Hi Howland, That is precisely what I cannot do. I do this by windows using Rsat, and when I select the NIS domain to be able to assign the gid or uid it does not appear, so I can't use samba just as a file server. Do you know if there is a way to reset or show NIS Domain? Is there any way to assign uidNumber & gidNumber attributes via console? Best regards, Gabriel Franca ----- Mensagem original ----- De: "Rowland penny via samba" <samba at lists.samba.org> Para: samba at lists.samba.org Enviadas: Quinta-feira, 19 de Dezembro de 2019 6:17:04 Assunto: Re: [Samba] NIS Domain Does Not Appear On 18/12/2019 17:54, Gabriel Franca via samba wrote:> > Good afternoon friends, > > > I made a FSMO transfer from a samba 4.0 to a 4.10 and then I demoted the server 4.0 then added another server with samba 4.10 and so I got two DCs. > I tried to put a centos 8 with samba 4.9 as file server. > Now comes the problem: > When I go to user / group properties and go to the "Unix Attributes" tab and select NIS Domain it shows nothing but <none>. > I can mitigate and make NIS Domain appear?I have been thinking about this and all I can think of is, have you given your users and groups uidNumber & gidNumber attributes ? They are not added automatically. Rowland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Maybe the AD was not provisioned with rfc attributes? the NIS domain ist saved at: CN=NISDomain,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=AD,DC=EXAMPLE,DC=COM At least ours is there. Regards Am 19.12.19 um 14:35 schrieb Gabriel Franca via samba:> Hi Howland, > > That is precisely what I cannot do. > > I do this by windows using Rsat, and when I select the NIS domain to be able to assign the gid or uid it does not appear, so I can't use samba just as a file server. > Do you know if there is a way to reset or show NIS Domain? > > Is there any way to assign uidNumber & gidNumber attributes via console? > > Best regards, > Gabriel Franca > > ----- Mensagem original ----- > De: "Rowland penny via samba" <samba at lists.samba.org> > Para: samba at lists.samba.org > Enviadas: Quinta-feira, 19 de Dezembro de 2019 6:17:04 > Assunto: Re: [Samba] NIS Domain Does Not Appear > > On 18/12/2019 17:54, Gabriel Franca via samba wrote: >> >> Good afternoon friends, >> >> >> I made a FSMO transfer from a samba 4.0 to a 4.10 and then I demoted the server 4.0 then added another server with samba 4.10 and so I got two DCs. >> I tried to put a centos 8 with samba 4.9 as file server. >> Now comes the problem: >> When I go to user / group properties and go to the "Unix Attributes" tab and select NIS Domain it shows nothing but <none>. >> I can mitigate and make NIS Domain appear? > > I have been thinking about this and all I can think of is, have you > given your users and groups uidNumber & gidNumber attributes ? They are > not added automatically. > > Rowland > > >-- Dr. Christian Naumer Unit Head Bioprocess Development B.R.A.I.N Aktiengesellschaft Darmstaedter Str. 34-36, D-64673 Zwingenberg e-mail cn at brain-biotech.com, homepage www.brain-biotech.com fon +49-6251-9331-30 / fax +49-6251-9331-11 Sitz der Gesellschaft: Zwingenberg/Bergstrasse Registergericht AG Darmstadt, HRB 24758 Vorstand: Dr. Juergen Eck (Vorsitzender), Manfred Bender, Ludger Roedder Aufsichtsratsvorsitzender: Dr. Georg Kellinghusen
On 19/12/2019 13:35, Gabriel Franca wrote:> Hi Howland, > > That is precisely what I cannot do. > > I do this by windows using Rsat, and when I select the NIS domain to be able to assign the gid or uid it does not appear, so I can't use samba just as a file server. > Do you know if there is a way to reset or show NIS Domain? > > Is there any way to assign uidNumber & gidNumber attributes via console? >Yes, numerous ;-) There is Jonathon Reinhart's ADAM? (seemingly renamed adman) : https://gitlab.com/JonathonReinhart/adman Unfortunately there seems to be a problem with his gitlab page at the moment. There is LAM: https://www.ldap-account-manager.org/lamcms/ You could script around ldb-tools or ldap-utils. Or wait for Samba 4.12.0 when samba-tool will finally be able to add rfc2307 attributes to existing users & groups. There are others as well. Rowland
> Or wait for Samba 4.12.0 when samba-tool will finally be able to add > rfc2307 attributes to existing users & groups.Finaly. Thats great ! But cant you backport it to 4.11 ? ;-) Greetz, Louis
On 19/12/2019 13:51, Christian Naumer via samba wrote:> Maybe the AD was not provisioned with rfc attributes? the NIS domain ist > saved at: > > CN=NISDomain,CN=ypservers,CN=ypServ30,CN=RpcServices,CN=System,DC=AD,DC=EXAMPLE,DC=COM > > At least ours is there. >Of course, this is a possible reason for the problem, why didn't I think of this ? Find ypServ30.ldif (on Debian it should be in /usr/share/samba/setup) Modify it to match your setup and try to add it with ldbmodify, it will either let you add it, or it wont. Rowland
Hi Howland, Thanks for the help, I will redo the structure. It is not complex and not large. Best regards, Gabriel Franca ----- Mensagem original ----- De: "Rowland penny via samba" <samba at lists.samba.org> Para: "sambalist" <samba at lists.samba.org> Enviadas: Quinta-feira, 19 de Dezembro de 2019 10:53:43 Assunto: Re: [Samba] NIS Domain Does Not Appear On 19/12/2019 13:35, Gabriel Franca wrote:> Hi Howland, > > That is precisely what I cannot do. > > I do this by windows using Rsat, and when I select the NIS domain to be able to assign the gid or uid it does not appear, so I can't use samba just as a file server. > Do you know if there is a way to reset or show NIS Domain? > > Is there any way to assign uidNumber & gidNumber attributes via console? >Yes, numerous ;-) There is Jonathon Reinhart's ADAM? (seemingly renamed adman) : https://gitlab.com/JonathonReinhart/adman Unfortunately there seems to be a problem with his gitlab page at the moment. There is LAM: https://www.ldap-account-manager.org/lamcms/ You could script around ldb-tools or ldap-utils. Or wait for Samba 4.12.0 when samba-tool will finally be able to add rfc2307 attributes to existing users & groups. There are others as well. Rowland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba