[Bug 364105] [NEW] Regression in Winbind: Cannot map SID->UID when using read-only idmap-backend "ad", rfc2307 uids

[Edgar Holleis]

Public bug reported:

Binary package hint: winbind

works: 2:3.2.3-1ubuntu3.4
broken: 2:3.3.2-1ubuntu3

Probably upstream issue.

Winbind specific parts of smb.conf:
> workgroup = DOMAIN
> security = ADS
> realm = DOMAIN.FQDN
> password server = *
> winbind separator = \\
> winbind enum users = yes
> winbind enum groups = yes
> idmap backend = ad
> idmap config DOMAIN : schema_mode = rfc2307
> winbind nss info = template
> winbind use default domain = yes
> winbind offline logon = yes
> idmap uid = 1100-49999
> idmap gid = 1100-49999
> template shell = /bin/bash
> template homedir = /home/%u

Details:

The following mappings work:
  User-Name->SID, Group-Name->SID, SID->GID
What doesn't work:
  SID->UID

The Samba-Docs suggest adding a writable idmap-backend. That doesn't
help, since Samba ends up allocating mappings for all UIDs in the
writable backend instead of using the ones in AD.

** Affects: samba (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Regression in Winbind: Cannot map SID->UID when using read-only idmap-backend "ad", rfc2307 uids
https://bugs.launchpad.net/bugs/364105
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.