Vorraussetzung: weiterer Rechner ist samba-ldap-pdc

/etc/samba/smb.conf :

[global]
  workgroup = kurs
  security = domain
  idmap uid = 20000 - 30000
  idmap gid = 20000 - 30000
  template shell = /bin/bash
  winbind use default domain = Yes

  idmap backend = ldap:ldap://villa.local
  ldap admin = cn=nssadmin,dc=villa,dc=local
  ldap suffix = dc=villa,dc=local
  ldap idmap suffix = ou=idmap

[freigabe]
  path = /tmp
  writable = yes

net rpc join -U root

wbinfo -t
wbinfo -a kurs\\iw%villa

/etc/nsswitch.conf :

passwd:         compat winbind
group:          compat winbind
shadow:         compat winbind

getent passwd iw