search for: addunixattrs

...2 things, 1) "in my opionin" a missing part in samba(-tool) 2) The missing part in samba(-tool) Lets hope this will enter samba in 4.13 then. If you use AD-backend the order is most important when you setup shares and set rights. # This is a must to set as first. samba-tool group addunixattrs ?Domain Users? 10001 # These are optional, but this is how i use it. (WARNING !!! my setup is not exaclty like the WIKI, both work !! ) samba-tool group addunixattrs ?Domain Admins? 10000 samba-tool group addunixattrs ?Domain Guests? 10002 username map = /etc/samba/user.map In here you put :...

On 6/19/2020 10:00 AM, Rowland penny via samba wrote: > > The easiest way is to upgrade to 4.12.x and then use '_*samba-tool > group addunixattrs*_', otherwise you could use ldbedit or create an > ldif and use ldbmodify or ldapmodify. Another option would be to use > something like LAM. > > Rowland Sorry, but, there is what you told me to do in your first email reply. AND it does not matter to me, who did what. I have al...

I am testing my new member server and have found the following. Found on the Sambawiki "Samba Member Server Troubleshooting" page: root at dtdc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb cn=Domain\ Users | grep 'gidNumber' root at dtdc01:~# My question is what is the best manner to add this uidNumber? Is there general instructions somewhere (that I have missed) for use

...-tool user' has a similar option to the group > one. If you haven't added any users, see 'samba-tool user create > --help' for more info. > > Rowland > No, I have not added any groups as yet but, I did add four users via RSAT. Now: root at dc01:~# samba-tool group addunixattrs "Domain Users" 10000 Usage: samba-tool group <subcommand> Group management. Options: ? -h, --help? show this help message and exit Available subcommands: ? add??????????? - Creates a new AD group. ? addmembers???? - Add members to an AD group. ? delete???????? - Deletes an AD gr...

On 19/06/2020 19:31, Robert E. Wooden via samba wrote: > On 6/19/2020 10:00 AM, Rowland penny via samba wrote: >> >> The easiest way is to upgrade to 4.12.x and then use '_*samba-tool >> group addunixattrs*_', otherwise you could use ldbedit or create an >> ldif and use ldbmodify or ldapmodify. Another option would be to use >> something like LAM. >> >> Rowland > > Sorry, but, there is what you told me to do in your first email reply. > > AND it does not matt...

Hi: I want to add rfc2307 attribute to machine account. I saw I can do it via "samba-tool computer". but I want to try if there is a simpler method, so I issue the command: ./samba-tool user addunixattrs 'machine$' 9999 and result: You are setting a Unix/RFC2307 UID & GID. You may want to set 'idmap_ldb:use rfc2307 = Yes' in smb.conf to use the attributes for XID/SID-mapping. ERROR: Failed to modify user 'machine$': (21, "objectclass_attrs: attribute 'gidnumb...

...>> one. If you haven't added any users, see 'samba-tool user create >> --help' for more info. >> >> Rowland >> > No, I have not added any groups as yet but, I did add four users via > RSAT. > > Now: > > root at dc01:~# samba-tool group addunixattrs "Domain Users" 10000 > Usage: samba-tool group <subcommand> > Group management. > Options: > ? -h, --help? show this help message and exit > Available subcommands: > ? add??????????? - Creates a new AD group. > ? addmembers???? - Add members to an AD group. >...

...uidNumber attributes are not added automatically, you must add them > manually, same goes for gidNumber attributes. > I am not arguing with you because, I think your correct (you usually are). I manually added the "Domain Users" group id (10000) with samba-tool (samba-tool group addunixattrs "Domain Users" 10000, I think without looking thru my notes) some time ago. The member smb.conf has "idmap config WKDOM : range = 10000-999999" and gid started with 10000, should uid start at (for example) 10001 (for first user to be mapped) and increase sequence (+1 as in 1...

On 6/19/2020 1:55 PM, Rowland penny via samba wrote: > ldbsearch -H /var/lib/samba/private/sam.ldb '(gidNumber=*)' | grep > 'gidNumber:' | sed 's/gidNumber: //' | sort | tail -n1 > > Add 1 to the output and use that. > > Rowland This is a newly setup DC and member server (both Debian 10.4 w/Samba v4.12.3). I got: root at dc01:~# ldbsearch -H

The output is: getent group 'domain admins? Copying without understanding what it does is not smart I know. But sometimes you will understand it later. And atm I am using a test setup. Here are is all the info you need: Main AD: Collected config --- 2020-09-05-18:16 ----------- Hostname: gaia DNS Domain: rompen.local FQDN: gaia.rompen.local ipaddress: 192.168.88.2 -----------

...-H /var/lib/samba/private/sam.ldb cn=Domain\ > Users | grep 'gidNumber' > root at dtdc01:~# > > My question is what is the best manner to add this uidNumber? I take it you mean 'gidNumber' ;-) The easiest way is to upgrade to 4.12.x and then use 'samba-tool group addunixattrs', otherwise you could use ldbedit or create an ldif and use ldbmodify or ldapmodify. Another option would be to use something like LAM. Rowland

On 6/19/2020 10:00 AM, Rowland penny via samba wrote: > > I take it you mean 'gidNumber' ;-) Sorry, yes you are correct . . . gidNumber. (on Debian 10.4 with Samba 4.12.3) So I did: root at dc01:~# samba-tool group add unixattrs Added group unixattrs root at dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb cn=Domain\ Users | grep 'gidNumber' root at dc01:~# Still no

On 8/17/2020 7:59 AM, Rowland penny via samba wrote: > Could it be that 'username' doesn't have a uidNumber ? > > Well, when I run "id [username]" on the DC, I get a "uid=3000013(SUBDOM\[username])" and"gid=10000", etc. When I run "id [username]" on the member server (mbr04) I get "id: 'SUBDOM\[username]': no such

...ed automatically, you must add them >> manually, same goes for gidNumber attributes. >> > I am not arguing with you because, I think your correct (you usually > are). > > I manually added the "Domain Users" group id (10000) with samba-tool > (samba-tool group addunixattrs "Domain Users" 10000, I think without > looking thru my notes) some time ago. > > The member smb.conf has "idmap config WKDOM : range = 10000-999999" > and gid started with 10000, should uid start at (for example) 10001 > (for first user to be mapped) and incre...

On Fri, 2023-02-24 at 15:56 +0800, d tbsky via samba wrote: > Hi: > I want to add rfc2307 attribute to machine account. I saw I can do > it via "samba-tool computer". but I want to try if there is a simpler > method, so I issue the command: > > ./samba-tool user addunixattrs 'machine$' 9999 > > and result: > > You are setting a Unix/RFC2307 UID & GID. You may want to set > 'idmap_ldb:use rfc2307 = Yes' in smb.conf to use the attributes for > XID/SID-mapping. > ERROR: Failed to modify user 'machine$': (21, "object...

On 11/14/24 11:35, Rowland Penny via samba wrote: > ... I suggest you set a gidNumber on Domain Users, just in > case you decide to run a Unix domain member in future with the 'ad' > idmap backend. > > This is from one of my DCs with 'template shell = /bin/bash' set: > > adminuser at tmpdc1:~ $ getent passwd rowland > SAMDOM\rowland:*:3000020:100:Rowland

On 2020-04-30 22:57, Rowland penny via samba wrote: > On 30/04/2020 20:57, Jelle de Jong via samba wrote: >> >> I never was able to get the backend = ad working >> >> I only need my user to be able to login to Windows 10 systems from a >> domain joined machine. >> >> This is how I add my users: >> >> samba-tool user create lgaga passwd

Hi, I'm migrating a samba3-server that is used both as a NT4-DC and a filesver into a pair of samba4 servers, one should become the new AD-DC and the other one should be the new fileserver. The new AD-DC seems to work fine. I created all local unix users and unix groups on the new AD-DC before I started the classic upgrade and deleted all of them after the update was finished. That way the