similar to: Admins cannot change folder ownership

Hi All, I'm having a strange pronlem with winbind. For users it seems to be working fine but for groups its not enumerating most of the groups! A getent group produces only 325 lines of domain groups whereas wbinfo -g produces 2839 lines of groups. I'm not seeing any errors logged and all commands are exiting with status 0. Winbind related sections of smb.conf are shown below,

So, a little bit more investigation shows a problem with idmap -> User - BUILTIN\Administrator uid = 30000 Group - BUILTIN\Administrators gid = 3000000 Group - SAMDOM\Domain Admins gid = 60000 POSIX file ownership is becoming 3000000:60000 It seems that the Administrators group group is set as the owner. What's more, 'Administrators' group name is not mapped when I list the

Case point: 2 Servers (both with Windows Server 2k3 & cygwin). Running ssh on the destination server. Problem: The rsync user will take ownership over any files copied over from the source server. This takes ownership away from the administrators group, thus disallowing inherited permissions. Is there any way around not taking ownership away from the administrators group and giving it to the

I've seen this posting before but I need to get a grasp on this. I am using winbindd for users that don't have a local account on a Linux box. I thought that placing the entries below in the smb.conf would create users in ou=Idmap. Instead the ou=Idmap increments the uidNumber with every user that is added,but the user ID mappings are stored in /usr/local/var/locks/winbindd_idmap.tdb. What

Hi All, can anyone make any sense of the error below, please advise if I need to log this as a bug but I'm not sure how to further diagnose what is happening. This is from my winbindd log file, thanks Andy. [2003/11/07 17:47:59, 1] nsswitch/winbindd.c:main(832) winbindd version 3.0.0 started. Copyright The Samba Team 2000-2003 [2003/11/07 17:48:00, 1]

Everytime I add or remove some samba shares, I must restart smb service to take effect. Is there anyway to reconfig it without restart?

Just a quick question, it may sound a bit stupid but I just want to make sure. I have a Solaris 9 machine running winbind, the backend is an OpenLDAP database running on a RedHat 9 machine. My question is, apart from the 'smbpasswd -w' command and the obvious stuff in smb.conf, do I have to set up the LDAP client on Solaris for Samba to be able to put new mappings into the LDAP database?

Hi all, anyone able to point out why I'm not able to get samba 3.0.0 to update my LDAP server with any idmap data? I'm using SunOne DS 5.2 LDAP server and the following entries in my smb.conf file, ldap admin dn = "uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot" ldap ssl = off ; ldap suffix = "dc=testlan,dc=bbc,dc=co,dc=uk" ** have tried with this

Hi List, I'm having an issue between Samba and OS X with regards to Kerberos authentication to a Samba AD member server. I'm using local UNIX accounts and entries in the passdb instead of Windind on the samba server, ie create account by adding to /etc/passwd then smbpasswd -a username. From an OS X client system if I obtain a ticket for user "UserA" like kinit

I can't say I've tested this in any depth. Where multiple LDAP servers are listed as the LDAP backend is the behaviour of Samba that if it fails to contact the first listed server it will try the second and so on? If that's the case Samba should only ever try and update the password on a single LDAP server which would then replicate the change to any other master and slave LDAP servers

Hi list, I'm trying to compile samba 3.0.1 rc1 with --enable-dmalloc switch because I have been asked to provide more information on a winbindd panic on a Solaris server. However the configure fails with the error shown below, config.status: creating include/config.h Note: The dmalloc debug library will be included. To turn it on use ./configure: command substitution: line 3: syntax error:

Hello, I have samba server on windows domain, in ADS mode but have problem tracking files that belong to admin users, anytime new file created the default owner is root. For non-admin users its normal, newly created files have correct ownership permissions. Its possible for a user to go and take ownership manually from windows machine but its just inconvenient. Is there anyway to change default

Hi list, If I have multiple Samba member servers in a domain can I store the groupmap data in LDAP? When I try this I get this error # net groupmap add ntgroup=Everyone unixgroup=nobody No rid or sid specified, choosing algorithmic mapping adding entry for group nobody failed! But this works correctly (creates account in LDAP server) smbpasswd -a username password the LDAP config in my

Hi I've just installed Samba 4.0.4 on FreeBSD to test for the moment. Everything so far has gone very well: joining the domain, GPO's etc. However one thing that is happening which I find unusual, is the owner of files created by a user who is a member of the Domain Admins group as well as Domain Users. All files created by the user are owned by id 3000000 (which I believe S4 maps to

Can anyone tell me if I can configure Samba 3.x to rely only on Kerberos authentication (in an AD domain)? Ideally I'd like to use local UNIX accounts, not winbind, and negate the need for me to add an entry to passdb, then the account must exist in AD and locally on each Samba member server for authentication to work. If there is any info held in passdb, other than the NTLM coded password,

Hi all, our NT server guy has just asked me if I can disable/prevent offline folder support on a Samba share. This is something which is configurable on a Windows 2000/2003 server share. Any help much appreciated, thanks Andy.

Hello list, I have a requirement to script a sync from a server to a UNIX workstation (Mac OS X) users desktop and profile related data at logon and logoff. Rsync looks like it may be appropriate, but I am concerned about making a sufficiently secure connection between the server and the client (given my sync must be non-interactive). Rsh is not an option, so Ssh seems to be the only

hi , Compiled and installed samba 3.0.2a as PDC in sun solaris 2.9, for supporting win xp machines. Working on the Kerberos support, would like to whether the Sun solaris version of kerberos is compatible with samba 3.0.2a. Thanx in advance aarumuga __________________________________ Do you Yahoo!? Get better spam protection with Yahoo! Mail. http://antispam.yahoo.com/tools

Hi All, can someone elaborate on the cause of my problem mentioned below? Service records exist for DC's only on DNS servers in that domain (ie DNS server in domain X has service records only for all DC's in domain X and so on for each domain), should normal DNS forwarding not allow a client in one domain to read the service record data from another? Normal host records for all domains

Dear aarumuga I've been reading your questions in Samba mailing list about SMB & Sun LDAP. I'm working with a same project and I would like to know only if is it posible or have you achieved your goal to link samba and Sun LDAP? Thanks in advance and excuse me for my english. Best regards, Ramon Aznar