search for: a_number_larg

...ss you have an extremely large domain, it is more likely to be '4688' If you want your Unix ID to be exactly the same as your Windows RID, you could use the winbind 'rid' backend and use lines similar to these: idmap config DOMAIN : backend = rid idmap config DOMAIN : range = 0-a_number_larger than the largest_RID_in_AD With that getent would return something like this: pgoetz:*:4688:513:Goetz Patrick G However, I wouldn't recommended that range, you couldn't have any local users. Rowland

On Thursday, 13 June 2019 00:41:09 PDT Rowland penny via samba wrote: > On 13/06/2019 07:55, Alexey A Nikitin wrote: > > On Wednesday, 12 June 2019 13:07:56 PDT Rowland penny via samba wrote: > >>>> I think you mean 'RID' instead of 'SID' > >>> Yes, you're right. The Windows people seem to use the terms synonymously. > >> I cannot