search for: 200xx

Hello I had a problem with different group IDs on my two DCs. They have both Version 4.7.6-Ubuntu and use the RFC2307 scheme. The first DC showed the group-IDs 200xx that I gave in the AD. The second DC gave the ID 100 to Domain Users and other 200xx IDs to the groups. To could solve the problem: ?1. I gave Unix UIDs to all users and GIDs to groups in the Active Directory with RSAT ?2. I copied the idmap.ldp database from the first to the second DC The p...

...e UID/GID starting at 20000 so are well out of the way of local users. If I now create a local user with useradd, the UID/GID of the local user is the next available number in the range used by the Windows users. This is, users created before setting up LDAP are UID 501, 502 etc, but new users are 200XX. This then potentially causes problems when a new LDAP user is added, as we then have two users with the same UID/GID values. I've resolved this by editing the UID_MAX and GID_MAX fields in /etc/login.defs so the value is below the range used by the windows users. New test user gets UID/GID 50...