samba - Apr 2016 - Winbind idmap question

Hi all,

Back on playing winbind I first configure PAM and NSS then tried id
<my_user_name> without setting for that user uidNumber.

This user get UID from idmap.

I set up uidNumber into LDAP tree for that user but this user still get uid
from idmap rather than from uidNumber attribute.

I set up another user with uidNumber into LDAP tree and after doing that I
tried "id <my_second_user>". Here id returns the content of
uidNumber LDAP
attribute as user UID.

Question: how to make the first user to get rid of idmaped UID?

You can try "net cache flush" (if you want to inspect the cache, use
"net
cache list")

On 21 April 2016 at 10:40, mathias dufresne <infractory at gmail.com>
wrote:
> Hi all,
>
> Back on playing winbind I first configure PAM and NSS then tried id
> <my_user_name> without setting for that user uidNumber.
>
> This user get UID from idmap.
>
> I set up uidNumber into LDAP tree for that user but this user still get uid
> from idmap rather than from uidNumber attribute.
>
> I set up another user with uidNumber into LDAP tree and after doing that I
> tried "id <my_second_user>". Here id returns the content of
uidNumber LDAP
> attribute as user UID.
>
> Question: how to make the first user to get rid of idmaped UID?
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 
"If we knew what it was we were doing, it would not be called research,
would it?"
      - Albert Einstein

Hi Jonathan,

Thank you for that, that solved the issue.

Unfortunately I get another issue: on one DC id <user> gives "no such
user".
Adding domain (id ad.domain\\<user>) does not help.
Adding the whole domain (id ad.domain.tld\\<user>) does not help more.

I did checked PAM, NSS and Samba configurations, this server is using same
configurations as the two working DC. I'm puzzled.

2016-04-21 11:52 GMT+02:00 Jonathan Hunter <jmhunter1 at gmail.com>:
> You can try "net cache flush" (if you want to inspect the cache,
use "net
> cache list")
>
> On 21 April 2016 at 10:40, mathias dufresne <infractory at gmail.com>
wrote:
>
> > Hi all,
> >
> > Back on playing winbind I first configure PAM and NSS then tried id
> > <my_user_name> without setting for that user uidNumber.
> >
> > This user get UID from idmap.
> >
> > I set up uidNumber into LDAP tree for that user but this user still
get
> uid
> > from idmap rather than from uidNumber attribute.
> >
> > I set up another user with uidNumber into LDAP tree and after doing
that
> I
> > tried "id <my_second_user>". Here id returns the
content of uidNumber
> LDAP
> > attribute as user UID.
> >
> > Question: how to make the first user to get rid of idmaped UID?
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> >
>
>
>
> --
> "If we knew what it was we were doing, it would not be called
research,
> would it?"
>       - Albert Einstein
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>