[Samba] winbind rid changing user's UID and GID numbers - Samba 3.6

[Robert Martel]

Greetings,

For a number of samba iterations I've been using Samba with winbind to
keep AD users's UNIX UIDs and GIDs the same across several systems. I
don't run the Active Directory set-up and those that do are NOT going to
make any alterations to make my life easier. So i have always used
idmap_rid to keep consistent UID/GID numbers across all my UNIX machines.

This has worked very well, and the UIDs and GIDs were consistent across
the different hosts...until I upgraded one of the Solaris 10 boxes to
Samba 3.6.24 from 3.5.8. Now it seems that user's UIDs and GIDs are
getting altered on some random (to me) basis....but not all of them and
not all at the same time. Where I had seen a user that always received
101888 as their UID for years and "Domain Users" had a GID of 10513 for
years now they receive something different.

Three other Solaris hosts have been running Samba 3.6.x for some time
and never exhibited this sort of behavior. Something up with winbind or
some change in behavior that I over looked? Documentation for winbind
configuration for AD member servers using rid has always seems a bit
thin to me so I'd not be surprised to see that I am missing something.
With so many older examples of smb.conf out there it can ve difficult to
figure out which are current/correct.

Any thoughts/help would be appreciated.


-------------------------------
# 3.6.24 IDMAP settings
winbind use default domain = yes
template homedir = /home/%U
template shell = /usr/bin/bash
idmap config * : range = 10000-100000000
idmap config * : backend = tdb
idmap config CSUNET: default = yes
idmap config CSUNET: backend = rid
idmap config CSUNET: range = 10000-100000000

-------------------------------
--
***********************************************************************
Robert M. Martel I met someone who looks a lot like you
System Administrator She does the things you do
Levin College of Urban Affairs But she is an IBM
Cleveland State University -Jeff Lynne
(216) 687-2214
r.ma...@csuohio.edu
***********************************************************************
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[steve]

On Tue, 2014-07-29 at 16:28 -0400, Robert Martel wrote:

>
> Any thoughts/help would be appreciated.
>
>
> -------------------------------
> # 3.6.24 IDMAP settings
> winbind use default domain = yes
> template homedir = /home/%U
> template shell = /usr/bin/bash
> idmap config * : range = 10000-100000000
> idmap config * : backend = tdb
> idmap config CSUNET: default = yes
> idmap config CSUNET: backend = rid
> idmap config CSUNET: range = 10000-100000000

Hi
Overlapping ranges.
HTH,
Steve

[Dale Schroeder]

Robert,

You have the same range for * and CSUNET. Those ranges cannot overlap,
so fixing those would be the place to start.

Dale

On 07/29/2014 3:28 PM, Robert Martel wrote:
> Greetings,
>
> For a number of samba iterations I've been using Samba with winbind to
> keep AD users's UNIX UIDs and GIDs the same across several systems. I
> don't run the Active Directory set-up and those that do are NOT going
> to make any alterations to make my life easier. So i have always used
> idmap_rid to keep consistent UID/GID numbers across all my UNIX machines.
>
> This has worked very well, and the UIDs and GIDs were consistent
> across the different hosts...until I upgraded one of the Solaris 10
> boxes to Samba 3.6.24 from 3.5.8. Now it seems that user's UIDs and
> GIDs are getting altered on some random (to me) basis....but not all
> of them and not all at the same time. Where I had seen a user that
> always received 101888 as their UID for years and "Domain Users" had a
> GID of 10513 for years now they receive something different.
>
> Three other Solaris hosts have been running Samba 3.6.x for some time
> and never exhibited this sort of behavior. Something up with winbind
> or some change in behavior that I over looked? Documentation for
> winbind configuration for AD member servers using rid has always seems
> a bit thin to me so I'd not be surprised to see that I am missing
> something. With so many older examples of smb.conf out there it can ve
> difficult to figure out which are current/correct.
>

> Any thoughts/help would be appreciated.
>
>
> -------------------------------
> # 3.6.24 IDMAP settings
> winbind use default domain = yes
> template homedir = /home/%U
> template shell = /usr/bin/bash
> idmap config * : range = 10000-100000000
> idmap config * : backend = tdb
> idmap config CSUNET: default = yes
> idmap config CSUNET: backend = rid
> idmap config CSUNET: range = 10000-100000000
>

> -------------------------------