[Samba] idmap ad question

Andrew Bartlett
Sun, 12 Feb 2023 18:12:57 -0000

On Sun, 2023-02-12 at 16:40 +0000, Vaughan, Robert J via samba
wrote:
> Hi all
>
> In the idmap_config_ad wiki, it states ..
>
> If you use the winbind 'ad' backend, you must add a gidNumber
attribute to the Domain Users group in AD.
>
> Can someone explain this?

My guess is that failing to map the typical primary group of all users
is likely to cause major service disruption.

Andrew Bartlett

--
Andrew Bartlett (he/him) https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Developer, Catalyst IT https://catalyst.net.nz/services/samba