samba - Jun 2016 - Samba4 Domain Member Server "Getent show diferents UID"

On 14/06/16 18:46, Juan Ignacio wrote:
> Yes, im run ´´net cache flush´ on ADDC and MEMBER SERVER.
>
> Im using Win10, And Win7
>
>
>
OK, if you are running RSAT on a windows 10 machine, can I suggest you 
use a windows 7 machine instead, it is my understanding that win10 no 
longer has the Unix attributes tab.

If you use ADUC on a win7 machine, you can install IDMU, this will get 
you the Unix attributes tabs, when you add a UID to a windows user, it 
will also add these attributes:

unixUserPassword
uid
msSFU30Name
msSFU30NisDomain
uidNumber
unixHomeDirectory
loginShell

Domain Users also needs to have a gidNumber attribute

If everything is setup correctly, you should get the same UID for a user 
on a DC or domain member.

Is /etc/nsswitch.conf set up correctly ?

Rowland

Yes, i use attributes on win 10, and in win7 i can see the tabs.

Yes nsswitch.conf is correctly i think.


# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed,
try:
# `info libc "Name Service Switch"' for information about this
file.

passwd:         compat winbind
group:          compat winbind
shadow:         compat
gshadow:        files

hosts:          files mdns4_minimal [NOTFOUND=return] dns
networks:       files

protocols:      db files
services:       db files
ethers:         db files
rpc:            db files

netgroup:       nis




2016-06-14 15:00 GMT-03:00 Rowland penny <rpenny at samba.org>:
> On 14/06/16 18:46, Juan Ignacio wrote:
>
>> Yes, im run ´´net cache flush´ on ADDC and MEMBER SERVER.
>>
>> Im using Win10, And Win7
>>
>>
>>
>>
> OK, if you are running RSAT on a windows 10 machine, can I suggest you use
> a windows 7 machine instead, it is my understanding that win10 no longer
> has the Unix attributes tab.
>
> If you use ADUC on a win7 machine, you can install IDMU, this will get you
> the Unix attributes tabs, when you add a UID to a windows user, it will
> also add these attributes:
>
> unixUserPassword
> uid
> msSFU30Name
> msSFU30NisDomain
> uidNumber
> unixHomeDirectory
> loginShell
>
> Domain Users also needs to have a gidNumber attribute
>
> If everything is setup correctly, you should get the same UID for a user
> on a DC or domain member.
>
> Is /etc/nsswitch.conf set up correctly ?
>
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

Are there any test I can do to see if need to configure something in the
member server?

2016-06-14 15:00 GMT-03:00 Rowland penny <rpenny at samba.org>:
> On 14/06/16 18:46, Juan Ignacio wrote:
>
>> Yes, im run ´´net cache flush´ on ADDC and MEMBER SERVER.
>>
>> Im using Win10, And Win7
>>
>>
>>
>>
> OK, if you are running RSAT on a windows 10 machine, can I suggest you use
> a windows 7 machine instead, it is my understanding that win10 no longer
> has the Unix attributes tab.
>
> If you use ADUC on a win7 machine, you can install IDMU, this will get you
> the Unix attributes tabs, when you add a UID to a windows user, it will
> also add these attributes:
>
> unixUserPassword
> uid
> msSFU30Name
> msSFU30NisDomain
> uidNumber
> unixHomeDirectory
> loginShell
>
> Domain Users also needs to have a gidNumber attribute
>
> If everything is setup correctly, you should get the same UID for a user
> on a DC or domain member.
>
> Is /etc/nsswitch.conf set up correctly ?
>
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On 15/06/16 14:49, Juan Ignacio wrote:
> Are there any test I can do to see if need to configure something in 
> the member server?
>
If you have set up a domain member as show here:

https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member

If you have given your users a uidNumber attribute and 'Domain Users' a 
gidNumber attribute, 'getent passwd username' should display info for 
each user. If you do not info for any users, check that libnss-winbind 
is setup correctly.

Rowland