search for: editposix

...like to start to use it with our 600-user-300-windows-pc samba server. (Centos 5.4, samba-3.0.33-3.28, openldap-2.3.43, smbldap-tools-0.9.5-) So I started to read the samba how to, some books, a lot of postings and finaly tried first the smbldap-tools from idealx. After that I tried the Ldapsam:Editposix as this is the build in and may be "simpler" way to set up/manage the samba server. But as a novice in samba+ldap I'm faced with some questions and did not find any answers yet, because most docs start with a fresh set up and don't do a migration. After importing my posix accoun...

Hello list, have a samba 3.4.3 as domain controller with openldap as backend, using ldapsam:trusted = Yes and ldapsam:editposix = Yes and everything works like a charm. Now i would like to use this ldap for storing more information about my users; full name, phone, address and maybe even a picture. InetOrgPerson is the objectClass i would like to use since it's standard and has all i need and more. Samba use the account...

...;s looking for that in /etc/passwd. On the same token, I can add another user who already exists in my /etc/password (the local user I added during the installation of FreeBSD). And it shows up sucsessfully in my ldap server. At first I was thinking that the ... ldapsam:trusted= yes ldapsam:editposix= yes ..handled this issue, via winbind. But that might be a misunderstanding on my part. Anyone have any ideas?

Hello list, I'm trying to setup Samba to use: ldapsam:editposix = yes but I'm having problems to add users via "smbpasswd -a". It seems smbpasswd tries to modify an existing entry (and falling of course) instead of adding a new entry. Is that a bug, a configuration problem, or intended behavior? Do I need to create a postixaccount entry pri...

I tried setting up a samba/ldap domain using the ldapsam:editposix feature, using the brief instructions at http://wiki.samba.org/index.php/Ldapsam_Editposix. Everything goes rather smoothly, and I can add XP machines and log into them as the Administrative user. I added a user to the server, then to samba/ldap using smbpasswd -a newuser ldapsearch -x shows the...

Hi to everybody, I managed to setup ldapsam:editposix for Debian Lenny as described here: http://wiki.samba.org/index.php/Ldapsam_Editposix and had the impression that in order to add a Samba Unix client, it would be best to continue here: http://www.samba.org/samba/docs/man/Samba-Guide/unixclients.html However, in the ldapsam:editposix tutorial,...

Is there a page with support status of this feature in current samba releases ? What is the current status and future? -- Best Regards, Vladimir Skubriev System Administrator CVisionLab +7.918.504.38.20 skubriev at cvisionlab.com http://cvisionlab.com

Hi, I am more or less following this tutorial Ldapsam Editposix = http://wiki.samba.org/index.php/Ldapsam_Editposix but can't quite get my domain to work. I think the issue is with the idmap part of the smb.conf but can't quite figure out what's wrong with it or what the correct format should be. My SMB.CONF file.... #interfaces = lo0 em0 127.0...

Hello list, I'm trying this configuration: http://wiki.samba.org/index.php/Ldapsam_Editposix Everything works. I can add users, list users, delete users (and groups) with "net rpc user..." I can join clients, etc. *But* wbinfo -u and -g gives: zoolook@kvm-test-samba1:~$ wbinfo -u Error looking up domain users zoolook@kvm-test-samba1:~$ wbinfo -g BUILTIN\administrators BUILTI...

Hi, small question here... if I have all users, groups, machines and idmaps in LDAP and I set: ldapsam:trusted = yes ldapsam:editposix = yes then I *don't* need an "add machine script". Am I correct? TIA -- Mariano Absatz - "El Baby" el.baby at gmail.com www.clueless.com.ar

Hi, I admit that this is OT, at least slightly. While I've successfully used the ldapsam:editposix module in conjunction with the "net sam" and "net rpc" toolchain, which provides me with both the POSIX and the Samba account info for each account stored centrally in an LDAP DIT, I would like to have the info related to an InetOrgPerson as well. What's the easiest (prefer...

...t the user now gets created in ldap with a >> password, the command still ends with a segfault. > I have just started an old vm with samba 3.6.6 as pdc and openlap as > backend. smbpasswd -a someuser does not work, if someuser does not > exist. Are you using smbldap-tools or ldapsam:editposix ? > > if I create a posix user with useradd in /etc/passwd and then try to add > this user with smbpasswd -a to openlap i get the same error. > > so my 2 cents on this thread: > passwd -a someuser > has never worked with a ldap backend. Well, it is working for me, just becaus...

On Tue, 5 Feb 2019 11:56:05 +0300 Vladimir Skubriev <skubriev at cvisionlab.com> wrote: > вт, 5 февр. 2019 г. в 11:42, Rowland Penny via samba > <samba at lists.samba.org > >: > > > On Tue, 5 Feb 2019 11:31:53 +0300 > > Vladimir Skubriev via samba <samba at lists.samba.org> wrote: > > > > > Something like this. > > > > >

Hi, I'm using Samba 3.2.5 on Debian Lenny in conjunction with MIT Kerberos. LDAP user accounts have already been added prior to the Samba installation using the ldapscripts package (also included in Debian). I understand that I have to run "smbpasswd -a" as root on the Samba server for each user that's supposed to be visible to (and usable by) Samba as well (a whole bunch of

Hi all! I've a running Samba PDC (LDAP backend) with windows clients. All the users are in the LDAP, including the 'guest' user. All except the 'root' user which is a regular user. Then change in the smb.conf ldapsam:trusted = yes ldapsam:editposix = yes and noticed some speed-up when listing groups, look file ownerships, and so on. But I can't add machines to the domain: neither with the 'root' user, neither some users with privileges to join computers. If I comment the ldapsam:trusted/editposix everything is fine and machine...

...nning > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Vladimir Skubriev via samba > > Verzonden: dinsdag 5 februari 2019 9:07 > > Aan: samba at lists.samba.org > > Onderwerp: [Samba] Samba 4.7 and Editposix/Trusted Ldapsam > > extension support. > > > > Is there a page with support status of this feature in current samba > > releases ? > > > > What is the current status and future? > > > > -- > > Best Regards, > > > > Vladimir Skubriev...

Oh dear, I apologise for my typo in subject. Obviously it should mean: EDITPOSIX SETUP. > Hi, > > i've setup the samba environment like described in the wiki: > http://wiki.samba.org/index.php/Ldapsam_Editposix > > I can now easily add windows user / machines when using the policies for > "Administrator". > > I have also setup unix...

Dear according this wiki http://wiki.samba.org/index.php/Ldapsam_Editposix i have enable EditPosix extension but i receive this error Ignoring unknown parameter "idmap domains" How can i fix it ? Here it is my smb.conf : [global] workgroup = MSHOME netbios name = PC-DTOUZEAU server string = %h server disable netbios =no syslog = 3 log level = 10 log file =...

...cal master = no > > > > security = user > > encrypt passwords = true > > > > #passdb backend = tdbsam > > #obey pam restrictions = yes > > passdb backend = ldapsam:"ldap://ldap/" > > ldapsam:trusted=yes > > ldapsam:editposix=yes > > OK, took a bit of time, but I think I understand what your problem is, you want a standalone server with an ldap backend, BUT you have these lines in smb.conf: ldapsam:editposix = yes ldapsam:trusted = yes These lines make Samba expect ldap to be set up as a PDC, it expects ...

...automatically > tested in our make test.  However I can't see any specific change in > our control flow here, we should still execute that script if the new > account is created over SAMR CreateUser2 with ACB_WSTRUST. > > The account will still be created in LDAP even if ldapsam:editposix = > yes is not set, Where is this part mentioned in the doc ? I can see anything regarding account creation in LDAP, except for this editposix directive. Everything else just mention the add machine script. > it will just not be created with posix attributes. If > that were set, we wo...