On 03/07/12 10:18, Jonathan Buzzard wrote:
On Mon, 2012-07-02 at 18:20 +0200, steve wrote: [SNIP]I think I must be missing something here because as far as I can see, winbindd puts all users into the directory specified in template homedir. [homes] then picks out the user from there.Yes you are stop using template homedir and configure winbind correctly.
OK. template homedir is now removed. Although we are using winbind we are not running winbindd. All our mapping is done using nss-pam-ldapd.
# deal with NSS and the whole UID/SID id mapping stuff idmap backend = tdb idmap uid = 2000000 - 2999999 idmap gid = 2000000 - 2999999 idmap config MYDOMAIN : backend = nss idmap config MYDOMAIN : readonly = yes idmap config MYDOMAIN : range = 500 - 1999999 idmap cache time = 604800 idmap negative cache time = 20 winbind cache time = 600 winbind nss info = rfc2307 winbind expand groups = 2 winbind nested groups = yes winbind use default domain = yes winbind enum users = yes winbind enum groups = yes winbind refresh tickets = yes winbind offline logon = false
No, we have none of that. Our global is simply: [global] server role = domain controller workgroup = MARINA realm = hh3.site netbios name = HH1 passdb backend = samba4 wide links = Yes unix extensions = No
You need to edit /etc/nsswitch of course. This is the "samba" way of doing things.
We have passwd: compat ldap group: compat ldap hosts: files mdns4_minimal [NOTFOUND=return] dns
That's interesting/worrying. Although we have 2500 users, we only have around 150 computers in the domain, spread over 4 teaching labs. Those are split about 50:50 Linux:windows so I'd put the maximum number of NFS autofs mounts to be 80 at most. What do you recon?As to suggestions to use autofs on 2500 users, my advice is don't. Works well at ~50 users but gets flacky at couple hundred users with random things not working 100% of the time that will take you for ever to track down to autofs if you do.
Cheers and thanks for your comments, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Linux] [Info Cyrus] [LARTC] [Bugtraq] [Netfilter] [Internet Dating Forums] [RAID] [Yosemite News] [Photography]