Hello! Sorry for the confusion this where SERVER is SERVERAD(right) At the time this all to work, but still followed the message! Errors in logs. And I'm afraid to change again. : - | Em 12-07-2016 17:40, Rowland penny escreveu:> OK, you posted your smb.conf from your fileserver, it contained these > lines: > > workgroup = SERVER > > and > > idmap config SERVERAD: backend = rid > # I changed values for test > idmap config SERVERAD: range = 1000000000 to 9999999999 > > I understand you changed the workgroup to post your smb.conf, but are > the actual names for 'SERVER' and 'SERVERAD' the same in your > smb.conf, because they should be. > > This doesn't explain why you are getting private groups, could you > check your AD to see if the groups exist.
Note: This working because I had to change all the permissions and the files were left with various "waste" of old permissions. Thanks Em 12-07-2016 17:44, Carlos A. P. Cunha escreveu:> > Hello! > Sorry for the confusion this where SERVER is SERVERAD(right) > At the time this all to work, but still followed the message! Errors > in logs. > And I'm afraid to change again. > > : - | > > > Em 12-07-2016 17:40, Rowland penny escreveu: >> OK, you posted your smb.conf from your fileserver, it contained these >> lines: >> >> workgroup = SERVER >> >> and >> >> idmap config SERVERAD: backend = rid >> # I changed values for test >> idmap config SERVERAD: range = 1000000000 to 9999999999 >> >> I understand you changed the workgroup to post your smb.conf, but are >> the actual names for 'SERVER' and 'SERVERAD' the same in your >> smb.conf, because they should be. >> >> This doesn't explain why you are getting private groups, could you >> check your AD to see if the groups exist. >
Note2:At about 5 days upgraded my DC for Samba 4.4.5, but my I went in version 4.3. Thanks Em 12-07-2016 17:46, Carlos A. P. Cunha escreveu:> > Note: This working because I had to change all the permissions and the > files were left with various "waste" of old permissions. > > > Thanks > > > Em 12-07-2016 17:44, Carlos A. P. Cunha escreveu: >> >> Hello! >> Sorry for the confusion this where SERVER is SERVERAD(right) >> At the time this all to work, but still followed the message! Errors >> in logs. >> And I'm afraid to change again. >> >> : - | >> >> >> Em 12-07-2016 17:40, Rowland penny escreveu: >>> OK, you posted your smb.conf from your fileserver, it contained >>> these lines: >>> >>> workgroup = SERVER >>> >>> and >>> >>> idmap config SERVERAD: backend = rid >>> # I changed values for test >>> idmap config SERVERAD: range = 1000000000 to 9999999999 >>> >>> I understand you changed the workgroup to post your smb.conf, but >>> are the actual names for 'SERVER' and 'SERVERAD' the same in your >>> smb.conf, because they should be. >>> >>> This doesn't explain why you are getting private groups, could you >>> check your AD to see if the groups exist. >> >
On 12/07/16 21:46, Carlos A. P. Cunha wrote:> > Note: This working because I had to change all the permissions and the > files were left with various "waste" of old permissions. > > > Thanks > > > Em 12-07-2016 17:44, Carlos A. P. Cunha escreveu: >> >> Hello! >> Sorry for the confusion this where SERVER is SERVERAD(right) >> At the time this all to work, but still followed the message! Errors >> in logs. >> And I'm afraid to change again. >> >> : - | >> >> >> Em 12-07-2016 17:40, Rowland penny escreveu: >>> OK, you posted your smb.conf from your fileserver, it contained >>> these lines: >>> >>> workgroup = SERVER >>> >>> and >>> >>> idmap config SERVERAD: backend = rid >>> # I changed values for test >>> idmap config SERVERAD: range = 1000000000 to 9999999999 >>> >>> I understand you changed the workgroup to post your smb.conf, but >>> are the actual names for 'SERVER' and 'SERVERAD' the same in your >>> smb.conf, because they should be. >>> >>> This doesn't explain why you are getting private groups, could you >>> check your AD to see if the groups exist. >> >I don't understand how your users/groups changed their IDs, on the DC RIDs are mapped and stored in idmap.ldb, you are also using the winbind 'rid' backend and again, the user/group IDs are mapped from the RID by the algorithm: ID = RID - BASE_RID + LOW_RANGE_ID The BASE_RID is '0' so this becomes: ID = RID + LOW_RANGE_ID So unless you changed the range in smb.conf, your user/group IDs shouldn't change. I still don't understand where your private groups are coming from, unless, are you running sssd or nlscd as well as winbindd ?? Rowland