TrueNAS AD not mapping user IDs at all

TrueNAS General
,
1

Hello,
I am trying to figure out where I am wrong. My AD connection is working fine and I can see the groups that have been created but my users are nowhere to be found. They all have a uidNumber assigned in the domain settings (Univention AD).

I set the range from 1000 to some arbitrary high number for the mapping but they won’t show up. My users are in the 2000+ range, my groups in the 5000+ range.

Any help would be appreciated. Are there any log files I can read to see why the mapping is happening or why it fails?

Thank you very much

2

You can turn up the SMB logging and then look at winbindd files in /var/log/samba4. If I were to hazard a guess it may be related to your domain users group (which is typically the primary group for AD users). Do you have other servers joined to this Univention domain using winbind? I’ve seen some cases where the domain users group is mapped to gid 513 for example.

3

If you have a support contract for your Univention server I’d probably start there.

4

Hello awalkerix,

all the groups are mapped correctly. The domain users group is 5001. But I will check the logs for more information.

Thanks.