Le 19/09/2025 ? 13:15, Rowland Penny via samba a ?crit?:> On Fri, 19 Sep 2025 12:08:29 +0200
> Cedric Puchalver via samba <samba at lists.samba.org> wrote:
>
>> Hello,
>>
>> I have a Debian Wheezy (yeah I know it's no longer supported.)
where
>> Samba is configured as a file server with rid backend.
>>
>> My smb.conf file looks like this :
>> [global]
>> workgroup = SAMBA
>> realm = SAMBA.LAN
>> netbios name = MEMBER
>> security = ads
>> encrypt passwords = yes
>> interfaces = 127.0.0.1 192.168.10.2/24
>> bind interfaces only = yes
>> idmap config *:backend = tdb
>> idmap config *:range = 70000-80000
>> idmap config SAMBA:backend = rid
>> idmap config SAMBA:range = 3000000-4000000
>> winbind use default domain = yes
>> winbind enum users = yes
>> winbind enum groups = yes
>> vfs objects = acl_xattr
>> map acl inherit = yes
>> store dos attributes = yes
>>
>> [home]
>> path = /data/samba/users
>> read only = no
>> browseable = no
>>
>> [Apps]
>> path = /data/samba/apps
>> read only = no
>>
>> [Common]
>> path = /data/samba/common
>> read only = no
>>
>> I want to upgrade that server to Debian Bookworm. I'm going to
>> reinstall the OS from scratch and install Samba from sources.
>>
>> Will permissions and ownership in my shared folders be messed up
>> because I'm using rid backend ?
>>
>> Thank you
>>
> Why Bookworm ? why not Trixie ?
> What do you mean by 'Samba from sources' ?
> If you mean compiling Samba yourself, then why ?
>
> If you use the same 'idmap config' block on a Samba Unix domain
member,
> you will always get the same Unix IDs, so your permissions etc will
> stay the same.
>
> While you are making the changes, I suggest you remove theses lines:
>
> netbios name = MEMBER
>
> winbind enum users = yes
> winbind enum groups = yes
>
> store dos attributes = yes
>
> Reasons:
>
> Samba will fill the first one in for you.
> You do not need the 'enum' lines and they can slow things down.
> The last line is now the default.
>
> Rowland
>
>
>
>
>
Honestly, I didn't think about Trixie at all. I'll give a try.
Yeah I meant compiling Samba myself because I've always been doing so on
DC and other domain members.
Thank you Rowland.