[Bug 364105] Re: Regression in Winbind: Cannot map SID->UID when using read-only idmap-backend "ad", rfc2307 uids

[Bug Watch Updater]

** Changed in: samba
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to samba in Ubuntu.
https://bugs.launchpad.net/bugs/364105

Title:
  Regression in Winbind: Cannot map SID->UID when using read-only idmap-
  backend "ad", rfc2307 uids

Status in Samba:
  Fix Released
Status in “samba” package in Ubuntu:
  Triaged

Bug description:
  Binary package hint: winbind

  works: 2:3.2.3-1ubuntu3.4
  broken: 2:3.3.2-1ubuntu3

  Probably upstream issue.

  Winbind specific parts of smb.conf:
  > workgroup = DOMAIN
  > security = ADS
  > realm = DOMAIN.FQDN
  > password server = *
  > winbind separator = \\
  > winbind enum users = yes
  > winbind enum groups = yes
  > idmap backend = ad
  > idmap config DOMAIN : schema_mode = rfc2307
  > winbind nss info = template
  > winbind use default domain = yes
  > winbind offline logon = yes
  > idmap uid = 1100-49999
  > idmap gid = 1100-49999
  > template shell = /bin/bash
  > template homedir = /home/%u

  Details:

  The following mappings work:
    User-Name->SID, Group-Name->SID, SID->GID
  What doesn't work:
    SID->UID

  The Samba-Docs suggest adding a writable idmap-backend. That doesn't
  help, since Samba ends up allocating mappings for all UIDs in the
  writable backend instead of using the ones in AD.

To manage notifications about this bug go to:
https://bugs.launchpad.net/samba/+bug/364105/+subscriptions