Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1763187
Description of problem: If you set up Samba on an client in an IdM-only domain, ipa-client-samba creates the ID mapping config in smb.conf only for this domain. However, if you later establish a trust to AD, you have to manually add the ID mapping config for this domain to smb.conf. This ticket requests adding a feature to ip-client-samba to add ID mappings for new domains. Version-Release number of selected component (if applicable): ipa-client-samba-4.8.0-11.module+el8.1.0+4247+9f3fd721.x86_64 Steps to Reproduce: 1. Set up Samba using ipa-client-samba in an IdM only domain. 2. Create a trust with AD. Actual results: The user has to manually figure out the ID range and add the ID mapping configuration to smb.conf. Expected results: ipa-client-samba should be enhanced (for example, by adding an new option) to add the ID mapping config for the new domain.