samba - Feb 2021 - login without domain\username

Hi, 

I didn't miss, just thought it wasn't useful as the option didn't
seem to be what i was searching for ;-)

Here is my smb.conf (it's minimalistic for now because just in test right
now)

[global] 
workgroup = IUTV 
realm = AD.IUT-VALENCE.FR 
security = ADS 
idmap config IUTV:backend = ad 
idmap config IUTV:schema_mode = rfc2307 
idmap config IUTV:range = 200-40000 
idmap config IUTV:unix_nss_info = yes 
idmap config * :backend = tdb 
idmap config * :range = 90000-99999 
winbind use default domain = yes 
winbind enum users = yes 
winbind enum groups = yes 
winbind refresh tickets = yes 
dedicated keytab file = /etc/krb5.keytab 
kerberos method = system keytab 
log file = /var/log/samba/log.%m 
max log size = 1000 
logging = file 
panic action = /usr/share/samba/panic-action %d 
[homes] 
comment = Home Directories 
browseable = Yes 
read only = no 
create mask = 0700 
directory mask = 0700 
valid users = %S 
[guest] 
path = /tmp 
read only = no 
guest ok = no 

Cheers 


De: "sambalist" <samba at lists.samba.org> 
?: "sambalist" <samba at lists.samba.org> 
Envoy?: Mardi 2 F?vrier 2021 15:57:28 
Objet: Re: [Samba] login without domain\username 

On 02/02/2021 14:33, ERIC PEYREMORTE wrote: 
> Hi thanks for your answer ! 
> 
> I already have the parameter, but from a windows client or even 
> smbclient, the username gets always prefixed by the machine name. 
> 
> Wireshark capture : 
> 
> 
> And the winbind seems to work only when the "domain component" is
> missing from the username : 
> 
> from man smb.conf : 
> winbind use default domain : 
> "This parameter specifies whether the winbindd(8) daemon should 
> operate on users without domain component in their username." 
> 
> Maybe what i want to do isn't possible ? 
> 
I posted this: 

If that doesn't work, please post your smb.conf 

Just in case you missed it: 

*IF THAT DOESN'T WORK, PLEASE POST YOUR SMB.CONF* 

Rowland 



-- 
To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba

On 02/02/2021 15:25, ERIC PEYREMORTE wrote:
> Hi,
>
> I didn't miss, just thought it wasn't useful as the option
didn't seem
> to be what i was searching for ;-)
>
> Here is my smb.conf (it's minimalistic for now because just in test 
> right now)
>
> [global]
> ?? workgroup = IUTV
> ?? realm = AD.IUT-VALENCE.FR
> ?? security = ADS
> ?? idmap config IUTV:backend = ad
> ?? idmap config IUTV:schema_mode = rfc2307
> ?? idmap config IUTV:range = 200-40000

OK, have you added any uidNumber & gidNumber attributes to AD ?

If you have, are they inside the 200-40000 range ?

Also, does the Domain Users group have a gidNumber inside that range ?

Why 200-40000 ? Do you not have any local users ?
>
> [guest]
> ??????? path = /tmp
> ??????? read only = no
> ??????? guest ok = no

Interesting name for a share that doesn't allow guest access.

Rowland