search for: devlat

...ot;domain users" > domain users:x:10513: > > (correct to me) > > # new DM > > # wbinfo --group-info="domain users" > domain users:x:100: > > ("100" is wrong ...) "net cache flush" fixed it (for now) reading : https://techblog.devlat.eu/2017/02/04/gid-of-the-domain-users-resetting-to-100-with-a-samba-ad-dc/

...mber and gidNumber during creation of new groups and users. > Does 'Domain Users' have a gidNumber attribute containing a number > inside the '21000-200000' range ? That was part of the problem. The 'Domain Users' group has GID 12000 (set by following https://techblog.devlat.eu/2017/02/04/gid-of-the-domain-users-resetting-to-100-with-a-samba-ad-dc/ guide). So I modified client's smb.conf as: [global] netbios name = client1 realm = SAMDOM.EXAMPLE.COM workgroup = SAMDOM security = ADS kerberos method = secrets and keytab winbind trusted domains only = no...

...r/lib/samba/sysvol/i.mp.pl/scripts >         read only = No > [sysvol] >         path = /var/lib/samba/sysvol >         read only = No > > Thx for correct my config. > > > i found this toturial, now i need to change xidNumber to 40000? > > https://techblog.devlat.eu/2017/02/04/gid-of-the-domain-users-resetting-to-100-with-a-samba-ad-dc/ > Well you could do that, but that is a botch, if you want my advice, do not mess with idmap.ldb Rowland Penny : Samba team member

...gt; (correct to me) >> >> # new DM >> >> # wbinfo --group-info="domain users" >> domain users:x:100: >> >> ("100" is wrong ...) > > > > "net cache flush" fixed it (for now) > > reading : > https://techblog.devlat.eu/2017/02/04/gid-of-the-domain-users-resetting-to-100-with-a-samba-ad-dc/ > > I think what happened was that samba picked up the winbind cache for the DC and 'net cache flush' emptied the cache, so you shouldn't have any further problems. Rowland

Am 29.08.19 um 18:10 schrieb Rowland penny via samba: >> after that this former DC should become a plain DM file server >> >> Should I rm /var/lib/samba before editing smb.conf and re-joining? > > Just remove the .tdb & .ldb files and any cache files, do not remove the > main directory structure (except for sysvol etc). ok, will try in about 30mins thanks!

Mandi! Emmanuel Florac via samba In chel di` si favelave... > > I can fire up bug for the manpage?! > At least it should mention the default of 100 and why you would want > it at 0 instead. the bug is exactly for that, manpage lie! ;-) usershare max shares (G) This parameter specifies the number of user defined shares that are allowed to be created by users

Hi all, I've been reading and it seems like ad backend has many features that I'd like to use. However, despite browsing many forums and docs, I am still unable to get domain users list using `getent passwd` while using `ad backend`. If I change backend to tdb, then I can get usernames on the clients. Authentication works fine too when using `tdb backend`. I think the only issue is with