In Samba 4.1 and 4.2, the idmap_rid.8 man page includes:
base_rid = INTEGER
A good value for the base_rid can be 1000, since user RIDs by default start at 1000 (512 hexadecimal).
idmap config TRUSTED : backend = rid
idmap config TRUSTED : range = 50000 - 99999
idmap config TRUSTED : base_rid = 1000
The base_rid option has been deprecated for some time. Specifying a value of 1000 (as recommended in the parameter description and example section) can result in failed mapping of group SIDs, where RIDs do not start at 1000.
This was fixed in the master branch via:
Author: David Disseldorp <firstname.lastname@example.org>
Date: Fri Jan 16 16:21:24 2015 +0100
docs/idmap_rid: remove deprecated base_rid from example
This bug will track the merge of this change to the 4.1 and 4.2 maintenance branches.
Created attachment 10876 [details]
fix for 4.2.next
Created attachment 10877 [details]
fix for 4.1.next
If I can assume your implicit review+, we can pass this on to Karolin directly.
(In reply to Michael Adam from comment #3)
Thanks Michael! Reassigning to Karolin for maintenance merge...
Pushed to autobuild-v4-[1|2]-test.
(In reply to Karolin Seeger from comment #5)
Pushed to both branches.
Closing out bug report.