# Windows Domain Integration fails

**URL:** <https://forums.suse.com/t/windows-domain-integration-fails/23077>\
**Category:** SLES Configure-Administer\
**Created:** [September 11, 2012, 3:29pm UTC](https://forums.suse.com/t/windows-domain-integration-fails/23077 "2012-09-11T15:29:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ralf\_neumann](https://avatars.discourse-cdn.com/v4/letter/r/858c86/32.png) [@ralf\_neumann](https://forums.suse.com/u/ralf_neumann)\
**Post date:** [September 11, 2012, 3:29pm UTC](https://forums.suse.com/t/windows-domain-integration-fails/23077/1 "2012-09-11T15:29:22Z")

</div>

Hi there,

i´m migrating several servers from sles 9.4 to sles 11.2 and i have trouble with my domain membership. From my point of view everything is configured properly and i do get all my domain user via wbinfo -u. My kerberos is working also, because i can get a proper ticket for my user via kinit. Unfortunately getent passwd/group are not working and wbinfo -i gives me the followng error. Seems to be something wrong with id enum.

failed to call wbcGetpwnam: WBC\_ERR\_DOMAIN\_NOT\_FOUND

any help on this?

Thanks

my smb.con looks like this

[global]  
workgroup = XXX  
server string = XXX Data Hub 1 on %h  
passdb backend = tdbsam  
printing = cups  
printcap name = cups  
printcap cache time = 750  
cups options = raw  
map to guest = Bad User  
#include = /etc/samba/dhcp.conf  
logon path = \\%L\profiles\.msprofile  
logon home = \\%L\%U\.9xprofile  
logon drive = P:  
usershare allow guests = No  
#idmap gid = 10000-20000  
#idmap uid = 10000-20000  
realm = [XXX.ORG](http://XXX.ORG)  
security = ADS  
template homedir = /home/%D/%U  
template shell = /bin/false  
winbind refresh tickets = yes  
winbind enum groups = Yes  
winbind enum users = Yes  
winbind nested groups = Yes  
winbind separator = #  
winbind use default domain = Yes  
winbind offline logon = no  
log level = 2

---

<div class="post-metadata">

**Author:** ![ralf\_neumann](https://avatars.discourse-cdn.com/v4/letter/r/858c86/32.png) [@ralf\_neumann](https://forums.suse.com/u/ralf_neumann)\
**Post date:** [September 14, 2012, 11:52am UTC](https://forums.suse.com/t/windows-domain-integration-fails/23077/2 "2012-09-14T11:52:27Z")

</div>

i have found a workaround for this issue by adding the following to the smb.conf

```
    idmap config * : range = 10000-20000
    idmap config * : backend = tdb
    idmap config XXX : default = yes
    idmap config XXX : range = 100000-200000
    idmap config XXX : backend = rid

```

but normally this should work without also. Other people think this must be a bug in Samba version 3.6.3-0.18.3-2749-SUSE-CODE11-x86\_64

what do you think?