Displaying 20 results from an estimated 100 matches similar to: "Retrieving UNIX UID/GID directly through Active Directory"
2006 Apr 27
2
winbind nss info = sfu is not so much working
with samba 3.0.22, I'm trying to integrate a linux box with Microsoft AD
by using winbind for authentication as well as for the source of nss info.
When winbind is configured to use its own local id maps, everything
works fine.
But when i configure winbind to use 'ad' as the source of nss info,
authentication fails, 'getent' commands return no results, and
'wbinfo -r
2005 Nov 29
1
AD4Unix & Samba-3.0.20b+winbind
Scenario: Samba-3.0.20b domain member server on SuSE 9.3 (w/ all
available patches applied) providing kerberos authentication through a
Windows 2000 domain with AD4Unix services installed.
Problem(s):
1. Can only view users from one OU in Active Directory (default is:
CN=Users, problem container is: OU=authenticated)
2. According to log.winbind and log.smbd authentication fails with
error:
2009 Mar 23
1
Internal Error Signal 11 (Samba 3.2.3)
Hello list users. In my journey to world of Linux/Windows interoperability, I have now almost reached my goal to successfully authenticate Linux users using Windows Server 2003 SP2. The (hopefully) last obstacle is that "wbinfo -i <username>" causes the following error to be produced in log.wb-<DOMAIN> file (consequently, logins are failing also of course). Samba version is
2005 Dec 04
0
AD4Unix & Samba-3.0.20b+winbind (UPDATE)
The nss_ldap has some performance problems and doesn't have any caching
features that windbind does. What I was aways wondering is does IDMAP
write UID/GID derived from SID to the extended schema in AD? Can
winbindd use this extended schema, instead of using nss_ldap?
-----Original Message-----
From: samba-bounces+letz_samba=realmspace.com@lists.samba.org
2007 Mar 07
1
dovecot-ldap.conf - Active directory
Hello,
I have a configuration with dovecot-ldap working with openldap (on
FreebSD 5.4 Release).
Now I'm trying to do the same thing with an Active Directory (win2k3).
I have installed an properly configured SFU. Via nss_ldap-pam_ldap is
working fine (FreeBSD 6.2 Release).
Because nss_ldap is reported broken with dovecot I'm trying to use
dovecot-ldap for both passdb and userdb.
My
2005 Dec 01
0
Unresolved Questions for Active Directory Kerberos/LDAP/AD4Unix or SFU35 support?
I have been digging around for information on this in either online and
published books, but I haven't yet found the answer. I am interested in
AD connective through AD Kerberos/LDAP/SFU or AD Kerberos/LDAP/AD4Unix.
I have a pure win2k3 environment, so there is no backwards support via
PDC emulator. Published books document older NT-like environments.
*cries* If there are any documents,
2008 Apr 17
0
winbind can get uid and gid from sfu, but not homedir or loginshell
I have winbind v3.0.26a running on ubuntu server v7.10 (gutsy).
I intend to get user & group info from MsActiveDirectory.
However, when I type:
getent passwd somerandomuser
I get the uid and gid for the user, as recorded in the msad schema by
virtue of sfu, but the homedir and loginshell that are returned are like
what "winbind nss info = template" would return by default:
2003 Aug 19
0
Changing ACLs dont work, clicking 'apply' restores old ACL
Hello!
I'm building a samba fileserver that would share the same files for both linux
and UNIX clients and ACLs should still work from windows. The UNIX clients
don't have any users either, because all user information is taken from an AD.
The setup is the following:
Samba 3rc1 fileserver
Win2k3 AD Server
+ Win2k clients and Linux clients
Basically the win2k3 AD schema has been updated
2004 Sep 22
1
idmap_ad: sid to uid conversion fails
I have two boxes on which I am trying to get idmap_ad
(from xad_oss_plugins) to provide uid/gid mapping, and
am getting the error:
"Could not convert sid <sid of some_user> to uid"
The story so far goes like this:
Without the line
"idmap backend = ad:ldap://<PDC's FQDN>/" in smb.conf,
I can successfully do all of:
#> wbinfo -S $(wbinfo -n some_user | awk
2002 May 13
1
Synchronizing uids on deferent machines running winbind
Hello,
I've a small Linux network, NFS amd NIS server with three clients. Each machine is running winbind to connect to a windows 2000 domain. All is working fine, I just have a problem synchronizing the uids generated by the winbind to a windows user that logs on to the Linux network. For example, on one machine a user can get uid 10000 and on another machine the same user can have uid
2007 May 18
0
Samba and AD via ldap.
Hi All,
I am relatively new to samba but recently I have been working a lot with
it in order to unite ID/GID on our unix clients.we have Active Directory
DC and I would like to allow users to use their accounts when working on
these clients (clearcase related).
I have started working with winbind and reached to a point when I Joined
the domain,got details using wbinfo -u/-g and su <domain
2003 Mar 31
0
W2K security and smbclient
Hi,
I've a linux client (RH8) and a MS W2K with Active Directory server.
I can login from a linux agains AD with the extension schema (AD4Unix
installed).
I can obtain a kerberos ticket and when i use smbclient //server/share -k
(kerberos authentication) all is OK, but.....
When i try to mount a directory with smbmount or with mount all is ok but i've noted
that the security of W2k are not
2004 Jan 13
0
SID <-> UID mappings
Hello!
I've been running a custom hacked samba 3.0rc1 to get winbindd to bind every SID
simply to what getpwent returns as the UID.
The newest versions of samba seem to support the possibility to have
winbindd to use /etc/passwd and /etc/group as the storage backend.
So basically what I need is that each time samba wants to know the SID of the
username "joe" it would just query
2003 Nov 16
1
samba-3.0.0 and Active Directory
Hi everybody,
Shortly, I want my Active Directory users to be able to use Linux samba
file server.
The network is: Win XP and w2k clients, an AD server (w2k) and Linux samba
file server (RedHat 7.1).
The services on Linux box (imap, ftp, ssh) are configured to use pam_ldap
and nss_ldap, so 'getent passwd' works fine and gets accounts from both
/etc/passwd (root and a couple of accounts)
2004 Oct 27
1
Winbindd as NIS replacement in heterogen environement
Hi all
We have the following environement:
Microsoft ADS for Windows Users, NIS for Un*x Users.
Samba 3.x Fileservers.
Win2k/XP Clients which use CIFS to connect to the Fileserver.
FreeBSD/Linux Clients which use NFS to connect to the Fileserver.
For the moment, Windows User authenticate against the ADS and Un*x users
authenticate against a NIS Server. Everything runs fine.
But we would like
2005 Dec 06
2
Mac OS X clients not binding to a Samba+LDAP PDC
Hi there !
This is my first post and I really would like to have this stuff working ...
if not, I should go to Win2k3 server .... please help me to avoid it !!!!
I've been trying to integrate Mac OS X (10.3) clients to my Samba server
through the Active Directory Plugin with no success. This PDC is currently
working for 90 PC's with XP SP2.
My server is well configured from the DNS (or
2004 Apr 20
1
AD<->Linux: Thoughts
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
I have a small planning problem...
I built an environment for a customer about six (or so) months
ago based on RH8 which authenticate and mount homes from an
AD server... The Linux stuff was straigt forward - using LibNSS/LDAP
and LibPAM/{LDAP,Krb5} for authentication and samba (2.x something)
to mount the home directories.
Unfortunatly, this
2006 Oct 20
2
could not read attribute 'msSFU30UidNumber'
Hi,
I'm using samba 3.0.23c, and having a bit of trouble getting it to play nice
with my active directory. I'm using Windows Small Business Server 2003 with
the SFU 3.5 NIS server/schema extensions installed. I have samba configured
to use ad as the idmap backend, and sfu for nss info.
When running getent passwd, only a few active directory users show up, and I
get lots of errors
2004 Jul 06
0
where is smbgroupedit and differenet other questions to Samba & AD
Hello List-Friends ;-)
O.K. I am a real beginner, so please don't hurt me ;-)
but im still working since a few days to get it running and google is my best friend.
I also bought O'Reilly 's Samba Book and a lot of other online stuff, but AD-Samba-winbind should be too new.
I use Suse 9.1 and Samba 3.0.4 as ADS Member Server.
We have an W2k Advanced Server (and a M$-Admin which
2004 Apr 05
2
NT/ADS and UNIX user convergence using Samba
Hi-
I'm deploying a fileserver running Samba 3.0.2a in an environment that
contains NT and UNIX users. I'd like to have my fileserver set up as
follows:
- Users connecting to the fileserver from NT boxes are authenticated against
the Win2K ADS Domain Controller.
- Users connecting to the fileserver from other UNIX boxes are authenticated
locally using NIS and access the shared volume