similar to: Windows doesn't show groups/users of AD in security tab when connected to Samba server

[I'm afraid $customer made me anonymize their rootdn, user and group names, so the ones below are made up. Hopefully I haven't introduced any errors in the process.] I'm running Debian 7 with samba 4.0.9dfsg1-1 built from git://git.debian.org/pkg-samba/samba. I'm using samba as an AD DC, with accounts migrated from a samba3/slapd stack using samba-tool domain classicupgrade.

Hello, I use Samba 3.0.22 on a Solaris 8 system. I have configured and compiled it myself: CFLAGS='-I /opt/local/openldap/include' ; export CFLAGS LDFLAGS="-L/opt/local/openldap/lib, -R/opt/local/openldap/lib" ; export LDFLAGS CPPFLAGS="-IL/opt/local/openldap/include" ; export CPPFLAGS LD_LIBRARY_PATH=$LD_LIBRARY_PATH:/opt/local/openldap/lib ; export LD_LIBRARY_PATH

Winbindd is having trouble finding the Domain Admins group in my domain. It appears to be searching for the group but does not show what domain it's looking into - then it tries the local PC (ANC-Gentoo): log.winbind: [2004/01/07 13:20:43, 3] nsswitch/winbindd_group.c:winbindd_getgrnam(237) [23792]: getgrnam Domain Admins [2004/01/07 13:20:43, 5] nsswitch/winbindd_acct.c:wb_getgrnam(522)

On 17/12/14 23:01, Gaiseric Vandal wrote: > I have two Samba 3.6.24 domain controllers (Solaris 10.) On all > machines unix accounts and groups are in the LDAP as well as idmap > entries for trusted domains. Samba accounts on domain controllers are > in LDAP so there is problem with consistency unix/windows id and group > mapping on the domain controllers. The domain

On 17/12/14 22:01, Gaiseric Vandal wrote: > I have two Samba 3.6.24 domain controllers (Solaris 10.) On all > machines unix accounts and groups are in the LDAP as well as idmap > entries for trusted domains. Samba accounts on domain controllers > are in LDAP so there is problem with consistency unix/windows id and > group mapping on the domain controllers. The domain

On 18/12/14 16:43, Gaiseric Vandal wrote: > I think IDMAP_RID would not be the appropriate solution for me. Not > only do I want consistent IDMapping across all servers - which this > could do - but I want them to match the the existing unix uidNumber > in LDAP. You never said that you had uidNumber in LDAP!, in fact you seemed to mention every winbind backend except the one that

On 18/12/14 17:24, Gaiseric Vandal wrote: > I don't have an AD backend for this domain. The DC's are "classic" > domain controllers, Samba 3.6 , with LDAP backend for all accounts. > Would this still be an option? > > > > > I tried adding > > > idmap config MYDOMAIN:schema_mode = rfc2307 > idmap config MYDOMAIN:backend = ad > idmap

I think IDMAP_RID would not be the appropriate solution for me. Not only do I want consistent IDMapping across all servers - which this could do - but I want them to match the the existing unix uidNumber in LDAP. Thanks for your help. On 12/18/14 04:29, Rowland Penny wrote: > On 17/12/14 22:01, Gaiseric Vandal wrote: >> I have two Samba 3.6.24 domain controllers (Solaris

On 30/10/2020 13:17, Ralph Boehme wrote: > Am 10/30/20 um 12:39 PM schrieb Rowland penny via samba: >> On 30/10/2020 11:20, Ralph Boehme wrote: >>> Am 10/30/20 um 12:11 PM schrieb Rowland penny via samba: >>>> On 30/10/2020 11:06, Ralph Boehme via samba wrote: >>>>> Am 10/30/20 um 10:20 AM schrieb Thomas Besser via samba: >>>>>> Can I

I don't have an AD backend for this domain. The DC's are "classic" domain controllers, Samba 3.6 , with LDAP backend for all accounts. Would this still be an option? I tried adding idmap config MYDOMAIN:schema_mode = rfc2307 idmap config MYDOMAIN:backend = ad idmap config MYDOMAIN:range = 100-300 Didn't seem to work. Thanks On 12/18/14 11:57, Rowland

I have two Samba 3.6.24 domain controllers (Solaris 10.) On all machines unix accounts and groups are in the LDAP as well as idmap entries for trusted domains. Samba accounts on domain controllers are in LDAP so there is problem with consistency unix/windows id and group mapping on the domain controllers. The domain controllers are the main file servers as well. I am configuring a

Dear all As we wanted to patch one of our iSCSI Solaris servers we had to offline the ZFS submirrors on the clients connected to that server. The devices connected to the second server stayed online so the pools on the clients were still available but in degraded mode. When the server came back up we onlined the devices on the clients an the resilver completed pretty quickly as the

Hi! In my samba controlled domain, most users are stored in an LDAP directory. The Unix boxes use nss_ldap but they also have a few local users (mostly system-users) whose user-ids are not synchronized. I've read the documentation about idmap_nss but I'm still not sure if this is needed for my setup. Will using idmap_nss in addition to idmap_ldap result in any benefit (e.g. when mapping

Hello, I have a PDC and BDC servers with an OpenLDAP backend. It works fine for a 500 users office. I also have some servers with LDAP NSS and PAM and Samba with idmap_nss backend. It also works fine. The configuration for theses servers is: [global] workgroup = AURORA ... idmap domains = AURORA idmap config AURORA:backend = nss idmap config AURORA:readonly = yes

Am 10/30/20 um 12:39 PM schrieb Rowland penny via samba: > On 30/10/2020 11:20, Ralph Boehme wrote: >> Am 10/30/20 um 12:11 PM schrieb Rowland penny via samba: >>> On 30/10/2020 11:06, Ralph Boehme via samba wrote: >>>> Am 10/30/20 um 10:20 AM schrieb Thomas Besser via samba: >>>>> Can I configure winbind to use 'local' users and groups from

On Tue, 3 Apr 2018 10:51:09 +0200 Francesco Malvezzi via samba <samba at lists.samba.org> wrote: > Il 21/02/18 16:20, L.P.H. van Belle ha scritto: > > Hai, > > > > Thank you for having trust in my packages.. :-) > > Now if you use my package, i suggest, do read the howto's also... > > All you need for a good setup on debian stretch is there. >

On 30/10/2020 11:20, Ralph Boehme wrote: > Am 10/30/20 um 12:11 PM schrieb Rowland penny via samba: >> On 30/10/2020 11:06, Ralph Boehme via samba wrote: >>> Am 10/30/20 um 10:20 AM schrieb Thomas Besser via samba: >>>> Can I configure winbind to use 'local' users and groups from NSS? >>> there's idmap_nss that may work for you. >>>

Il 21/02/18 16:20, L.P.H. van Belle ha scritto: > Hai, > > Thank you for having trust in my packages.. :-) > Now if you use my package, i suggest, do read the howto's also... > All you need for a good setup on debian stretch is there. > if anyone find/see's improvements, please tell me... Or change it on github, thats why its there. > > First is this an

I'm trying to solve this issue I'm having where using 'valid users = +unixgroup' just plain doesn't work. I can't find any /documented/ reason why this is so, but nevertheless, it seems to be the case. This is with samba 3.6.18, but seems to exist in all of 3.6.x and most or all of 3.5.x and perhaps earlier as well (see bug #6681). From what I can tell, the underlying

Hello, I have Samba setup with as a domain member server (security = ADS). wbinfo -g works wbinfo -u works getent passwd works getent group works There is a directory name /dir/shared with the following permissions. drwxrwxrwx 2 root users The information shows up fine in Windows on the security tab root (Unix User\root) usesrs (Unix Group\uses) Now, I go into the Linux