search for: 3000027

...land > Sorry, I should have said - I ran louis' script and set the acl's according to the output. The script also produced a file called default-rights-sysvol-acl which contains: # file: /var/lib/samba/sysvol # owner: root # group: root user::rwx user:root:rwx user:3000000:rwx user:3000027:r-x user:3000023:rwx user:3000009:r-x group::rwx group:3000000:rwx group:3000027:r-x group:3000023:rwx group:3000009:r-x mask::rwx other::--- default:user::rwx default:user:root:rwx default:user:3000000:rwx default:user:3000027:r-x default:user:3000023:rwx default:user:3000009:r-x default:group::--...

...I ran louis' script and set the acl's according to the output. The script also produced a file called > default-rights-sysvol-acl which contains: > # file: /var/lib/samba/sysvol > # owner: root > # group: root > user::rwx > user:root:rwx > user:3000000:rwx > user:3000027:r-x > user:3000023:rwx > user:3000009:r-x > group::rwx > group:3000000:rwx > group:3000027:r-x > group:3000023:rwx > group:3000009:r-x > mask::rwx > other::--- > default:user::rwx > default:user:root:rwx > default:user:3000000:rwx > default:user:3000027:r-x &g...

...se default domain = > > Yes', it does nothing on a DC. > > I would also add 'idmap_ldb:use rfc2307 = yes' > ok, i did it > > When you run 'getent passwd username' does it produce output ? > [root at dc1 etc]# getent passwd massaro > LXCERRUTI\massaro:*:3000027:513::/home/LXCERRUTI/massaro:/bin/false > > > If so, does it produce the output you expect ? > yes Is 'massaro' one of your existing users carried over by the classicupgrade ? If it is, then you are not getting the expected output. The number '3000027' comes from '...

Hello! I have 2 Samba 4 server (4.3.3) as VC and other Samba 4 (4.3) as Fileserver, until now all ok, but I'm one doubts, how to validate that in both servers the domain IDs of the users of this identical, a simple way to do this validation? I wanted to make sure it is a DC die fileserver has to go 100%. thank you

...tc/nsswitch.conf that use winbind, <getent group> does not display the group members. to reproduce that : (my domain is test3.ch) samba-tool user add u1 samba-tool group add g1 samba-tool group addmembers g1 u1 <id u1> returns : uid=3000026(TEST3\u1) gid=100(users) groups=100(users),3000027(TEST3\g1) but <getent group> does not return group/user membership : TEST3\g1:*:3000027: any advices ? Philippe Simonet

On Mon, 5 Nov 2018 11:11:59 +0100 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > > > Il 05/11/2018 10:54, Rowland Penny via samba ha scritto: > > OK, you classicupgraded 3.6.x to 4.9.1, by this I take it you mean > > you have upgraded a PDC to an AD DC, is this correct ? > yes, is correct > > > > What OS are you using ? > centos 7.5

I have a samba DC based on Debian Buster running samba 4.12.2 from Louis' repo. A second DC on Raspbian buster is running samba 4.12.0. I have sysvol replication working using rsync/unison as per the WiKi. I wasn't having any issues until I tried to edit a GPO and found that all the acl settings had disappeared. This may have happened when I upgraded the DCs from 4.11.x to 4.12.x

...ll.V2 drwxrwx--- 16 3000025 3000008 25 Jul 24 17:24 /var/samba4/BROCKLEY/PROFILES/lyneak_hll.V2 This is expected as the uid/gid mapping from one installation to another is not expected to match. However, when I log on to the new domain from a Win10 workstation this is created: d---------+ 18 3000027 3000008 27 Aug 12 15:29 /var/samba4/BROCKLEY/PROFILES/lyneak_hll.V6 Which leads to a few questions: 1. What configuration is required on the new DC to show uid 3000027 as BROCKLEY\lyneak_hll or has this changed in later versions of Samba? 2. GID 3000008 appears to be BROCKLEY-2016\domain admi...

...l seems to be ok now. MANY thanks !! but I made some 'getent' tests, and found : >samba-tool user add u2 >samba-tool group add g2 >samba-tool group addmembers g2 u2 # is ok : >samba-tool group listmembers g2 u2 # is ok uid=3000026(TEST\u2) gid=100(users) groups=100(users),3000027(TEST\g2) # is NOT ok : does not return group membership >getent group g2 TEST\g2:*:3000027: is that normal with samba4 ? thanks and regards Philippe > -----Original Message----- > From: Andrew Bartlett [mailto:abartlet at samba.org] > Sent: Thursday, July 11, 2013 12:13 AM >...

...unix tab in rsat on the master dc (as I did) > . Both DCs have the same ids. > On your memberservers this will be mapped by winbind(d) > EX: > > [root at s4master ~]# id tester > uid=90000(TPLK\tester) gid=100(users) > Gruppen=100(users),3000051(TPLK\TerminalServer > User),3000027(TPLK\Dienstplan),3000028(TPLK\Direktionv),3000048(TPLK\Schre > iben),3000045(TPLK\pflege),3000038(TPLK\orbis),3000023(TPLK\agfa),3000033( > TPLK\HS3) > > [root at s4slave ~]# id tester > uid=90000(TPLK\tester) gid=100(users) > Gruppen=100(users),3000051(TPLK\TerminalServer > U...

...ed: 20240615165133.0Z uSNChanged: 4608 distinguishedName: CN=Domain Users,CN=Users,DC=office,DC=company,DC=com $ getent group | grep -i users users:x:100: BUILTIN\users:x:3000009: BUILTIN\remote desktop users:x:3000023: BUILTIN\performance monitor users:x:3000026: BUILTIN\performance log users:x:3000027: BUILTIN\distributed com users:x:3000030: OFFICE\domain users:x:100: OFFICE\protected users:x:3000043: $ getent group OFFICE\administrator:*:0:100::/home/OFFICE/administrator:/bin/bash OFFICE\guest:*:3000011:3000012::/home/OFFICE/guest:/bin/bash OFFICE\krbtgt:*:3000015:100::/home/OFFICE/krbtgt:/bi...

...ib/samba/private/idmap.ldb | grep xidNumber xidNumber: 3000028 xidNumber: 3000013 xidNumber: 3000033 xidNumber: 3000003 xidNumber: 3000032 xidNumber: 3000023 xidNumber: 3000019 xidNumber: 3000010 xidNumber: 65534 xidNumber: 3000031 xidNumber: 3000022 xidNumber: 3000026 xidNumber: 3000017 xidNumber: 3000027 xidNumber: 3000016 xidNumber: 3000030 xidNumber: 3000021 xidNumber: 3000004 xidNumber: 100 xidNumber: 3000008 xidNumber: 3000011 xidNumber: 0 xidNumber: 3000009 xidNumber: 3000025 xidNumber: 3000000 xidNumber: 3000001 xidNumber: 3000002 xidNumber: 3000014 xidNumber: 3000029 xidNumber: 3000020 xidNu...

...the same ids. > >> On your memberservers this will be mapped by winbind(d) > >> EX: > >> > >> [root at s4master ~]# id tester > >> uid=90000(TPLK\tester) gid=100(users) > >> Gruppen=100(users),3000051(TPLK\TerminalServer > >> > User),3000027(TPLK\Dienstplan),3000028(TPLK\Direktionv),3000048(TPLK\Schre > >> > iben),3000045(TPLK\pflege),3000038(TPLK\orbis),3000023(TPLK\agfa),3000033( > >> TPLK\HS3) > >> > >> [root at s4slave ~]# id tester > >> uid=90000(TPLK\tester) gid=100(users) > >...

...mapped by winbind(d) > >>>> EX: > >>>> > >>>> [root at s4master ~]# id tester > >>>> uid=90000(TPLK\tester) gid=100(users) > >>>> Gruppen=100(users),3000051(TPLK\TerminalServer > >>>> > >> > User),3000027(TPLK\Dienstplan),3000028(TPLK\Direktionv),3000048(TPLK\Schre > >> > iben),3000045(TPLK\pflege),3000038(TPLK\orbis),3000023(TPLK\agfa),3000033( > >>>> TPLK\HS3) > >>>> > >>>> [root at s4slave ~]# id tester > >>>> uid=90000(TPLK\...

...by winbind(d) >>>>>> EX: >>>>>> >>>>>> [root at s4master ~]# id tester >>>>>> uid=90000(TPLK\tester) gid=100(users) >>>>>> Gruppen=100(users),3000051(TPLK\TerminalServer >>>>>> >> User),3000027(TPLK\Dienstplan),3000028(TPLK\Direktionv),3000048(TPLK\Schre >> iben),3000045(TPLK\pflege),3000038(TPLK\orbis),3000023(TPLK\agfa),3000033( >>>>>> TPLK\HS3) >>>>>> >>>>>> [root at s4slave ~]# id tester >>>>>> uid=90000(TPL...

...oot at dc1 var]# getent passwd magfilati LXCERRUTI\magfilati:*:597:513::/home/LXCERRUTI/magfilati:/bin/false [root at dc1 var]# getent passwd giuseppe LXCERRUTI\giuseppe:*:683:513::/home/LXCERRUTI/giuseppe:/bin/false > If it is, then you are not getting the expected output. > The number '3000027' comes from 'idmap.ldb' and not from AD. ok > If it isn't, try again with a user carried over by the classicupgrade. > > It also shows two potential problems that come from using a DC as a > fileserver, any Unix home dirs & login shells stored in AD are not > used...

...magfilati > LXCERRUTI\magfilati:*:597:513::/home/LXCERRUTI/magfilati:/bin/false > [root at dc1 var]# getent passwd giuseppe > LXCERRUTI\giuseppe:*:683:513::/home/LXCERRUTI/giuseppe:/bin/false > > > If it is, then you are not getting the expected output. > > The number '3000027' comes from 'idmap.ldb' and not from AD. > ok > > If it isn't, try again with a user carried over by the > > classicupgrade. > > > > It also shows two potential problems that come from using a DC as a > > fileserver, any Unix home dirs & login sh...

...ccess group:x:3000020: BUILTIN\terminal server license servers:x:3000021: BUILTIN\distributed com users:x:3000022: BUILTIN\iis_iusrs:x:3000023: BUILTIN\cryptographic operators:x:3000024: BUILTIN\event log readers:x:3000025: BUILTIN\certificate service dcom access:x:3000026: OFFICE\cert publishers:x:3000027: OFFICE\ras and ias servers:x:3000028: OFFICE\allowed rodc password replication group:x:3000029: OFFICE\denied rodc password replication group:x:3000030: OFFICE\dnsadmins:x:3000031: OFFICE\enterprise read-only domain controllers:x:3000032: OFFICE\domain admins:x:3000033: OFFICE\domain users:x:100:...

...hn:*:3000020:10000:John Doe:/home/MYDOM/john:/bin/false MYDOM\george:*:3000022:10000:George Miller:/home/MYDOM/george:/bin/false MYDOM\richard:*:3000023:10000:Richard Smitty:/home/MYDOM/richard:/bin/false MYDOM\testuser1:*:3000030:10000:Test User 1:/home/MYDOM/testuser1:/bin/false MYDOM\testuser3:*:3000027:10000:Test User 3:/home/MYDOM/testuser3:/bin/false MYDOM\testuser2:*:3000032:10000:Test User 2:/home/MYDOM/testuser2:/bin/false root at DC1:~$ wbinfo -u Administrator Guest krbtgt john george richard testuser1 testuser3 testuser2 root at DC1:~$ wbinfo -g Enterprise Read-Only Domain Controllers D...

...BUILTIN\Windows Authorization Access Group 4 3000018 S-1-5-32-554 BUILTIN\Pre-Windows 2000 Compatible Access 4 3000019 S-1-5-21-729452656-3029571206-2736118167-1105 SAMDOM\SASHA$ 1 3000027 S-1-5-21-729452656-3029571206-2736118167-1114 SAMDOM\NANOOK$ 1 3000035 S-1-5-21-729452656-3029571206-2736118167-1115 SAMDOM\Roaming Profile and Folder Redirection Users 2 3000036 S-1-5-21-729452656-3029571206-2736118167-1116 SAMDOM\nas$ 1...