similar to: Is Samba 4.9 and "map untrusted to domain" possible anymore?

Displaying 20 results from an estimated 10000 matches similar to: "Is Samba 4.9 and "map untrusted to domain" possible anymore?"

2020 Jun 04
1
Is Samba 4.9 and "map untrusted to domain" possible anymore?
On Thu, 4 Jun 2020, Rowland penny via samba wrote: > On 04/06/2020 13:49, Harald Hannelius via samba wrote: >> >> Question 3) >> If I would enable trust between "AD" and "SAD", would users trying to >> access files on a Samba fileserver be mapped to the uidNumber in "SAD" DS? >> Or would they be mapped to something entirely else?
2020 Jun 04
2
Is Samba 4.9 and "map untrusted to domain" possible anymore?
On Thu, 4 Jun 2020, Rowland penny via samba wrote: > On 04/06/2020 13:49, Harald Hannelius via samba wrote: >> >> Question 2) >> Does a windows client behave differently when speaking to a NT4-domain or >> an >> AD-domain in how they try passwords? I have a feeling that users in the >> "AD"-domain didn't need to (manually at least) enter any
2020 Jun 04
1
Is Samba 4.9 and "map untrusted to domain" possible anymore?
On Thu, 4 Jun 2020, Rowland penny via samba wrote: > On 04/06/2020 14:46, Harald Hannelius via samba wrote: >> >> So the best way for me would be to implement the RFC2307/SFU schema in the >> Windows AD "AD", add the same uidNumber for every user in "AD" as they had >> in the old "Samba" domain, and then just join the fileservers to the
2020 May 15
3
Problems with groups, minimum gidnumber?
On Fri, 15 May 2020, Rowland penny via samba wrote: > On 15/05/2020 13:48, Harald Hannelius wrote: >> >> I created a script that looped on 'getent passwd' from the old DC. It >> called samba-tool and pdbedit to add the users; >> >> samba-tool user create $username Some2pass/e --use-username-as-cn >> --nis-domain=sad --unix-home=$home
2020 Jun 16
3
Wrong password, Win10 not using SMB3_11?
On Tue, 16 Jun 2020, Rowland penny via samba wrote: > On 16/06/2020 12:41, Harald Hannelius via samba wrote: >> I have Samba AD-domain with two fileservers and two Samba DS-servers. Most >> people can authenticate OK, but one user always gets "wrong password". > What versions of Samba ? All servers are 4.9.5-Debian. >> Auth: [SMB2,(null)] user [SAD]\[username]
2020 Sep 08
2
ACLs, groups and suid-bit?
On Tue, 8 Sep 2020, Rowland penny via samba wrote: > On 08/09/2020 13:27, Harald Hannelius via samba wrote: >> >> Hello, >> >> I have users in Samba AD with uid- and gidnumbers. I also have group >> objects with gidNumbers. >> >> I have a Samba member server (all servers Samba 4.9.5-Debian) that have one >> share and a lot of directories.
2020 Sep 08
4
ACLs, groups and suid-bit?
On Tue, 8 Sep 2020, Rowland penny via samba wrote: > On 08/09/2020 13:55, Harald Hannelius wrote: >> >> On Tue, 8 Sep 2020, Rowland penny via samba wrote: >>> On 08/09/2020 13:27, Harald Hannelius via samba wrote: >>>> >>>> Hello, >>>> >>>> I have users in Samba AD with uid- and gidnumbers. I also have group
2015 Feb 10
1
3.6.6 map untrusted to domain does not work if winbind is running
Hi all, I have a domain member server 3.6.6 running on debian7, authenticating against another debian7 + samba 3.6.6 in DC-mode. Both servers have user-accounts and groups on LDAP and resolve posix users using libnss-ldap. The groupmap is living on LDAP as well. The domain member server serves a share with ACL enabled. I got the upgrade to 3.6.X and idmap-updates working, but the old
2012 Mar 02
2
Write performance in a replicated/distributed setup with KVM?
This has probably been discussed before, but since I'm new on the list I hope You have patience with me. I have a four brick distributed/replicated setup. The computers are multi-core 16GB memory and 2*2.0TB in raid1 SATA-disks locally. The nodes are connected by 1 GB ethernet. All nodes have glusterfs 3.3beta2 installed and they are running debian 6 64bit. The underlying filesystems are
2020 Sep 08
2
ACLs, groups and suid-bit?
Hello, I have users in Samba AD with uid- and gidnumbers. I also have group objects with gidNumbers. I have a Samba member server (all servers Samba 4.9.5-Debian) that have one share and a lot of directories. The directory permissions are set as a specific group as owner, and the group write and suid bit are set. drwxrwsr-x 2 root thegroup 4096 Sep 8 15:25 groupdir This worked fine in
2020 Jun 16
2
Wrong password, Win10 not using SMB3_11?
I have Samba AD-domain with two fileservers and two Samba DS-servers. Most people can authenticate OK, but one user always gets "wrong password". I tried changing this user's password, and was able to connect by using smbclient, and I was also able to map this drive using the user's username and password on my own windows 10 workstation. Also; # wbinfo -a username Enter
2020 Jun 17
2
Adding user to group doesn't propagate?
On Wed, 17 Jun 2020, Rowland penny via samba wrote: > On 17/06/2020 11:54, Harald Hannelius wrote: >> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>> On 17/06/2020 11:39, Harald Hannelius via samba wrote: >> >> Sorry, You lost me here. Has this been discussed recently? I'm in the >> middle of so many projects I haven't had time to sit and
2020 May 15
6
Problems with groups, minimum gidnumber?
I have succesfully migrated our users (~3900) from our Samba 3 DC/OpenLDAP, complete with passwords. I have some 300 + groups that I'm trying to get migrated to our Samba 4 AD. I can create the groups, but it looks from the domain-member's side that groups don't work as I expect them to. - Not all groups seems to be visible by using 'getent group'. It looks like groups
2020 May 14
2
samba-tool and --given-name or --surname format?
How do I add a user with samba-tool that has the givenname "?ke" or surname "?berg"? # samba-tool user create foobar 21asdasd// --given-name="?ke" ERROR(<type 'exceptions.UnicodeDecodeError'>): Failed to add user 'foobar': - 'ascii' codec can't decode byte 0xc3 in position 8: ordinal not in range(128) File
2020 Jun 17
2
Adding user to group doesn't propagate?
Two Samba AD i AD DS mode running Version 4.9.5-Debian. Three member-servers running Samba Version 4.9.5-Debian. I'm adding users to a group, and most of them look ok when I check with 'id username' on the member-servers. Also 'samba-tool group show' and 'user show' looks OK to me, the user has the correct memberOf attribute and the DN is also member of the
2020 Jun 17
2
Adding user to group doesn't propagate?
On Wed, 17 Jun 2020, Rowland penny via samba wrote: > On 17/06/2020 11:39, Harald Hannelius via samba wrote: >> >> >> However, on the member-server 'id username' doesn't show this group. 'id >> username' shows this group for all other users in this group. > > So, it wasn't just me ;-) Sorry, You lost me here. Has this been discussed
2020 Jun 04
0
Is Samba 4.9 and "map untrusted to domain" possible anymore?
On 04/06/2020 13:49, Harald Hannelius via samba wrote: > > > We have a windows domain "AD" and a samba domain "SAD" running Samba > 4.9 in AD-mode. > > We also have an old NT4 domain called "Samba" running Samba 3.6 + > OpenLDAP. > > We have the same users and passwords in all three. The user objects in > the "SAD"-domain
2020 May 15
2
Problems with groups, minimum gidnumber?
On Fri, 15 May 2020, Rowland penny via samba wrote: > On 15/05/2020 16:33, Harald Hannelius wrote: >> If there's a way to copy the sambaNTPassword password-hash from the LDAP >> for the Samba 3 DC with samba-tool I would have loved to find that >> information long ago :) > Why do you need the sambaNTPassword ? So the users would have the same password. I don't
2020 Aug 31
2
Adding user to group doesn't propagate?
On Wed, 17 Jun 2020, Harald Hannelius wrote: > On Wed, 17 Jun 2020, Harald Hannelius via samba wrote: >> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>> On 17/06/2020 11:54, Harald Hannelius wrote: >>>> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>>>> On 17/06/2020 11:39, Harald Hannelius via samba wrote: >>>>
2020 Sep 16
5
Adding user to group doesn't propagate?
On Mon, 31 Aug 2020, Jonathon Reinhart via samba wrote: > On Mon, Aug 31, 2020 at 9:21 AM Harald Hannelius via samba > <samba at lists.samba.org> wrote: >> On Wed, 17 Jun 2020, Harald Hannelius wrote: >>> On Wed, 17 Jun 2020, Harald Hannelius via samba wrote: >>>> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>>>> On 17/06/2020 11:54,