samba - Mar 2022 - Problem with AD & idmap

On 02/03/2022 14:49, Lars Schimmer via samba wrote:
> On 02/03/2022 14:44, Rowland Penny via samba wrote:
>> On Wed, 2022-03-02 at 14:24 +0100, Lars Schimmer via samba wrote:
> lso just did a test on members:
>>
>> members "Domain Users"
>> Admin1 Admin2 Admin3
>>
>> and no one else. Although we got >50 accounts in that group, not all
>>> with gid.
>>
>> Again, that will only show users that have a uidNumber attribute
>> containing a number inside the '1000-989999' range you set in
smb.conf
>> AND Domain Users must have a gidNumber inside the same range.
> 
> Yeah, the neeeded users do all have a uidNumber between 1000 and 9999,
> and all do have the same gidNumber 10100, which is "Domain User"
group.
> 
> So all these uidNumber and gidNumber are in that range.
> Thats why it is a somewhat issue we cannot fix with our knowledge...

Some more from the winbind-idmap log, a user in Domain Users, with
uidnumber  3013, it shows this:

  ids                      : *
                  ids: struct wbint_TransIDArray
                      num_ids                  : 0x00000001 (1)
                      ids: ARRAY(1)
                          ids: struct wbint_TransID
                              type_hint                : ID_TYPE_BOTH (3)
                              domain_index             : 0x00000000 (0)
                              rid                      : 0x00000614 (1556)
                              xid: struct unixid
                                  id                       : 0xffffffff
(4294967295)
                                  type                     :
ID_TYPE_NOT_SPECIFIED (0)

[2022/03/02 15:24:18.165081, 10, pid=1448, effective(0, 0), real(0, 0),
class=winbind]
../../source3/winbindd/idmap_ad.c:953(idmap_ad_sids_to_unixids)
  idmap_ad_sids_to_unixids: No xid in CN=Tobias,DC=cgv,DC=tugraz,DC=at


>> Rowland
>>
>>
>>
> 
> 
> MfG,
> Lars Schimmer

MfG,
Lars Schimmer
-- 
-------------------------------------------------------------
TU Graz, Institut f?r ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405       E-Mail: l.schimmer at cgv.tugraz.at
Fax: +43 316 873-5402       PGP-Key-ID: 0x4A9B1723

On Wed, 2022-03-02 at 15:35 +0100, Lars Schimmer via samba
wrote:
> 
> 
>   ids                      : *
>                   ids: struct wbint_TransIDArray
>                       num_ids                  : 0x00000001 (1)
>                       ids: ARRAY(1)
>                           ids: struct wbint_TransID
>                               type_hint                : ID_TYPE_BOTH
> (3)
>                               domain_index             : 0x00000000
> (0)
>                               rid                      : 0x00000614
> (1556)
>                               xid: struct unixid
>                                   id                       :
> 0xffffffff
> (4294967295)
>                                   type                     :
> ID_TYPE_NOT_SPECIFIED (0)
> 
> [2022/03/02 15:24:18.165081, 10, pid=1448, effective(0, 0), real(0,
> 0),
> class=winbind]
> ../../source3/winbindd/idmap_ad.c:953(idmap_ad_sids_to_unixids)
>   idmap_ad_sids_to_unixids: No xid in
> CN=Tobias,DC=cgv,DC=tugraz,DC=at
That is just a debug message from a for loop, it is telling you that no
'xid' was found. I then goes onto the next user.

Have you tried running 'net cache flush' ?

Rowland