Comment 24 for bug 207791

This thread hasn't seen any activity in several months, but I discovered it today after suffering from the same problem for the past few weeks on Lucid. After some trial and error I was able to resolve it. Winbind was unable to translate uids/gids into SIDs, but it could convert usernames into SIDs. The fix was to modify the idmap config from this syntax:

idmap backend = rid:FRIENDS=10000-20000

To this syntax:

idmap backend = tdb
idmap config FRIENDS : backend = rid
idmap config FRIENDS : range = 10000-20000

And voila, winbind works correctly.

Cheers,

Adam Mielke
Research Computing and Engineering
College of Liberal Arts
University of Minnesota