better trash; no favicon

dev/ad-dc.Dockerfile

@@ -15,6 +15,13 @@ RUN apt-get update \
         tini \
     && rm -rf /var/lib/apt/lists/*
 
+# Rootless Podman maps 65,536 IDs. Keep this disposable DC's internal idmap
+# inside that namespace; production AD domains must use their normal range.
+RUN sed -i \
+        -e 's/lowerBound: 3000000/lowerBound: 10000/' \
+        -e 's/upperBound: 4000000/upperBound: 60000/' \
+        /usr/share/samba/setup/idmap_init.ldif
+
 COPY dev/ad-entrypoint.sh /usr/local/bin/preview-ad-entrypoint
 COPY dev/preview-client.sh /usr/local/bin/preview-client
 COPY dev/seed-files.sh /usr/local/bin/preview-seed-files