In my DC, without setting explicitly a 'winbind default domain', i can check logins domainless: root at vdcsv1:~# id gaio uid=10000(LNFFVG\gaio) gid=10513(LNFFVG\domain users) gruppi=10513(LNFFVG\domain users),11001(LNFFVG\sir),10999(LNFFVG\unixadm),3000008(LNFFVG\domain admins),3000005(LNFFVG\denied rodc password replication group),3000005(LNFFVG\denied rodc password replication group),3000009(BUILTIN\users),3000000(BUILTIN\administrators) in my DM, no, i've to explicitly set the domain: root at vdmsv1:~# id gaio id: gaio: no such user root at vdmsv1:~# id LNFFVG\\gaio uid=10000(gaio) gid=10513(domain users) gruppi=10513(domain users),11001(sir),10999(unixadm),5001(BUILTIN\users),5000(BUILTIN\administrators) but if i set 'winbind use default domain = yes': root at vdmsv1:~# id gaio uid=10000(gaio) gid=10513(domain users) gruppi=10513(domain users),11001(sir),10999(unixadm),5001(BUILTIN\users),5000(BUILTIN\administrators) Why?! -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' lanostrafamiglia.it Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
On Fri, 10 Nov 2017 17:32:37 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote:> > In my DC, without setting explicitly a 'winbind default domain', i can > check logins domainless: > > root at vdcsv1:~# id gaio > uid=10000(LNFFVG\gaio) gid=10513(LNFFVG\domain users) > gruppi=10513(LNFFVG\domain > users),11001(LNFFVG\sir),10999(LNFFVG\unixadm),3000008(LNFFVG\domain > admins),3000005(LNFFVG\denied rodc password replication > group),3000005(LNFFVG\denied rodc password replication > group),3000009(BUILTIN\users),3000000(BUILTIN\administrators) > > in my DM, no, i've to explicitly set the domain: > > root at vdmsv1:~# id gaio > id: gaio: no such user > root at vdmsv1:~# id LNFFVG\\gaio > uid=10000(gaio) gid=10513(domain users) gruppi=10513(domain > users),11001(sir),10999(unixadm),5001(BUILTIN\users),5000(BUILTIN\administrators) > > > but if i set 'winbind use default domain = yes': > > root at vdmsv1:~# id gaio > uid=10000(gaio) gid=10513(domain users) gruppi=10513(domain > users),11001(sir),10999(unixadm),5001(BUILTIN\users),5000(BUILTIN\administrators) > > > Why?! >Because the code on a DC is different from the code on a Unix domain member ;-) Rowland