Hi, I migrated my Samba 4 PDC to a AD. Everything works well. I've switched from OpenLDAP to Winbindd after the migration. No I've this problem: Linux (for example via "ll") shows the Name of Domain in front of user/group. root at server:/media/intranet# ll insgesamt 28K drwxrwx---+ 4 root root 4,0K Aug 10 09:05 ./ drwxr-xr-x 22 root root 4,0K Aug 9 14:03 ../ drwxrwx---+ 19 COMPANY\fileadmin COMPANY\mitarbeiter 4,0K Jul 27 12:03 01_Test/ and if I just use getfacl I've "134" in front (cause of the backslash?) root at server:/media/intranet# getfacl 01_Test/ # file: 01_Test/ # owner: COMPANY\134fileadmin # group: COMPANY\134mitarbeiter user::rwx group::--- group:BUILTIN\134administrators:rwx group:COMPANY\134mitarbeiter:rwx mask::rwx other::--- Is there a way to unshow these Domainnames? My configurations: smb.conf: [global] netbios name = PDC realm = COMPANY.COM workgroup = COMPANY server role = active directory domain controller idmap_ldb:use rfc2307 = yes template shell = /bin/bash template homedir= /home/%U dns forwarder = 8.8.8.8 min protocol = SMB2 winbind enum users = yes winbind enum groups = yes /etc/nsswitch.conf passwd: compat winbind group: compat winbind shadow: compat hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files netgroup: nis thanks for help.
On Fri, 10 Aug 2018 10:31:04 +0200 basti mueller via samba <samba at lists.samba.org> wrote:> Hi, > > I migrated my Samba 4 PDC to a AD. Everything works well. I've > switched from OpenLDAP to Winbindd after the migration. > > No I've this problem: > Linux (for example via "ll") shows the Name of Domain in front of > user/group. root at server:/media/intranet# ll > insgesamt 28K > drwxrwx---+ 4 root root 4,0K Aug 10 > 09:05 ./ drwxr-xr-x 22 root root > 4,0K Aug 9 14:03 ../ drwxrwx---+ 19 COMPANY\fileadmin > COMPANY\mitarbeiter 4,0K Jul 27 12:03 01_Test/ > > and if I just use getfacl I've "134" in front (cause of the > backslash?) root at server:/media/intranet# getfacl 01_Test/ > # file: 01_Test/ > # owner: COMPANY\134fileadmin > # group: COMPANY\134mitarbeiter > user::rwx > group::--- > group:BUILTIN\134administrators:rwx > group:COMPANY\134mitarbeiter:rwx > mask::rwx > other::--- > > Is there a way to unshow these Domainnames? My configurations:Not on a DC, but you can add 'winbind use default domain = yes' to the smb.conf on a Unix domain member, but THIS DOES NOT WORK ON A DC! If you do create a Unix domain member and add that line, only add it if you have only one domain. Rowland