samba - May 2022 - Multiple winbind idmap stanzas?

Hello everyone

Is it possible to have multiple winbind idmap stanzas (if that is the right
word) in the smb.conf such that one domain can be split amongst different
backends (unique ranges of course)?

For example, if I wanted to use ad or rfc2307 for most of my users but also
wanted to use a local passwd file for a shared account where we want different
passwords on different servers?

How do you tell winbind to use a local passwd file - is that backend nss?

Thanks,

Rob

----------------------------------------------------------------------
This is an e-mail from General Dynamics Land Systems. It is for the intended
recipient only and may contain confidential and privileged information.  No one
else may read, print, store, copy, forward or act in reliance on it or its
attachments.  If you are not the intended recipient, please return this message
to the sender and delete the message and any attachments from your computer.
Your cooperation is appreciated.

On Fri, 2022-05-06 at 13:33 +0000, Vaughan, Robert J via samba
wrote:
> Hello everyone
> 
> Is it possible to have multiple winbind idmap stanzas (if that is the
> right word) in the smb.conf such that one domain can be split amongst
> different backends (unique ranges of course)?
No
> 
> For example, if I wanted to use ad or rfc2307 for most of my users
> but also wanted to use a local passwd file for a shared account where
> we want different passwords on different servers?
You have described it fairly well, do not create the user in AD, just
create the user on each server with a different password.
 
> 
> How do you tell winbind to use a local passwd file - is that backend
> nss?
You don't really, it would entail setting up a trust between the local
domain and AD and I don't think this is possible.

Rowland