search for: werthmuller

...I use sudo samba-tool user add <username> --uid-number=5000 and manually ad the gid-number via ldapadd to the Samba AD, does the winbind backend=ldap make use of those values? Or does it just use LDAP to retrieve the sAMAccountName and primaryGroupID ? Thanks Derek Derek Werthmuller Director of Technology Innovation and Services Center for Technology in Government 518.442.3892 www.ctg.albany.edu

...server role. I'm also trying to be very careful not to make substantial changes to the exchange host - I need that working for a short while longer. Thanks Derek -----Original Message----- From: Chris Smith [mailto:smb_77 at chrissmith.org] Sent: Friday, October 28, 2011 12:07 PM To: Derek Werthmuller Cc: samba at lists.samba.org Subject: Re: [Samba] NT4 SP3 PDC with MS Exchange 5.5 to Samba 3.x ldapbacked PDC and MS Exchange 5.5 still On Fri, Oct 28, 2011 at 10:34 AM, Derek Werthmuller <dwerthmu at ctg.albany.edu> wrote: > Looking to make some changes to an old but working LAN, that h...

...ng the exchange is really a stop gap till we can move that function to the cloud. Have others done similar upgrades successfully? Does this sound reasonable? Is the trust relationship overkill and likely to cause problems? (tell users to cache the outlook login and be done) Thanks Derek Derek Werthmuller Director of Technology Innovation and Services Center for Technology in Government 518.442.3892 www.ctg.albany.edu <www.ctg.albany.edu>

...dules ii samba-libs:amd64 ii samba-vfs-modules dpkg -l |grep winbind # shows the same version on both servers ii libnss-winbind:amd64 ii libpam-winbind:amd64 ii libwbclient0:amd64 ii winbind smb.conf is the same on both servers also. Any advice? Winbind cache ? Thanks Derek Derek Werthmuller Director of Technology Innovation and Services CTG UAlbany 518.442.3892 www.ctg.albany.edu<http://www.ctg.albany.edu/>

...r uidNumber: 1001 gidNumber: 1001 gecos: Dr. Lars Hanke root at samba4:/# grep mgr /etc/passwd root at samba4:/# So although proper POSIX information is in the AD, and no local information present, winbind rolls dice for POSIX attributes. The situation seems similar to that of Rowland and Derek Werthmuller last December. There finally, Rowland suggested to use sssd. My smb.conf: [global] workgroup = AD realm = AD.MICROSULT.DE security = ADS restrict anonymous = 2 kerberos method = system keytab os level = 0 local master = No d...

I'm using sernet samba 4.0.11 on Centos 6 and don't see the capabilities to add some of the RFC2307 attributes that make Linux UID/GID mapping easier in the sernet version of the samba-tool. The patch is mentioned on this list last year under: https://lists.samba.org/archive/samba/2012-September/169300.html Some threads on the net refer to this capability found in newer versions of samba

In the planning process for migrating from NT4 PDC, and external ldap directory to samba 3.2.8 PDC. The external existing openldap directory is used currently to support the local uid mapping for the Linux logins and samba file servers that are members of the current NT4 PDC. While looking at the existing openldap UIDs and GIDs in use and what the samba PDC wants to use I see some uid/gid

Running a new install of samba 4.1 AD, also using winbind to handle Linux user, group authorizing users. I'm have problems with DNS lookups for ssh client don't work nslookup on the same AD and member system works fine. For example: I can run nslookup example.com and it returns a valid answer right way. If I try to ssh -l username example.com , ssh returns "ssh: Could not resolve

...-------------------------------------------------- Tony Hoover, Network Administrator KSU - Salina, College of Technology and Aviation (785) 826-2660 "Don't Blend in..." ------------------------------------------------------------------------ On Tue, 2009-03-24 at 13:48 -0500, Derek Werthmuller wrote: > Reading through the Samba3 -By Example guide and I'm confused with > the > statement section 9.2 > http://www.samba.org/samba/docs/man/Samba-Guide/ntmigration.html#id2594565 > about accessing the SAM and Security sections of the registry will > render > the PDC...

...e.com security = ADS encrypt passwords = yes # min signaling server signaling = mandatory min protocol = SMB2_10 #client min protocol = SMB2 max protocol = SMB3 dedicated keytab file = /etc/krb5.keytab Diagnostic suggestions? Recommended configuration changes? Thanks Derek Derek Werthmuller Director of Technology Innovation and Services Center for Technology in Government 518.442.3892 www.ctg.albany.edu<http://www.ctg.albany.edu/>

Just to make sure that I'm on the right path to get this working the way I would like. I have a linux file server that has used LDAP the user and group information in the past. I would like to migrate (recreate) the same users and groups in the samba4 AD DC, adding the UID and GID attributes. So that I don't have to change the UID and GID permissions on the file servers. The migration

I've been working on setting up the Sernet 4.1x series samba builds for Centos 6. Provisioned via sudo /usr/bin/samba-tool domain provision --use-rfc2307 -interactive With the goal of providing authentication, user and group management with file and print services to Widows 7/8 clients, & authentication user and group management for Linux system users. The question is around my confusion

Reading through the Samba3 -By Example guide and I'm confused with the statement section 9.2 http://www.samba.org/samba/docs/man/Samba-Guide/ntmigration.html#id2594565 about accessing the SAM and Security sections of the registry will render the PDC non operable. Its clear from the text if you go and edit the registry(regedit etc..) so you can read the entries your PDC will not work.