        idmap config *:range = 50000-99999
        idmap config *:schema_mode = rfc2307

But when I configure idmap_ad  I'm not able to get the uidNumber and
gidNumber from the AD servers:

        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        winbind nested groups = Yes
        winbind separator = +
        winbind offline logon = false
        idmap config ARRI:backend = ad
        idmap config ARRI:range = 1000-999999
        idmap config ARRI:schema_mode = rfc2307

[root at supermdc ~]# id schafha
uid=4294967295 gid=4294967295 groups=4294967295

This user "schafha" actually has a uidNumber 10000 and gidNumber
10000. Changing "idmap config ARRI" to "idmap config *" does
not help:

[root at supermdc ~]# id schafha
id: markert1: No such user

Setup:
AD: Windows Server 2008 RC2 with Windows Services for UNIX
AD member: CentOS 6.6, sernet-samba-4.1.14-9

Please note: not all users and groups listed in AD have got a uidNumber and
gidNumber? Is this a problem?

Kind regards,
Martin


Martin Markert
Systems Integrator
 

Tuerkenstr. 89, 80799 M?nchen / Germany
Phone +49 89 3809-1848

EMail MMarkert at arri.de

  Visit us on Facebook!________________________________
 [http://www.arricommercial.de/wp-content/uploads/2015/02/2015-02-25-ARRI-Media_E-mail-Signatur_Oscar.jpg]
<http://www.arri.de/filmtv>

Get all the latest information from
www.arri.de/filmtv<http://www.arri.de/filmtv>,
Facebook<https://www.facebook.com/pages/ARRI-Film-TV/117731121606986?fref=ts>

ARRI Film & TV Services GmbH
Sitz: M?nchen - Registergericht: Amtsgericht M?nchen
Handelsregisternummer: HRB 69396
Gesch?ftsf?hrer: Franz Kraus; Dr. J?rg Pohlman; Josef Reidinger