[Samba] ID Mapping

王金磊
Tue, 24 Nov 2020 01:17:45 -0000

Hi,

    I'm using samba for login in Linux via Active Directory (win 2008).

    In my Active Directory, there is a user "jin", and its primary
group is "xts", its supplementary group is "Domain Users". I
found that the gid mapping is inconsistent with different samba version. That
is:

For samba-4.4.4:

# id jin
uid=30000(jin) gid=30000(xts) groups=30000(xts),30001(domain users)

the gid is consistent with the AD

But samba-4.6.2:

# id jin
uid=40000(jin) gid=40000(domain users) groups=40000(domain users),40001(xts)

the gid is inconsistent with AD.

My conf in samba-4.4.4:

[global]
    workgroup = TEST
    security = ads

    passdb backend = tdbsam

    realm = test.com

    idmap config *:backend = tdb
    idmap config *:range = 30000-40000

    template shell = /bin/bash
    template homedir = /home/%U

    printing = cups
    printcap name = cups
    load printers = yes
    cups options = raw
    winbind use default domain = true
    ...

And my conf in samba-4.6.2:

[global]
    workgroup = TEST
    security = ads

    passdb backend = tdbsam

    realm = test.com

    idmap config *:backend = tdb
    idmap config *:range = 40000-50000

    template shell = /bin/bash
    template homedir = /home/%U

    printing = cups
    printcap name = cups
    load printers = yes
    cups options = raw
    winbind use default domain = true
    ...

Thanks~