From: Greg on
I updated my smb.conf to include the following parameters:
[global]
idmap backend = tdb
idmap alloc backend = tdb
idmap uid = 10000-11000
idmap gid = 10000-11000
winbind enum users = yes
winbind enum groups = yes

This seems to have fixed some of the errors, but I still get the following
errors in log.winbindd-idmap (repeated many times):
[2009/12/08 16:41:48, 0] winbindd/idmap_tdb.c:341(idmap_tdb_alloc_init)
idmap will be unable to map foreign SIDs: NT_STATUS_UNSUCCESSFUL
[2009/12/08 16:41:48, 0] winbindd/idmap.c:589(idmap_alloc_init)
ERROR: Initialization failed for alloc backend, deferred!
[2009/12/08 16:41:48, 0] winbindd/idmap.c:201(smb_register_idmap_alloc)
idmap_alloc module tdb already registered!
[2009/12/08 16:41:48, 0] winbindd/idmap.c:149(smb_register_idmap)
Idmap module passdb already registered!
[2009/12/08 16:41:48, 0] winbindd/idmap.c:149(smb_register_idmap)
Idmap module nss already registered!
[2009/12/08 16:41:48, 1] winbindd/idmap_tdb.c:214(idmap_tdb_load_ranges)
idmap uid missing

I tried with and without the backend parameters getting the same result. I'm
not sure if those or the 'enum' parameters are necessary. FWIW, there exitst
a file /var/lib/samba/winbindd_idmap.tdb but the timestamp on it is over two
years ago.

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Ryan Suarez on
Greg wrote:
> [2009/12/08 16:41:48, 0] winbindd/idmap_tdb.c:341(idmap_tdb_alloc_init)
> idmap will be unable to map foreign SIDs: NT_STATUS_UNSUCCESSFUL
>
Test a users SID to UID mapping:

# /apps/samba/bin/wbinfo -n SOMEUSER
S-1-5-21-3147950943-2271782263-395470419-4610 User (1)
# /apps/samba/bin/wbinfo -S S-1-5-21-3147950943-2271782263-395470419-4610
46318

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Greg on
>Test a users SID to UID mapping:
>
># /apps/samba/bin/wbinfo -n SOMEUSER
>S-1-5-21-3147950943-2271782263-395470419-4610 User (1)
># /apps/samba/bin/wbinfo -S S-1-5-21-3147950943-2271782263-395470419-4610
>46318

That works fine. I'm using a local user name, it resolved the NT style SID
which could then resolve the local UID.

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
From: Greg on
I was finally able to resolve these error messages. I was missing the
winbind settings in /etc/nsswitch.conf:
passwd: compat winbind
group: compat winbind
This is in addition to the settings that I had made to /etc/samba/smb.conf:
idmap backend = tdb
idmap alloc backend = tdb
idmap uid = 10000-11000
idmap gid = 10000-11000
winbind enum users = yes
winbind enum groups = yes

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba