I am using samba file server.
One day, a user told me that he failed to open a shared folder.
Every time he open the shared folder authentication will be prompt.
He still failed to open the shared folder even though he key in the correct user name and password.

After diagnosis I found this error in my /var/log/samba/winbindd.log

more /var/log/samba/winbindd.log
show me this:
idmap Fatal Error: UID range full!! (max: 20000)

Then I googling and finally find the solution. Google always is my GURU. Thanks Google.

Below are the step to fix this problem.

Stop your samba and winbind services

service winbind stop
service smb stop

Delete secrets.tdb and smbpasswd

rm /etc/samba/secrets.tdb
rm /etc/samba/smbpasswd
rm /var/cache/samba/winbindd_idmap.tdb

Ensure “winbind trusted domains only = no” if not just modified it in smb.conf

testparm -v | grep winbind
or
vi /etc/samba/smb.conf

Rejoin the domain

net rpc join -S SERVERNAME -U ADMINISTRATOR%ADMINPASSWORD

Restart winbind service

service winbind start

Ensure can get the user list from domain

wbinfo -u

Fetch list of user accounts and group accounts

getent passwd
getent group

Test the login from another workstation.
Solved!
Job Done!

Related posts

• The RPC server is unavailable (1)
• Could not resolve mount point (0)