search for: bestgateeng

after running both it returned id: MYDOMAIN\user1: no such user. On Thu, Mar 14, 2019 at 10:23 AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 14 Mar 2019 10:07:32 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > > > After making the changes, I now get " No such user" when trying the id > > "user1" command. Yes winbind is installed and running. I am able to > > pull users and group successfully with wbinfo. Just not the GID and > > UIDs. > &...

...= 10000-19999 allow trusted domain = no template shell = /bin/bash winbind refresh tickets = yes restrict anonymous = 2 On Thu, Mar 14, 2019 at 9:32 AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 14 Mar 2019 09:15:22 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > > > This is the working smb.conf file for RHEL 7.3 and version 4.4.4 that > > is in current use. > > It may work, but it isn't correct. > > >This same config does not work in RHEL 7.6 and > > samba version 4.8.3 > > Not surprised. >...

...ameserver "ipaddress for DC2" Still no such user after restarting the services and executing net cache flush. On Thu, Mar 14, 2019 at 1:25 PM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 14 Mar 2019 13:08:13 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > > > yes windbind is installed and running > > Good > > > yes sssd is installed, but it was not running. I did start it and ran > > Bad, good and then bad again ;-) > > I would remove sssd, it isn't required if you are using winbind > >...

...s services: files sss netgroup: files sss publickey: nisplus automount: files aliases: files nisplus On Thu, Mar 14, 2019 at 10:49 AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 14 Mar 2019 10:26:05 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > > > after running both it returned id: MYDOMAIN\user1: no such user. > > There has to be a first time and this is it, the rid backend isn't > working, but why ? > > Is winbind installed and running ? > is sssd installed and running ? > can you post...

...make the > user a member of the 'SAMDOM' domain, but it would make the user a new > user. > I did make attempts at the previously and you are correct it does not work properly. > > What I also cannot understand why he cannot sort this out himself, try > going to 'www.bestgateeng.com' > I am not sure what you mean or are referring to by that statement. This system was passed off to me, I have no access to the previous admins or documentation on how and why everything is setup the way it is. After exhausting what I know I came here to ask a question to see if I perha...

...utput of mydomain\user I left the domain, rejoined, and still no such user. wbinfo outputs users and groups on command. On Thu, Mar 14, 2019 at 1:59 PM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 14 Mar 2019 13:39:31 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > > > removed sssd. > > removed all sss occurrences and winbind from the shadow line. > > Selinux is disabled. > > firewalld is disabled. > > > > not sure if there is a difference but I have smb and winbind, I do > > not have nmbd or smbd....

...correct. Is there something specific that I need to setup with a tdb backend? Other configurations that I am missing? On Fri, Mar 15, 2019 at 9:59 AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Mar 2019 09:17:34 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > > > Rowland, > > > > These are all VMs I am working on. I have tried it on several > > different "test" VMs. Blew away VMs and created new ones, still does > > not work. > > This is very, very, strange. > You are joining the domai...

...t convert sid <sid> to uid Notably, I do use the 'ad' backend. Tyrus -- does "wbinfo -S <sid>" work for you? ----- On Mar 14, 2019, at 12:58 PM, samba samba at lists.samba.org wrote: > On Thu, 14 Mar 2019 13:39:31 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > >> removed sssd. >> removed all sss occurrences and winbind from the shadow line. >> Selinux is disabled. >> firewalld is disabled. >> >> not sure if there is a difference but I have smb and winbind, I do >> not have nmbd or smbd. >...

...files services: files netgroup: files publickey: nisplus automount: files aliases: files nisplus On Thu, Mar 14, 2019 at 5:20 PM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 14 Mar 2019 14:07:33 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > > > Yes global is there. > > > > testparm output shows everything is ok, no error. ROLE_DOMAIN_Member > > > > Then I can press enter and see a dump. > > > > yes, wbinfo produces output of mydomain\user > > > > I left the dom...

This is the working smb.conf file for RHEL 7.3 and version 4.4.4 that is in current use. This same config does not work in RHEL 7.6 and samba version 4.8.3 workgroup = mydomain password server = hostname.mydomain.com realm = mydomain.com security = ads idmap config * : range = 10000-19999 idmap config * : backend = rid allow trusted domain = no template shell = /bin/bash kerberos method = secrets

Rowland, I must be missing something here. Why can't the OP set the UID in ADUC to match that required in the other system? The Samba Domain member can use the ad backend, (rather than the rid), and no doubt file permissions will have to be readjusted accordingly, but at least the UID's will match the other system. The Windows DC doesn't care about the RFC2307 attributes, so that

...default domain = true winbind offline logon = false winbind enum users = yes winbind enum groups = yes winbind refresh tickets = yes encrypt passwords = yes restrict anonymous = 2 template homedir = /home/%D/%U -- V/R Tyrus Shivers Bestgate Engineering LLC Direct: (410) 872-2457 tyrus.shivers at bestgateeng.com <tyrus.shivers at bestgateeng.com> This e-mail transmission and any documents, files or previous e-mail messages attached to it, may be privileged and confidential and is intended only for the use of the intended recipient of this message. If you are not the intended recipient, or a per...

...in idmapd.conf > (man idmap.conf) > > > > > Greetz > > > Louis > > > > > > Op 15 mrt. 2019 14:59 schreef Rowland Penny via samba < > samba at lists.samba.org>: > > On Fri, 15 Mar 2019 09:17:34 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > > > Rowland, > > > > These are all VMs I am working on. I have tried it on several > > different "test" VMs. Blew away VMs and created new ones, still does > > not work. > > This is very, very, strange. > You are joining the domai...

...but use as Rowland showed first and try adding the Domain and RealmDomain setting in idmapd.conf (man idmap.conf) Greetz Louis Op 15 mrt. 2019 14:59 schreef Rowland Penny via samba <samba at lists.samba.org>: On Fri, 15 Mar 2019 09:17:34 -0400 Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > Rowland, > > These are all VMs I am working on. I have tried it on several > different "test" VMs. Blew away VMs and created new ones, still does > not work. This is very, very, strange. You are joining the domain with: net ads join -U Administra...

...incorrect UID and GID mappings. I cannot utilize the smb.conf file that is working correctly on our 7.3 and 4.4 running VMs because windbind will no start due to RID being used as the backend. Any suggestions? -- V/R Tyrus Shivers Bestgate Engineering LLC Direct: (410) 872-2457 tyrus.shivers at bestgateeng.com <tyrus.shivers at bestgateeng.com> This e-mail transmission and any documents, files or previous e-mail messages attached to it, may be privileged and confidential and is intended only for the use of the intended recipient of this message. If you are not the intended recipient, or a per...

...n, but it would make the user a > new user. > > > I did make attempts at the previously and you are correct it does not > work properly. It wouldn't ;-) > > What I also cannot understand why he cannot sort this out himself, > try > going to 'www.bestgateeng.com <http://www.bestgateeng.com>' > > > I am not sure what you mean or are referring to by that statement. > This system was passed off to me, I have no access to the previous > admins or documentation on how and why everything is setup the way it > is. After exhausti...

PAM Unable to dlopen /usr/lib64/sercurity/pam.winbind.so:version SAMBA_4.8.3 not found (required by usr/lib64/security//pam.winbind.so. I cannot authenticate AD users and the error above appears in the logs. I may could have corrupted this when I was trying to resolve my issues with UIDs. Is there a way I can recompile or re-download these packages?

...homedir = /home/%D/%U > > > Rowland > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- V/R Tyrus Shivers Bestgate Engineering LLC Direct: (410) 872-2457 tyrus.shivers at bestgateeng.com <tyrus.shivers at bestgateeng.com> This e-mail transmission and any documents, files or previous e-mail messages attached to it, may be privileged and confidential and is intended only for the use of the intended recipient of this message. If you are not the intended recipient, or a per...

On Thu, 14 Mar 2019 09:15:22 -0400 Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > This is the working smb.conf file for RHEL 7.3 and version 4.4.4 that > is in current use. It may work, but it isn't correct. >This same config does not work in RHEL 7.6 and > samba version 4.8.3 Not surprised. > > workgroup = mydomain > password ser...

On Thu, 14 Mar 2019 13:08:13 -0400 Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > yes windbind is installed and running Good > yes sssd is installed, but it was not running. I did start it and ran Bad, good and then bad again ;-) I would remove sssd, it isn't required if you are using winbind > net cache flush and id again and still no such u...