[Samba] [samba] idmap question

mathias dufresne
Thu, 10 Aug 2017 09:44:26 -0000

Hi all,

What is the real purpose if the following lines when using idmap-rid or
idmap-ad:

# Default idmap config for local BUILTIN accounts and groups
idmap config * : backend = tdb
idmap config * : range = 3000-7999

When using the next two lines

# idmap config for the SAMDOM domain
idmap config SAMDOM : backend = rid [or ad]
idmap config SAMDOM : range = 10000-999999


AD users will be in range 10000-999999, /etc/passwd would be in range
0-2999, what kind of users would be added in range 3000-7999?