Active Directory with RFC2307
When the RID is set to anything but "rid" in advanced configuration none of the AD users can authenticate. "winbind" is running and appears to work (wbinfo -t, -u & -g all return as expected).
The active directory server is Windows 2012R2. Thank you.
#2 Updated by John Hixson over 5 years ago
- Status changed from Unscreened to 15
- Target version set to Unspecified
- Seen in changed from Unspecified to 9.3-RELEASE
Why are you trying to set it to something other than RID? If you are doing so, you should have good reason and know why and what each idmap backend does. Does your AD have services for unix or equivalent installed? Tell me more about your AD and what you're trying to do. Just randomly changing the idmap backend isn't going to work for you.
#3 Updated by Jim Holmes over 5 years ago
Yes UNIX extensions are installed in AD. I need the UID & GID mapping that is part of RFC2307, which according to http://doc.freenas.org/9.3/freenas_directoryservice.html appares to be what I what. I have also tried every other reasonable mapping (ad,adex, nss) to no avail. if there are more detailed instruction please point me at them. Thanks.
#4 Updated by Jim Holmes over 5 years ago
Additional AD details:
Windows 2012 R2 with Identity Management for UNIX active
User's "UNIX Attributes" are set to match existing UNIX UID/GID mapping
Client computers are mostly Mac or Linux with several specialty Windows 7 & 8.1 laptops and some Solaris systems.
I am looking to provide consistent UID/GID mapping across all platforms with FreeNAS acting as the main storage system & AD as the main identity repository.
#13 Updated by John Hixson over 5 years ago
- Status changed from 15 to Closed: Behaves correctly
So after spending some time with Jim, we determined that his environment wasn't quite what is needed for the ad idmap backend to work. He had some users with unix attributes, but no corresponding groups. Once we setup at least one group to have unix attributes and made that the primary group for some users, things began working like they should. Jim was happy to understand how to configure things to work for him.