In Samba 4.1 and 4.2, the idmap_rid.8 man page includes: base_rid = INTEGER A good value for the base_rid can be 1000, since user RIDs by default start at 1000 (512 hexadecimal). ... EXAMPLES ... [global] ... idmap config TRUSTED : backend = rid idmap config TRUSTED : range = 50000 - 99999 idmap config TRUSTED : base_rid = 1000 The base_rid option has been deprecated for some time. Specifying a value of 1000 (as recommended in the parameter description and example section) can result in failed mapping of group SIDs, where RIDs do not start at 1000. This was fixed in the master branch via: commit 8466587c589f01d59294be36ad0b347f5d82a11f Author: David Disseldorp <ddiss@samba.org> Date: Fri Jan 16 16:21:24 2015 +0100 docs/idmap_rid: remove deprecated base_rid from example This bug will track the merge of this change to the 4.1 and 4.2 maintenance branches.
Created attachment 10876 [details] fix for 4.2.next
Created attachment 10877 [details] fix for 4.1.next
Thanks David! If I can assume your implicit review+, we can pass this on to Karolin directly.
(In reply to Michael Adam from comment #3) Thanks Michael! Reassigning to Karolin for maintenance merge...
Pushed to autobuild-v4-[1|2]-test.
(In reply to Karolin Seeger from comment #5) Pushed to both branches. Closing out bug report. Thanks!