search for: riomargroup

...r when trying to log in via ssh. I am only assuming pam_winbind is working properly, and the account/session portions are behaving correctly, it's the auth that seems to be the problem. Any ideas? Thanks again for the great work to the Samba team! -Ron -- Riomar Group <http://www.riomargroup.com>*Ron Garc?a-Vidal | President | Riomar Group (A NYC & NYS Certified MBE)* 1315 Prospect Ave., First Floor | Brooklyn, NY 11218 2655 Le Jeune Road, Suite 915 | Coral Gables, FL 33134 (347) 746-6276 | www.riomargroup.com <http://www.riomargroup.com> ron at riomargroup.com <mailto...

Hi Team, We have a weird issue that we are trying to understand. We have winbind set up and working successfully for user authentication with passwords via ssh. We have pam.d/system-auth-ac and password-auth-ac (symlinked) set to require membership of a group which works great via password authentication. However, if the user has a ssh key set up, they seem to bypass the group membership

...OR: Failed to fix incorrect GUID on attribute member : (53, 'Attribute member already deleted for target GUID a8e1e07a-cab8-4222-a024-97d59084268b') I'm not even sure where to start fixing this and am not finding anything similar via google. -Ron -- Riomar Group <http://www.riomargroup.com>*Ron García-Vidal | President | Riomar Group (A NYC, NYS & PANYNJ Certified MBE & DBE)* 1315 Prospect Ave., First Floor | Brooklyn, NY 11218 7400 SW 50th Street, Unit 304 | Miami, FL 33155 (347) 746-6276 | www.riomargroup.com <http://www.riomargroup.com> ron at riomargroup.com...

On 10/5/16 11:17 AM, Rowland Penny via samba wrote: > On Wed, 5 Oct 2016 10:37:51 -0400 > Ron García-Vidal via samba <samba at lists.samba.org> wrote: > >> Here is some more information that could be helpful. This is the >> entry for LDAP User in ldbedit: >> >> # record 253 >> dn: CN=LDAP User,CN=Users,DC=dc1,DC=mydomain,DC=net >> objectClass: top

On 10/5/16 11:37 AM, Ron García-Vidal via samba wrote: > On 10/5/16 11:17 AM, Rowland Penny via samba wrote: >> On Wed, 5 Oct 2016 10:37:51 -0400 >> Ron García-Vidal via samba <samba at lists.samba.org> wrote: >> >>> Here is some more information that could be helpful. This is the >>> entry for LDAP User in ldbedit: >>> >>> # record

On 10/6/16 2:19 PM, Rowland Penny via samba wrote: > On Thu, 6 Oct 2016 14:09:20 -0400 > Ron García-Vidal via samba <samba at lists.samba.org> wrote: > >> On 10/6/16 2:02 PM, Rowland Penny via samba wrote: >>> Does 'myuser' exist and if so, does it have a 'memberof' attribute >>> containing 'CN=Domain

On 10/6/16 1:54 PM, Ron García-Vidal via samba wrote: > On 10/6/16 12:50 PM, lingpanda101--- via samba wrote: >> On 10/6/2016 12:35 PM, Ron García-Vidal via samba wrote: >>> On 10/5/16 11:37 AM, Ron García-Vidal via samba wrote: >>>> On 10/5/16 11:17 AM, Rowland Penny via samba wrote: >>>>> On Wed, 5 Oct 2016 10:37:51 -0400 >>>>> Ron

On 10/7/16 8:51 AM, Ron García-Vidal via samba wrote: > On 10/6/16 1:54 PM, Ron García-Vidal via samba wrote: >> On 10/6/16 12:50 PM, lingpanda101--- via samba wrote: >>> On 10/6/2016 12:35 PM, Ron García-Vidal via samba wrote: >>>> On 10/5/16 11:37 AM, Ron García-Vidal via samba wrote: >>>>> On 10/5/16 11:17 AM, Rowland Penny via samba wrote:

On 10/7/16 9:27 AM, lingpanda101--- via samba wrote: > On 10/7/2016 8:51 AM, Ron García-Vidal via samba wrote: >> On 10/6/16 1:54 PM, Ron García-Vidal via samba wrote: >>> On 10/6/16 12:50 PM, lingpanda101--- via samba wrote: >>>> On 10/6/2016 12:35 PM, Ron García-Vidal via samba wrote: >>>>> On 10/5/16 11:37 AM, Ron García-Vidal via samba wrote:

On 10/7/16 10:39 AM, Ron García-Vidal via samba wrote: > I've restored the original DBs as it seems the dbcheck error I was > focusing on was a red herring. I'm now trying to look at the "Unable > to convert SID" messages, as these are the only other errors I've > seen. A reminder that this started after I ran "samba-tool dbcheck > --cross-ncs --fix

On 10/8/16 3:55 AM, Rowland Penny via samba wrote: > Try running this on the DC: > wbinfo --sid-to-gid=S-1-5-21-1319907214-2951884047-2640289736-512 > Winbind is not running on the DC, it's only using sssd. I get: failed to call wbcSidToGid: WBC_ERR_WINBIND_NOT_AVAILABLE This was also the case before the 4.3 to 4.5 upgrade. -Ron

On 10/8/16 10:32 AM, Rowland Penny via samba wrote: > Please post your smb.conf from the DC, the 'samba' deamon should start > winbind, if you run 'ps ax | grep winbind', you should get something > like this: Sorry, Samba wasn't running when I tried that command. Here's the output: wbinfo --sid-to-gid=S-1-5-21-1319907214-2951884047-2640289736-512 failed to call

On 10/8/16 1:14 PM, Rowland Penny via samba wrote: > See inline comments: > > On Sat, 8 Oct 2016 13:00:22 -0400 > Ron García-Vidal via samba <samba at lists.samba.org> wrote: > >> On 10/8/16 10:32 AM, Rowland Penny via samba wrote: >>> Please post your smb.conf from the DC, the 'samba' deamon should >>> start winbind, if you run 'ps ax |

On 10/7/16 9:25 AM, Ron García-Vidal via samba wrote: > On 10/7/16 8:51 AM, Ron García-Vidal via samba wrote: >> On 10/6/16 1:54 PM, Ron García-Vidal via samba wrote: >>> On 10/6/16 12:50 PM, lingpanda101--- via samba wrote: >>>> On 10/6/2016 12:35 PM, Ron García-Vidal via samba wrote: >>>>> On 10/5/16 11:37 AM, Ron García-Vidal via samba wrote:

On 10/6/16 12:50 PM, lingpanda101--- via samba wrote: > On 10/6/2016 12:35 PM, Ron García-Vidal via samba wrote: >> On 10/5/16 11:37 AM, Ron García-Vidal via samba wrote: >>> On 10/5/16 11:17 AM, Rowland Penny via samba wrote: >>>> On Wed, 5 Oct 2016 10:37:51 -0400 >>>> Ron García-Vidal via samba <samba at lists.samba.org> wrote: >>>>

On 10/4/16 2:40 PM, Rowland Penny via samba wrote: > On Tue, 4 Oct 2016 14:00:02 -0400 > Ron García-Vidal via samba <samba at lists.samba.org> wrote: > >> ERROR: incorrect GUID component for member in object CN=Domain >> Admins,CN=Users,DC=dc1,DC=mydomain,DC=net - >>

On 10/6/16 1:02 PM, Rowland Penny via samba wrote: > On Thu, 6 Oct 2016 12:35:54 -0400 > Ron García-Vidal via samba <samba at lists.samba.org> wrote: > >> On 10/5/16 11:37 AM, Ron García-Vidal via samba wrote: >>> On 10/5/16 11:17 AM, Rowland Penny via samba wrote: >>>> On Wed, 5 Oct 2016 10:37:51 -0400 >>>> Ron García-Vidal via samba <samba

On 10/7/16 3:30 PM, Rowland Penny via samba wrote: > idmap.ldb is very easy to repair, just open it in ldbedit, find the sid > and delete the entire object, close and save. > > If the user/group does exist in sam.ldb, it will be recreated in > idmap.ldb, but with a different ID number. > Ok, I fixed the issue with the SID ending in 1111, but this one remains (and the

Here is some more information that could be helpful. This is the entry for LDAP User in ldbedit: # record 253 dn: CN=LDAP User,CN=Users,DC=dc1,DC=mydomain,DC=net objectClass: top objectClass: person objectClass: organizationalPerson objectClass: user cn: LDAP User sn: User givenName: LDAP instanceType: 4 whenCreated: 20140106220805.0Z displayName: LDAP User uSNCreated: 6218 name: LDAP User