Ray Van Dolson writes: > On Tue, Mar 29, 2011 at 06:07:46PM +0100, nux at li.nux.ro wrote: > You might try taking a look at idmap_ad(8) (and the other idmap_* man > pages as well). > > I'm not sure which idmap backend gets used by default (RID?). I did > think idmap_rid would result in consistent UID/GID mappings based on > the SID assuming you choose the same ranges on each server... > > Ray Ray, Thanks for the tip. I will have a look in this whole idmap thing. AFAIK the IDs are assigned by winbind from a rather generous range, but I think it's the same range on every machine.