search for: 11104

...ct distribution terms for each program are described in the individual files in /usr/share/doc/*/copyright. Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent permitted by applicable law. If I run 'id' I get this: rowland at testdm12:~$ id rowland at samdom.example.com uid=11104(rowland) gid=10513(domain users) groups=10513(domain users),11104(rowland),10512(domain admins),10572(denied rodc password replication group),12605(testgroup),3001(BUILTIN\users),3000(BUILTIN\administrators) and running 'ls' against my home directory gets this: rowland at testdm12:~$ l...

...2 rowland domain users 4096 Dec 4 14:33 . drwxr-xr-x+ 42 rowland domain users 4096 Dec 4 14:30 .. -rw-r-----+ 1 rowland domain users 16 Dec 4 14:33 test.txt It quite correctly belongs to me, but what about the numeric ID ? rowland at devstation:~/useridtest$ ls -lan total 20 drwxrwx---+ 2 11104 10513 4096 Dec 4 14:33 . drwxr-xr-x+ 42 11104 10513 4096 Dec 4 14:30 .. -rw-r-----+ 1 11104 10513 16 Dec 4 14:33 test.txt '3000020' has become '11104' and '100' has become '10513', magic isn't it ;-) > > I'm still going to study the nss_winbind...

Hi again Rowland and Luis, First, thank you very much for jumping to my rescue and explaining what I got wrong about my Samba usage. This brought another question: Could I perhaps use the Samba 'rid' backend so that Windows users get unique UIDs on Linux boxes - different from the Linux UIDs - and then make use of usermap to map them to the proper local Linux user? Would that work?

On 12/1/24 09:42, Rowland Penny via samba wrote: > On Sun, 1 Dec 2024 09:15:27 -0500 > "John R. Graham via samba" <samba at lists.samba.org> wrote: > >> I also like the idea of the ad back end and nss_winbind because it's >> a better "single source of truth"--and I don't like the templated >> /etc/passwd fields. Was that your goal with

...you see ? AD, whilst it has all the rfc2307 attributes, it only really uses a very small portion of them: uidNumber gidNumber gecos uid loginShell unixHomeDirectory If I run 'getent passwd rowland' on a Unix domain member using the 'rid' idmap backend', I get this: rowland:*:11104:10513:Rowland Penny:/home/rowland:/bin/bash Which would seem to be: username:??:UID:GID:?????:Home Directory:login shell The '??' is I believe meant for the 'shadow' field. The '?????' is the gecos field, but 'rowland' doesn't have a 'gecos' attribute,...

...in: > > > > rowland at devstation:~$ grep 'rowland' /etc/passwd > > rowland at devstation:~$ > > > > I am not in /etc/passwd, I am not a 'local user', so why does this > > work: > > > > rowland at devstation:~$ id rowland > > uid=11104(rowland) gid=10513(domain users) groups=10513(domain > > users),102(netdev),1001(unixtest),11104(rowland),10512(domain > > admins),12605(testgroup),10571(allowed rodc password replication > > group),10572(denied rodc password replication > > group),2001(BUILTIN\users),2000(B...

...work). > Let me give you an example on my domain: > > rowland at devstation:~$ grep 'rowland' /etc/passwd > rowland at devstation:~$ > > I am not in /etc/passwd, I am not a 'local user', so why does this work: > > rowland at devstation:~$ id rowland > uid=11104(rowland) gid=10513(domain users) groups=10513(domain users),102(netdev),1001(unixtest),11104(rowland),10512(domain admins),12605(testgroup),10571(allowed rodc password replication group),10572(denied rodc password replication group),2001(BUILTIN\users),2000(BUILTIN\administrators) > > It work...

...sers when they login to the Linux workstations. Let me give you an example on my domain: rowland at devstation:~$ grep 'rowland' /etc/passwd rowland at devstation:~$ I am not in /etc/passwd, I am not a 'local user', so why does this work: rowland at devstation:~$ id rowland uid=11104(rowland) gid=10513(domain users) groups=10513(domain users),102(netdev),1001(unixtest),11104(rowland),10512(domain admins),12605(testgroup),10571(allowed rodc password replication group),10572(denied rodc password replication group),2001(BUILTIN\users),2000(BUILTIN\administrators) It works because...

...ry, but allowing for bug 14618, it works for myself. > > > > https://bugzilla.samba.org/show_bug.cgi?id=14618 > > > > On a Unix domain member using the 'rid' backend, I get this: > > > > adminuser at testdm12:~$ getent passwd rowland > > rowland::11104:10513:Rowland Penny:/home/rowland:/bin/bash > > > > The user 'rowland' can logon, but if the user logs out and the network > > is disconnected, the user cannot logon until: > > > > A) the network is reconnected. > > B) 'lock directory = /var/cache/s...

...devstation:~$ grep 'rowland' /etc/passwd > > > rowland at devstation:~$ > > > > > > I am not in /etc/passwd, I am not a 'local user', so why does this > > > work: > > > > > > rowland at devstation:~$ id rowland > > > uid=11104(rowland) gid=10513(domain users) groups=10513(domain > > > users),102(netdev),1001(unixtest),11104(rowland),10512(domain > > > admins),12605(testgroup),10571(allowed rodc password replication > > > group),10572(denied rodc password replication > > > group),2001(B...

Hi, with sssd i can do: $ ssh user at domain.tld@HOST1 $ id user at domain.tld $ ls -al /home/domain.tld/user drwx------ 5 user at domain.tld domain users at domain.tld 103 12. Jun 14:14 . $ grep AllowGroups /etc/ssh/sshd_config AllowGroups lokale_gruppe samba_gruppe at domain.tld When switching to winbind only $ id user at domain.tld is working any other command is using user\domain $ ls -al

...create the required users in AD and use those, to prove it, look at this: rowland at devstation:~$ grep 'rowland' /etc/passwd rowland at devstation:~$ As you can see, my username isn't in /etc/passwd So, how does this work ? rowland at devstation:~$ getent passwd rowland rowland:*:11104:10513:Rowland Penny:/home/rowland:/bin/bash Yes, my username etc comes from AD. I am fairly sure that I have said this, forget most of what you know about NT4-style domains, you need to put EVERYTHING into AD. You only need a few local Unix users (perhaps only one) just in case something locall...

...t; > https://bugzilla.samba.org/show_bug.cgi?id=15405 > Sorry, but allowing for bug 14618, it works for myself. https://bugzilla.samba.org/show_bug.cgi?id=14618 On a Unix domain member using the 'rid' backend, I get this: adminuser at testdm12:~$ getent passwd rowland rowland:*:11104:10513:Rowland Penny:/home/rowland:/bin/bash The user 'rowland' can logon, but if the user logs out and the network is disconnected, the user cannot logon until: A) the network is reconnected. B) 'lock directory = /var/cache/samba' is added to smb.conf and Samba is restarted. C) th...

...g.cgi?id=15405 > > > Sorry, but allowing for bug 14618, it works for myself. > > https://bugzilla.samba.org/show_bug.cgi?id=14618 > > On a Unix domain member using the 'rid' backend, I get this: > > adminuser at testdm12:~$ getent passwd rowland > rowland::11104:10513:Rowland Penny:/home/rowland:/bin/bash > > The user 'rowland' can logon, but if the user logs out and the network > is disconnected, the user cannot logon until: > > A) the network is reconnected. > B) 'lock directory = /var/cache/samba' is added to smb.conf...

> On Thu, May 28, 2009 at 02:00:15PM -0500, research at businesstz.com wrote: >> Hello >> >> May i please know if asterisk is now supporting sip call encryption. It >> has been a requirement from one of my client to ensure that all >> conversation is well secured from any potential sniffers or inside >> hackers >> >> I have reviewed and shall

Hi everyone, I've been running into a small issue in the past few days after figuring out (or so I thought) how to properly map UIDs from AD to Linux clients so that they are identical across environments and work on both Linux and Windows boxes. Maybe I am doing something wrong. I am wondering if someone could sched some light here. My config is this: - Two small VMs running Samba

...ave Ubuntu 22.04 with Samba 4.15.13 running in a VM and it just works for myself. If I disconnect the network and try to ping a DC, I get: ping: rpidc1: Temporary failure in name resolution So the DC cannot be found But, if I run 'getent passwd rowland' I instantly get this: rowland:*:11104:10513:Rowland Penny:/home/rowland:/bin/bash I can log out from 'rowland' and then log in again, though I do appear to get a message from lightdm, but it goes past that fast it that I cannot read it. > > took 60 seconds to run, and return nothing. So login does not work, because &...

...68 Robot Wars: Arena of Destruction crashes while quitting (causing resolution to stay 640 x 480) 10322 Eve-online (video memory misaddressed?) 10700 Dragon Naturally Speaking 9 needs gdiplus.GdipDrawArcI, gdiplus.GdipCreatePen2, ... 11011 Call of Duty 1.0 doesn't run after install. 11104 Dance Praise 2: Does not respond to input 12415 Can not leave fullscreen Warcraft 3x (Regression) 12963 Moto Racer 2 works with wine 0.9.60 and crashes with wine 0.9.61 13271 The demo of the punisher fails to install 13740 winebrowser gets wrong URL, problem with unicode -------------...

Hello, I set up a Debian Bookworm Domain Member to test integration with a Samba AD. I can successfully shell into the Domain Member via SSH using AD user credentials but cannot login to the system locally via the GUI using AD user credentials only local user credentials. I've run across some online info suggesting using SSSD, but somehow I think pam/winbind should be able to handle this,

...n AD, then normally the local user is used first and the AD user is ignored. Let me show you an example of winbind mapping an AD user to a Unix user: rowland at devstation:~$ cat /etc/passwd | grep 'rowland' rowland at devstation:~$ rowland at devstation:~$ getent passwd rowland rowland:*:11104:10513:Rowland Penny:/home/rowland:/bin/bash I am NOT in /etc/passwd, but the Unix OS shows that I am a Unix user and I can login via the GUI, lightdm in this case. You just need to set things up correctly and it will work, showing us what you have now will allow us to point you in the right direc...