Samba SMB.CONF + UID/SID range?
Hello All,
I have a very specific question and have been struggling to understand the concept.
Before I begin, id like to add that I've read many Samba FAQ's/HowTos/Guides. I'm still not 100% clear as to why we set them up this way.
Here is the scenario:
Samba acting as PDC in a Windows environment.
We usually Map the "Domain Users" group to the Unix Group "domainusers" using the command:
"Net groupmap add ntgroup=”Domain Admins” unixgroup=domainusers rid=513
Our SMB.conf typically has the following:
idmap uid = 10000-20000
idmap gid = 10000-20000
or
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
My questions are as followed:
1)What is the significance of the UID:GID range specified in the smb.conf?
2)Is it necessary for every PDC setup to have this range? if so which is correct?
3) I understand its to map the Domain Users group to our custom unix group - but what will happen if we leave the uid range off the smb.conf?
4) Does a groupmap have to be created for every unix group?
5) What if the workstations are MAC's instead of PC's? Does this entry need to be present in the SMB.conf?
6) What uid/gid range should be used for a PDC?
7) What uid/gid range should be used for a Member server to a NT Domain?
Thank you!
|