Web lists-archives.com

[Samba] Samba group duplicated




HI,
I have samba DC Version 4.5.15 , i have problem with Domain Users group

on samba server:
 # getent group 100
DC1\domain users:x:100:
 # getent group 40000
DC1\domain users:x:100:
 # getent group "dc1.i.com\\Domain Users"
DC1\domain users:x:100:

On Windows in Active Directory Users and Computers on Administrator domain account:
gidNumber = 40000 for Domain Users.


smb.conf
[global]
        server role check:inhibit=yes
        dsdb:schema update allowed = yes
        netbios name = DC1
        realm = I.COM
        workgroup = DC1
        server role = active directory domain controller
        idmap_ldb:use rfc2307 = yes
        ldap server require strong auth = no
        unix extensions = no
        security = user
        dns forwarder = 192.168.10.2
        allow dns updates = nonsecure
        log level = 1
        max log size = 450000
        log file = /var/log/samba/log.%m
        include = /etc/samba/smb.conf.debug-%I
        idmap config * : range = 40000-50000
        idmap config * : backend = tdb
        winbind enum users = yes
        winbind enum groups = yes
[netlogon]
        path = /var/lib/samba/sysvol/i.mp.pl/scripts
        read only = No
[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

Can i change gid to 100  in windows? Where does this discrepancy come from?


Thanks,

Rafal Sanocki


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba