Looks like a setting in smb.conf but its not posted. Also, its not recommended to use AD on this. And my personal experiances with backend AD on member. Works fine. I dont recommend to use NFS with backends RID. greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ralph Boehme via > samba > Verzonden: vrijdag 5 februari 2021 12:49 > Aan: Rowland penny; samba at lists.samba.org > Onderwerp: Re: [Samba] Warning messages when provisioning an ADDC > > Am 2/5/21 um 12:39 PM schrieb Rowland penny via samba: > > On 05/02/2021 11:06, Ralph Boehme via samba wrote: > >> the module does a getgrgid() call on those ids and apparently nsswitch > >> doesn't know about those ids. Do you have winbind in nsswitch.conf? > >> Fwiw, I have no idea if that is sensible on an AD DC... :) > > > > > > Whilst it isn't recommended to use a DC for other than authentication, > > you can set winbind in the passwd & group lines in /etc/nsswitch. > > However these numbers are appearing during a provision and surely at > > this point all the ID numbers are in the '3000000' range, so where are > > the '30000' numbers coming from ? > > hm... good point! :) I have no clue... > > -slow > > -- > Ralph Boehme, Samba Team https://samba.org/ > Samba Developer, SerNet GmbH https://sernet.de/en/samba/ > GPG-Fingerprint FAE2C6088A24252051C559E4AA1E9B7126399E46 > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
On 05/02/2021 12:49, L.P.H. van Belle via samba wrote:> Looks like a setting in smb.conf but its not posted. > > Also, its not recommended to use AD on this. > And my personal experiances with backend AD on member. Works fine. > > I dont recommend to use NFS with backends RID.Hi Louis, You might want to re-read the thread. The OP is trying to provision an AD DC in an unprivileged container using ZFS and he is getting unknown gids in the 30000 range during provision. Where these gids are coming from is anyone's guess, seeing as how a Samba DC uses ids in the 3000000 range by default. Rowland
Ah, so i did read some thing back. These gids shown are most probely the BUILTIN\Groups. The provisioning and the nfs options given in the provisioning, thats the pain point. In this case, i would try to prosion it without these parameters and add them later on. Only this is more out of my scope i work in. still, if its in a container, a few simple tests and you know. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland penny via > samba > Verzonden: vrijdag 5 februari 2021 14:08 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Warning messages when provisioning an ADDC > > On 05/02/2021 12:49, L.P.H. van Belle via samba wrote: > > Looks like a setting in smb.conf but its not posted. > > > > Also, its not recommended to use AD on this. > > And my personal experiances with backend AD on member. Works fine. > > > > I dont recommend to use NFS with backends RID. > > > Hi Louis, You might want to re-read the thread. The OP is trying to > provision an AD DC in an unprivileged container using ZFS and he is > getting unknown gids in the 30000 range during provision. Where these > gids are coming from is anyone's guess, seeing as how a Samba DC uses > ids in the 3000000 range by default. > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba