search for: ucommon

...ater. Given that my AD domain users are group 100, and the AD users UID range is 3000000-3000099, what should my idmap config settings look like in the wiki-adapted 'member server' smb.conf shown below? Just tell me the right answer, I'll figure out why later. [global] netbios name = uCommon workgroup = HPRS security = ADS realm = HPRS.LOCAL dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab idmap config *:backend = tdb idmap config *:range = ???-??? idmap config HPRS:backend = ad idmap config HPRS:schema_mode = rfc2307 idmap config HPRS:...

...D > > users UID range is 3000000-3000099, what should my idmap config settings look > > like in the wiki-adapted 'member server' smb.conf shown below? Just tell me the > > right answer, I'll figure out why later. > > > > [global] > > netbios name = uCommon > > workgroup = HPRS > > security = ADS > > realm = HPRS.LOCAL > > dedicated keytab file = /etc/krb5.keytab > > kerberos method = secrets and keytab > > > > idmap config *:backend = tdb > > idmap config *:range = ???-??? > >...

...users are group 100, and the AD > users UID range is 3000000-3000099, what should my idmap config settings look > like in the wiki-adapted 'member server' smb.conf shown below? Just tell me the > right answer, I'll figure out why later. > > [global] > netbios name = uCommon > workgroup = HPRS > security = ADS > realm = HPRS.LOCAL > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > > idmap config *:backend = tdb > idmap config *:range = ???-??? > idmap config HPRS:backend = ad > id...

Thanks again for your quick reply ... You wrote: > > $ wbinfo -i mark > > HPRS\mark:*:3000026:100:Mark Foley:/home/HPRS/mark:/bin/false > > Ah but those numbers *do not* come from AD, they come from 'idmap.ldb' Hmmm, so my Samba4 assigned them when I ADUC-added the user? Maybe this is not an answerable question, but why is it picking those GID/UIDs? Why is it not

On Thu, 8 Oct 2015 15:46 Sketch wrote: > It's easy in Linux with Samba as well. You basically just need to follow > the directions here: > > https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server Thanks for the feedback. OK, I'll check out your link ASAP. The "Server" bit in the link gives me pause. I *have* a Samba4 AD/DC "server" already.