similar to: Want ADS, don't want to use winbind in /etc/nsswitch.conf

On Thu, Jun 29, 2017 at 4:46 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 29 Jun 2017 16:28:38 -0300 > francis picabia via samba <samba at lists.samba.org> wrote: > > > On Thu, Jun 29, 2017 at 3:48 PM, Rowland Penny via samba < > > samba at lists.samba.org> wrote: > > > > > > > > > > > Well, no it

On Tue, Aug 9, 2016 at 1:58 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 13:37:18 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > > > > getent passwd username > > > > (or "theusername") is not the literal command. I substitute > > 'username' here to protect the user id.

On Thu, Jun 29, 2017 at 3:48 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > > > Well, no it isn't actually on that page, you need to follow an > hyperlink to this page: > > https://wiki.samba.org/index.php/Idmap_config_rid > > It is really confusing. rid or tdb. I don't know what it wants because the second link has both. Here is the

On Tue, Aug 9, 2016 at 10:21 AM, Rowland Penny <rpenny at samba.org> wrote: > On Tue, 9 Aug 2016 09:37:13 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > Thanks for the detailed response. > > > > It is very extensive for my purposes, but it still feels over > > analytical for what we need. I believe the Unix UID doesn't exceed >

On production, we have Samba share on Solaris and ADS config working already using 3.6.25 On a dev box used to test patches, I've spent a day and some time on a Oracle support ticket trying to get this working again under 4.4.14 The same problem happens whether I'm testing with homes or a share with /tmp. The user isn't matching expectations, so it won't allow copying a 700 file

On Mon, Aug 8, 2016 at 10:54 AM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 8 Aug 2016 10:24:03 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > I have a couple of Debian 8.5 systems set up in similar manner. > > Samba is version 4.2.10-Debian > > > > Here is the essential config... > > > > # testparm

On Mon, Aug 8, 2016 at 12:43 PM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 8 Aug 2016 11:48:42 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > On Mon, Aug 8, 2016 at 10:54 AM, Rowland Penny <rpenny at samba.org> > > wrote: > > > > > On Mon, 8 Aug 2016 10:24:03 -0300 > > > francis picabia <fpicabia at

On Tue, Aug 9, 2016 at 12:29 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 11:58:42 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > > > $ smbclient -L //debian2 -U username > > Enter username's password: > > session setup failed: NT_STATUS_UNSUCCESSFUL > > > > > > > When I do a

On Mon, Aug 8, 2016 at 5:06 PM, Michael Adam <obnox at samba.org> wrote: > On 2016-08-08 at 16:31 -0300, francis picabia wrote: > > I'm reading the man page for idmap_rid over and over and I can't > understand > > it. I think it needs a rewrite so a normal user can understand. Using a > > practical example. > > I admit it is a little terse. > But

On Mon, Aug 8, 2016 at 4:16 PM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 8 Aug 2016 15:27:44 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > OK, that was my bad for copy/pasting some config lines I found with > > a report of "this works!" on a bug report (only the second login > > connects bug). > > > > I've

On Tue, Aug 9, 2016 at 3:07 PM, Jeremy Allison via samba < samba at lists.samba.org> wrote: > On Tue, Aug 09, 2016 at 07:50:12PM +0200, Michael Adam via samba wrote: > > On 2016-08-09 at 17:58 +0100, Rowland Penny via samba wrote: > > > On Tue, 9 Aug 2016 13:37:18 -0300 > > > francis picabia <fpicabia at gmail.com> wrote: > > > > > > >

On 2016-08-09 at 17:58 +0100, Rowland Penny via samba wrote: > On Tue, 9 Aug 2016 13:37:18 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > > > > getent passwd username > > > > (or "theusername") is not the literal command. I substitute > > 'username' here to protect the user id. > > genent passwd on the user

On Tue, Aug 9, 2016 at 2:48 PM, Michael Adam <obnox at samba.org> wrote: > On 2016-08-09 at 11:58 -0300, francis picabia via samba wrote: > > On Tue, Aug 9, 2016 at 10:21 AM, Rowland Penny <rpenny at samba.org> wrote: > > > > > On Tue, 9 Aug 2016 09:37:13 -0300 > > > francis picabia <fpicabia at gmail.com> wrote: > > > > > >

I'm reading the man page for idmap_rid over and over and I can't understand it. I think it needs a rewrite so a normal user can understand. Using a practical example. Step 1: determine the highest UID in use for your /etc/passwd file (can we assume everyone has a passwd file?) Step 2: I don't know... Optionally at this point, document how to plug that into the formula RID = ID +

We run AD on Windows servers and have Linux systems authenticate against AD with pam, for shares, cyrus mail, or shell logins. For shares on a Linux system we often have no local account. We've had success with Samba 3.5.10 and prior versions using security = ads with winbind, pam, nsswitch.conf, krb5.conf while there is no local Unix account. Starting after this version, possibly 3.6.0 and

I have a couple of Debian 8.5 systems set up in similar manner. Samba is version 4.2.10-Debian Here is the essential config... # testparm /etc/samba/smb.conf Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global]

On Wed, Aug 10, 2016 at 12:17 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Wed, 10 Aug 2016 11:36:45 -0300 > francis picabia via samba <samba at lists.samba.org> wrote: > > > On Wed, Aug 10, 2016 at 11:04 AM, Rowland Penny via samba < > > samba at lists.samba.org> wrote: > > > > > On Wed, 10 Aug 2016 10:42:11 -0300 >

On Tue, Aug 9, 2016 at 3:00 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 14:49:37 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > On Tue, Aug 9, 2016 at 1:58 PM, Rowland Penny via samba < > > samba at lists.samba.org> wrote: > > > > > On Tue, 9 Aug 2016 13:37:18 -0300 > > > francis

Thanks for your help. Here is a sanitized config from our dev system where I'm testing the Solaris patch. [global] workgroup = MYDOM netbios name = norm security = ADS log file = /var/log/samba/%m.log max log size = 50 dns proxy = no loglevel = 3 template shell = /usr/bin/bash winbind use default domain = true winbind enum users = yes winbind enum groups =

On Tue, Aug 9, 2016 at 3:35 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 15:21:53 -0300 > francis picabia via samba <samba at lists.samba.org> wrote: > > > I've been working with the third statement being true and exercising > > the rid option. > > Can I suggest you put it back, or add the RFC2307 attributes and use