search for: gidnumber

Displaying 20 results from an estimated 3063 matches for "gidnumber".

2018 Oct 26
5
classicupgrade
Il 26/10/2018 13:45, Rowland Penny via samba ha scritto: > ldbsearch -Hldap://$(hostname -s) -k yes -P '(&(samaccountname=Domain > Users)(gidNumber=*))' gidNumber | grep gidNumber | awk '{print $NF}' sorry but nothing happen [root at dc1 ~]# ldbsearch -H ldap://$(hostname -s) -k yes -P '(&(samaccountname=Domain Users)(gidNumber=*))' gidNumber | grep gidNumber | awk '{print $NF}' [root at dc1 ~]# -- *Corr...
2018 Oct 26
2
classicupgrade
...13:50:44 +0200 > Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > > > > > > > Il 26/10/2018 13:45, Rowland Penny via samba ha scritto: > > > ldbsearch -Hldap://$(hostname -s) -k yes -P > > > '(&(samaccountname=Domain Users)(gidNumber=*))' gidNumber | grep > > > gidNumber | awk '{print $NF}' > > > > sorry but nothing happen > > > > [root at dc1 ~]# ldbsearch -H ldap://$(hostname -s) -k yes -P > > '(&(samaccountname=Domain Users)(gidNumber=*))' gidNumber | grep &g...
2016 Oct 13
3
Unable to set up home share correctly
...couldn't spot any suspicious messages in the Samba logfiles besides maybe get_referred_path: |profiles| in dfs path \fileserver.mydomain.lan\profiles is not a dfs root. get_referred_path: |home| in dfs path \fileserver.mydomain.lan\home is not a dfs root. My test users have uidNumbers und gidNumbers defined. I found this nifty command to list them root at fileserver:/var/log/samba# net ads search '(|(uidNumber=*)(gidNumber=*))' sAMAccountName uidNumber gidNumber -P Got 15 replies sAMAccountName: Enterprise Read-Only Domain Controllers gidNumber: 10005 sAMAccountName: Administrato...
2003 Apr 19
0
3.0 alpha23 ldapsam/group mapping issue
...87) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gi dNumber=-1))] [2003/04/19 13:39:00, 2] /Users/admin/newsamba/samba-3.0alpha23/source/passdb/p db_ldap.c:ldapsam_search_one_group(2187) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber =-1))] [2003/04/19 13:39:00, 2] /Users/admin/newsamba/samba-3.0alpha23/source/passdb/p db_ldap.c:ldapsam_add_group_mapping_entry(2423) Group -1 must exist exactly once in LDAP I also get this error when running this command: sudo smbgroupedit -c "Domain Admins" -u domadmin (domadmi...
2019 Jun 05
3
Automatically assigning uidNumber / gidNumber attributes
All, I'm working on a script to automatically assign uidNumber and gidNumber attributes to users. I have a few questions: 1) Which users should be excluded from this assignment? I'm currently using this LDAP filter (simplified syntax used here): (objectClass=user) & (objectCategory=Person) & ~(sAMAccountName=krbtgt*) Specifically, based on recent conversation...
2019 Aug 09
3
id mapping on a dc+file server
...t; >> backend. So, on the Linux clients? > > This is why I removed the idmap config entries from the dc3 smb.conf. > > "On a Samba Active Directory DC, Winbindd always reads the user IDs > > (UID) and group IDs (GID) from the values set in the uidNumber and > > gidNumber attributes set in the AD objects. For users and groups not > > having a UID or GID assigned, an ID is generated locally on the DC and > > stored in the /usr/local/samba/private/idmap.ldb file." > > There isn't uidNumber, and gidNumber in my users' objects. > > I...
2003 Nov 26
1
WinXP error when launch "Network Identification Panel"
...ix(1067) smbldap_search_suffix: searching for:[(&(sambaSID=S-1-5-21-3967911966-3537913209-3658253730-501)(objectclass=sambaSamAccount))] [2003/11/26 09:37:39, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1624) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=65533))] [2003/11/26 09:37:39, 2] passdb/pdb_ldap.c:init_group_from_ldap(1668) init_group_from_ldap: Entry found for group: 65533 [2003/11/26 09:37:39, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1624) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=6...
2016 Oct 13
0
Unable to set up home share correctly
...ages > in the Samba logfiles besides maybe > > get_referred_path: |profiles| in dfs path > \fileserver.mydomain.lan\profiles is not a dfs root. > get_referred_path: |home| in dfs path \fileserver.mydomain.lan\home > is not a dfs root. > > My test users have uidNumbers und gidNumbers defined. I found this > nifty command to list them > > root at fileserver:/var/log/samba# net ads search > '(|(uidNumber=*)(gidNumber=*))' sAMAccountName uidNumber gidNumber -P > Got 15 replies > > sAMAccountName: Enterprise Read-Only Domain Controllers > gidNumb...
2016 Oct 26
2
winbind backend ad not working
Hi Rowland, not for all users, some users have a gidNumber not inside the range. I expected to see the users with a gidNumber insite the range. It was a classicupgrad from a very old samba3 so we have gidNumbers below 100 for some users, but we only want to have the users with a gidNumber insite the range. So we don't care about the users outside t...
2019 Aug 20
1
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
...9 ao?t 2019 ? 12:37, Rowland penny via samba <samba at lists.samba.org> a ?crit : > > On 19/08/2019 11:13, Prunk Dump via samba wrote: > > Last important thing. I use some script to manage my users from Linux. > > As I can't use the "id" command to get the user gidNumber on DC : > > > > What is the fastest command to get the user gidNumber value on a samba DC ? > > > Sounds like you haven't set up the libnss-winbind links, but when you > do, don't be surprised if you get IDs in the '3000000' range > > Rowland Sorry I d...
2003 Dec 11
2
samba3/ldap/net groupmap fails
...ystem: succesful connection to the LDAP server [2003/12/11 13:47:26, 4] lib/smbldap.c:smbldap_open(837) The LDAP server is succesful connected [2003/12/11 13:47:26, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1624) ldapsam_search_one_group: searching for:[(&(objectClass=sambaGroupMapping)(gidNumber=4294967295))] [2003/12/11 13:47:26, 4] passdb/pdb_ldap.c:ldapsam_getgroup(1769) ldapsam_getgroup: Did not find group [2003/12/11 13:47:26, 2] passdb/pdb_ldap.c:ldapsam_search_one_group(1624) ldapsam_search_one_group: searching for:[(&(objectClass=posixGroup)(gidNumber=4294967295))] [2003/12...
2004 Jan 26
4
net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed.
net groupmap modify ntgroup="Domain Admins" unixgroup=504 net: ../../../libraries/liblber/decode.c:644: ber_scanf: Assertion `((ber)->ber_opts.lbo_valid==0x2)' failed. I was told this may be specific to ldap setup with samba 3.0.0, but is fixed in later versions of samba. however, in 3.0.1, there is a far worse bug that makes machines only available some of the time(i was told
2016 Jul 05
4
winbind idmap_ad rfc2037 can't read UIdnumber
...idmap config ADDOMAIN:range = 9999-999999 >> >> winbind nss info = rfc2307 >> winbind enum users = yes >> winbind enum groups = yes >> winbind use default domain = yes >> >> 9999 start range is "Domain's user" GidNumber. To have a default >> primary group. >> Shared uid and gid starts with 10000. >> >> The test for groups : >> -------------- >> # net ads search '(SamAccountName=info2)' samaccountname gidnumber -P >> Got 1 replies >> >> sAMAccountName:...
2018 Jul 23
2
winbind behavior question
...idmap config SAMDOM:range = 1000-999999 > >> idmap config SAMDOM:unix_primary_group = yes > > > > That isn't a bug, it is a feature ;-) > > Before 4.6.0 everyone got 'Domain Users' as their primary Unix > > group, but from 4.6.0, you can give users a gidNumber attribute > > and, with the line above, this will be used for the users primary > > Unix group. Whatever gidNumber is used, this must point to a group > > i.e. the group must have the same gidNumber. > > If the line doesn't exist, it falls back to using Domain Users, so...
2020 Jun 19
2
Add gidNumber for group
On 6/19/2020 10:00 AM, Rowland penny via samba wrote: > > I take it you mean 'gidNumber' ;-) Sorry, yes you are correct . . . gidNumber. (on Debian 10.4 with Samba 4.12.3) So I did: root at dc01:~# samba-tool group add unixattrs Added group unixattrs root at dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb cn=Domain\ Users | grep 'gidNumber' root at dc01:~# Still...
2015 Jan 13
2
Is there any problem that can arise from remapping gidNumber?
On 01/13/2015 09:23 AM, Rowland Penny wrote: > On 13/01/15 14:06, John Lewis wrote: >> On 01/13/2015 06:35 AM, Rowland Penny wrote: >>> On 13/01/15 11:33, John Lewis wrote: >>>> This morning I remapped gidNumber from primaryGroupID to gidNumber. I >>>> did that because I could not change the integer in primaryGroupID wit >>>> ldbedt as root. >>>> >>>> I mapped to to a new attribute called gidNumber which has no specific >>>> meaning in samba. Is t...
2020 Jul 23
2
map gidNumber
...wrote: >> hello, >> is there a way to map usergroups via winbind? >> >> I need 'getent passwd': >> testuser:x:7072:513::/home/users/testuser:/bin/bash >> >> but I get: >> testuser:x:7072:30000::/home/users/testuser:/bin/bash >> >> gidNumber is set to 513 in samba-ldap. >> >> cat /etc/samba/smb.conf >> [global] >> ??????? # Default ID mapping configuration for local BUILTIN accounts >> ??????? # and groups on a domain member. The default (*) domain: >> ??????? # - must not overlap with any domain ID...
2019 Aug 19
3
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
...re ? > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Prunk Dump via samba > > Verzonden: maandag 19 augustus 2019 10:46 > > Aan: samba at lists.samba.org > > Onderwerp: [Samba] winbind on DC : how use gidNumber instead > > of primaryGroupID as user's primary group > > > > Hi Samba Team ! > > > > My Samba AD DC server run an NFSv4 server so I need correct RFC2307 id > > mapping between the server and the clients. > > > > On the client side it's very e...
2015 Jan 13
2
Is there any problem that can arise from remapping gidNumber?
On 01/13/2015 06:35 AM, Rowland Penny wrote: > On 13/01/15 11:33, John Lewis wrote: >> This morning I remapped gidNumber from primaryGroupID to gidNumber. I >> did that because I could not change the integer in primaryGroupID wit >> ldbedt as root. >> >> I mapped to to a new attribute called gidNumber which has no specific >> meaning in samba. Is there any potential problems that can ari...
2015 Jan 13
2
Is there any problem that can arise from remapping gidNumber?
...5 15:11, John Lewis wrote: >> On 01/13/2015 09:23 AM, Rowland Penny wrote: >>> On 13/01/15 14:06, John Lewis wrote: >>>> On 01/13/2015 06:35 AM, Rowland Penny wrote: >>>>> On 13/01/15 11:33, John Lewis wrote: >>>>>> This morning I remapped gidNumber from primaryGroupID to gidNumber. I >>>>>> did that because I could not change the integer in primaryGroupID wit >>>>>> ldbedt as root. >>>>>> >>>>>> I mapped to to a new attribute called gidNumber which has no specific >&gt...