search for: autorid

..., 5 November 2019 01:37:15 PST Rowland penny via samba wrote: > On 04/11/2019 18:52, Alexey A Nikitin wrote: > > On Sunday, 3 November 2019 01:41:18 PST Rowland penny via samba wrote: > >> As I said, you cannot use 'winbind use default domain = yes' with > >> 'autorid', it makes all users and groups members of the same domain, > >> this is probably what has happened here. > >> > >> Remove the line, this should stop it happening again > >> > >> If you have only one domain, then you shouldn't be using autorid, y...

Show the servers there smb.conf that might help. And your using autorid.. https://wiki.samba.org/index.php/Idmap_config_autorid Drawbacks: User and group IDs are not equal across Samba domain members. TC84\administrator:*:1100500:1100513::/home/administrator at TC84 TC83\administrator:*:1200500:1200513::/home/administrator at TC83 1200500-1100500 = 100000 idmap c...

...2019 01:37:15 PST Rowland penny via samba wrote: >> On 04/11/2019 18:52, Alexey A Nikitin wrote: >>> On Sunday, 3 November 2019 01:41:18 PST Rowland penny via samba wrote: >>>> As I said, you cannot use 'winbind use default domain = yes' with >>>> 'autorid', it makes all users and groups members of the same domain, >>>> this is probably what has happened here. >>>> >>>> Remove the line, this should stop it happening again >>>> >>>> If you have only one domain, then you shouldn't be u...

On Sunday, 3 November 2019 01:41:18 PST Rowland penny via samba wrote: > As I said, you cannot use 'winbind use default domain = yes' with > 'autorid', it makes all users and groups members of the same domain, > this is probably what has happened here. > > Remove the line, this should stop it happening again > > If you have only one domain, then you shouldn't be using autorid, you > should be using rid instead, unfo...

...bases must be located on cluster node local > filesystems, not the cluster filesystem. > > I'm going to remove the setting from the wiki. > > -slow Ralph, the wikipage, that Christian referred to, says to use: netbios name = something clustering = yes idmap config *?: backend = autorid idmap config *?: range = 1000000-1999999 My understanding is that autorid is meant to be used with multiple domains, yet Christian's smb.conf is definitely for a standalone server, so does he need the idmap config lines ? Rowland

...but what about the > 'DOMAIN' domain ? > > From my understanding, the default range is meant for the Well Known > SIDs and anything outside the given domains and there are less than two > hundred Well known SIDs. > > To be honest, I have never really seen the point to autorid, it just > seems to be the 'rid' backend with a way to set the range size. > > I will stick to recommending using 'tdb' for the '*' domain and 'ad' > or 'rid' for any other domains. Autorid is made to combine the efficiency of rid with the ease...

Hello, i try to create a samba server for more then one trusted domain. I know there were some issues with samba 3.5, and in the internet i always read, i should use samba 3.4. So i wanted to give 3.6 a chance. I first tried autorid with a config like this: winbind enum users = yes winbind enum groups = yes idmap backend = autorid idmap gid = 100000-1499999 idmap gid = 100000-1499999 allow trusted domains = yes It works fine. And Domain A starts in the 200000 and Domain B with...

...gt; Good morning Rowland, > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Rowland penny via samba > > Verzonden: donderdag 9 april 2020 9:46 > > Aan: samba at lists.samba.org > > Onderwerp: Re: [Samba] autorid broken in samba 4.9? > > > > On 09/04/2020 08:34, L.P.H. van Belle via samba wrote: > > > Show the servers there smb.conf that might help. > > > > > > And your using autorid.. > > > https://wiki.samba.org/index.php/Idmap_config_autorid > > >...

Good morning Rowland, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: donderdag 9 april 2020 9:46 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] autorid broken in samba 4.9? > > On 09/04/2020 08:34, L.P.H. van Belle via samba wrote: > > Show the servers there smb.conf that might help. > > > > And your using autorid.. > > https://wiki.samba.org/index.php/Idmap_config_autorid > > > > Drawbacks: User and grou...

On 2016-01-10 at 17:58 +0000, Rowland penny wrote: > On 10/01/16 17:05, Partha Sarathi wrote: > > > > > This could have a lot to do with the fact that idmap_rid & > > > idmap_autorid calculate the uids differently i.e if you have RID > > > '2025000', autorid would calculate this as '1102500000' , rid > > > would calculate this as '12025000' > > > >Thanks for the reply. Now we end-up with mix uid/gid from both ranges in >...

...oin" here --- suggestions welcome.) * Step 3 didn't completely eradicate the old idmapping configuration from the runtime. It seems a "restart" is needed here. * After step 4 shows the wrong ID mapping, a "restart" of the services does not fix it, presumably because the autorid.cache file already has an entry for this username. Anyway, I just wanted to post this here in case anyone else finds this thread while debugging the same problem. n On Thu, Apr 9, 2020 at 9:35 AM Nathaniel W. Turner <nate at houseofnate.net> wrote: > Hi all, > > Thanks for the re...

Hi The server suddenly changed the uid + gid. this happened to times, yesterday and the week after. The default group at example The samba is a AD member where we have many users (>20 000) and we use autorid in that way [global] security = ads workgroup = CUSTOMER realm = CUSTOMER.COM winbind use default domain = yes winbind enum users = yes winbind enum group = yes idmap config * : backend = autorid idmap config * : range = 1000000-8999999999 OS debian 10 DC Microsoft At the...

I'm having issues with idmap autorid and rid on 3.6.2. If I use tdb backend, it works fine. If I do "wbinfo -i testuser" when using rid/autorid, I get this: failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for user testuser The same command with tdb returns the info as expected. wbinfo -u and wbin...

...: > > ?On 02/11/2019 23:18, Hilberg via samba wrote: >> Hi >> >> The server suddenly changed the uid + gid. this happened to times, yesterday and the week after. The default group at example >> The samba is a AD member where we have many users (>20 000) and we use autorid in that way >> [global] >> security = ads >> workgroup = CUSTOMER >> realm = CUSTOMER.COM >> winbind use default domain = yes >> winbind enum users = yes >> winbind enum group = yes >> idmap config * : backend = autorid >> idmap...

...g samba list >> >> On Fri, Jan 8, 2016 at 10:22 AM, Partha Sarathi < >> parthasarathi.bl at gmail.com> >> wrote: >> >> Hi, >>> >>> >>> We have a customer who facing security issues after changing RID idmap >>> backend to AUTORID. >>> >>> >>> The History of the issue looks as below, >>> >>> 1) When samba configured with RID idmap backend customer requested to >>> change few permissions, product support changed them thru setfacl to edit >>> the POSIX ACLS directl...

...16 19:30, Partha Sarathi wrote: > adding samba list > > On Fri, Jan 8, 2016 at 10:22 AM, Partha Sarathi <parthasarathi.bl at gmail.com> > wrote: > >> Hi, >> >> >> We have a customer who facing security issues after changing RID idmap >> backend to AUTORID. >> >> >> The History of the issue looks as below, >> >> 1) When samba configured with RID idmap backend customer requested to >> change few permissions, product support changed them thru setfacl to edit >> the POSIX ACLS directly rather than adding thru sm...

Hi, I have 12 linux servers that I would like users authenticating against my active directory. In a test environment I have tried setting up autorid so a user logged into server A sees the same ownership etc as the a user logged into server B. I tried using the minimal config from the idmap_autorid man page idmap config * : backend = autorid idmap config * : range = 1000000-1999999 Unfortunately, if user tom a creates a file /network/serve...

adding samba list On Fri, Jan 8, 2016 at 10:22 AM, Partha Sarathi <parthasarathi.bl at gmail.com> wrote: > Hi, > > > We have a customer who facing security issues after changing RID idmap > backend to AUTORID. > > > The History of the issue looks as below, > > 1) When samba configured with RID idmap backend customer requested to > change few permissions, product support changed them thru setfacl to edit > the POSIX ACLS directly rather than adding thru smbcacls/samba-tool ntacl. &gt...

...0, Ralph Boehme via samba <samba at lists.samba.org> wrote: > Am 9/29/20 um 10:33 AM schrieb Rowland penny: > > Ralph, the wikipage, that Christian referred to, says to use: > > > > netbios name = something > > clustering = yes > > idmap config *?: backend = autorid > > idmap config *?: range = 1000000-1999999 > > > > My understanding is that autorid is meant to be used with multiple > > domains, yet Christian's smb.conf is definitely for a standalone server, > > so does he need the idmap config lines ? > > autorid c...

...Partha Sarathi > <parthasarathi.bl at gmail.com <mailto:parthasarathi.bl at gmail.com>> > wrote: > > Hi, > > > We have a customer who facing security issues after > changing RID idmap > backend to AUTORID. > > > The History of the issue looks as below, > > 1) When samba configured with RID idmap backend customer > requested to > change few permissions, product support changed them thru > setfacl to edit >...