similar to: Setup of Samba with Solaris 11.3 to provide Unix File Shares to Windows Users

On Mon, 21 Aug 2017 17:25:31 +0200 Martin Decker via samba <samba at lists.samba.org> wrote: > Dear Rowland, > > our windows admin assured me that they have set uidNumber and > gidNumber in the range. I have requested screenshots for confirmation. > > Now we are one step further: "getent passwd | grep mdecker" now lists > the AD account. > >

Dear Rowland, our windows admin assured me that they have set uidNumber and gidNumber in the range. I have requested screenshots for confirmation. Now we are one step further: "getent passwd | grep mdecker" now lists the AD account. mdecker:*:13667:7142:Decker, Martin:/home/MYDOM/mdecker:/bin/false With "getent passwd mdecker" however, it shows

Thanks Rowland and Louis, after changing from ad to rid, i get all users listed with "getent passwd", not just the ones with uidNumber - which is good. But "getent passwd MYDOM\\mdecker" still does not resolve. In addition, no groups are listed with "getent group". Looking at winbindd debug, it seems that after trying getgrsid on the very first group "Exchange

Thank you for your feedback. I have changed the parameters, but still no success. winbind use default domain = yes idmap config * : range = 1000000-1999999 idmap config MYDOM : range = 100-999999 Regards, Martin 2017-08-18 15:00 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > > See inline comments: > > On Fri, 18 Aug 2017 14:40:54 +0200 >

Does mdecker exist in AD ? => Yes root at solaris1:~# getent passwd "MYDOM.ADS\\mdecker" mdecker:*:13767:613::/home/mdecker:/bin/bash winbind log: getpwnam MYDOM.ADS\mdecker wb_request_done[24254:GETPWNAM]: NT_STATUS_OK Does 'getent passwd mdecker' work ? => No getent passwd mdecker getpwnam mdecker winbindd_getpwnam: My domain -- rejecting getpwnam() for

Dear List, I am trying to set up Samba 3.6.25 (solaris 11.3 packaged) to provide unix file shares to windows users. I can successfully list groups and users with wbinfo -u / wbinfo -g, but I do not get any data with "getent group" or "getent passwd". In AD, we have set "gidNumber" Attribute for Group "Domain Users" to a value in the specified range

See inline comments: On Fri, 18 Aug 2017 14:40:54 +0200 Martin Decker via samba <samba at lists.samba.org> wrote: > Dear List, > > I am trying to set up Samba 3.6.25 (solaris 11.3 packaged) to > provide unix file shares to windows users. > > I can successfully list groups and users with wbinfo -u / wbinfo > -g, but I do not get any data with "getent

A premiere Proprietary Trading Firm in Chicago, IL is looking for a Compiler Developer to join their team. After reading the job description, if you are interested in this great opportunity, email me your updated word resume to mdecker at lucasgroup.com and call me at 713-470-5790 to discuss this position further. Compiler Developer In this role, you will be responsible for working

On 22/01/15 18:19, francis picabia wrote: > We run AD on Windows servers and have Linux systems > authenticate against AD with pam, for shares, cyrus mail, or shell logins. > For shares on a Linux system we often have no local account. > > We've had success with Samba 3.5.10 and prior versions using > security = ads with winbind, pam, nsswitch.conf, krb5.conf > while there

Hi list, I am experimenting with two member servers (both samba4). I am using following configuration: membersrv:/etc/samba/smb.conf: ========================== [...] username map = /etc/samba/smbmap [...] membersrv:/etc/samba/smbmap: ========================= !root = MYDOM\johndoe MYDOM\foo MYDOM\bar MYDOM\Administrator Administrator So the domain users from my AD called "John Doe",

After upgrading Samba server from 4.9 to 4.10 version running on RHEL 7.7 OS, something changed in how Windows clients see the file ownership on the exported shares. Instead of SID owners, it now shows "Unix User\username" and "Unix group\groupname" users. This works fine in all the cases except when Samba share is used for storing Windows user profiles. The workaround

We run AD on Windows servers and have Linux systems authenticate against AD with pam, for shares, cyrus mail, or shell logins. For shares on a Linux system we often have no local account. We've had success with Samba 3.5.10 and prior versions using security = ads with winbind, pam, nsswitch.conf, krb5.conf while there is no local Unix account. Starting after this version, possibly 3.6.0 and

ryan i see and review my configuration a lot of times searching a error but nothing... I thinking to reinstall all server in a linux box for test. the actual samba+ldap server is a Unix Solaris 10 X86 /usr/local/samba/bin/net getlocalsid SID for domain NEPTUNE is: S-1-5-21-1628075765-904855948-1163074499 smbldap.conf wthout "comments"

Try this on your samba DC. amba-tool spn list PCNAME$ You should see something like: PCNAME$$ User CN=PCNAME,CN=Computers,DC=internal,DC=domain,DC=tld has the following servicePrincipalName: HOST/PCNAME HOST/PCNAME.internal.domain.tld nfs/PCNAME.internal.domain.tld nfs/PCNAME.internal.domain.tld at YOUR_REALM can you confirm this for both your servers which

hai, The servers have "A and PTR" records? You have for both server these UPNs. nfs/${SETFQDN} ${SETHOSTNAME_CAPS}$ nfs/${SETFQDN}@${SAMBA_KERBEROS_REALM} ${SETHOSTNAME_CAPS}$ on the samba side the nfs spn is in you keytab file? and if your brave, read, * dont run it, since i did not test this with windows servers.

On Mon, 8 Aug 2016 10:24:03 -0300 francis picabia <fpicabia at gmail.com> wrote: > I have a couple of Debian 8.5 systems set up in similar manner. > Samba is version 4.2.10-Debian > > Here is the essential config... > > # testparm /etc/samba/smb.conf > Load smb config files from /etc/samba/smb.conf > Processing section "[homes]" > Loaded services file

On Mon, 8 Aug 2016 11:48:42 -0300 francis picabia <fpicabia at gmail.com> wrote: > On Mon, Aug 8, 2016 at 10:54 AM, Rowland Penny <rpenny at samba.org> > wrote: > > > On Mon, 8 Aug 2016 10:24:03 -0300 > > francis picabia <fpicabia at gmail.com> wrote: > > > > > I have a couple of Debian 8.5 systems set up in similar manner. > > >

I have a couple of Debian 8.5 systems set up in similar manner. Samba is version 4.2.10-Debian Here is the essential config... # testparm /etc/samba/smb.conf Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global]

> > No, you only thought it worked using sssd on 4.8.x & 4.9.x, but it > didn't work correctly. > Maybe, but it "worked". Can we speculate what change in 4.10.x prompted Samba to export "Unix user\username" type of ownership to Windows clients instead of SID? Is there any option to revert to previous "wrong" behavior as a temporary workaround?

Hi there! To set up a samba PDC with openLDAP on my openSUSE 10.1 x86_64 I followed this howto: http://en.opensuse.org/Howto_setup_SUSE_10.1_as_Samba_PDC Every service seems to be running now but now I'm stuck. I was able to join a clean Windows XP Pro test machine to my Domain and I'm able to log on as normal LDAP user. The home-share is mounted and even a login script (actually just