search for: group12

...DC=samdom,DC=example,DC=com CN: Rowland Penny sAMAccountName: rowland # record 2 dn: CN=rowland,OU=SUDOers,DC=samdom,DC=example,DC=com CN: rowland NOTE: other attributes removed for brevity. If I now try to add 'rowland' to a group, I get this: root at dc1:~# samba-tool group addmembers group12 rowland ERROR(exception): Failed to add members "rowland" to group "group12" - Unable to find "rowland". Operation cancelled. File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/group.py", line 239, in run add_members_operation=True) File...

...ccountName: rowland > > # record 2 > dn: CN=rowland,OU=SUDOers,DC=samdom,DC=example,DC=com > CN: rowland > > NOTE: other attributes removed for brevity. > > If I now try to add 'rowland' to a group, I get this: > > root at dc1:~# samba-tool group addmembers group12 rowland > ERROR(exception): Failed to add members "rowland" to group "group12" > - Unable to find "rowland". Operation cancelled. File > "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/group.py", > line 239, in run add_members_operation...

...39; backend: getent passwd rowland rowland:*:11107:10513::/home/rowland:/bin/bash Change to using the 'ad' backend, restart Samba and run 'net cache flush' : getent passwd rowland rowland:*:10000:10010:Rowland Penny:/home/rowland:/bin/bash id rowland uid=10000(rowland) gid=10010(group12) groups=10010(group12),10000(domain users), I hope you can see that before the change 'rowland' had 'Domain Admins' as the primary group, but now has 'group12' Rowland

...39;NIS' (and this is a > stupid name) range, but I think it shows something strange, if I run > 'id rowland' on a Unix domain member, I get: > > uid=10000(rowland) gid=10000(domain users) groups=10000(domain > users),102(netdev),1001(unixtest),10002(unixgroup), > 10010(group12),10024(unix > admins),10004(testgroup),10011(printeradmin),2001( > BUILTIN\users),2000(BUILTIN\administrators) > > My 'idmap config' lines are similar to yours, but, as you can see, the > users 'gid' is 'gid=10000(domain users)', yours is 'gid=20(games)...

> Do you have users in /etc/passwd ? I only have original debian system users > If so, are you trying to add one of these users to an AD group ? no

2018-07-24 16:53 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 24 Jul 2018 15:57:46 +0200 > Michal <Michal67M at seznam.cz> wrote: > > > For being honest, in my previous tests this user's (user test1) new > > files was created with NIS\audio group as extected; but other user's > > files (user amistest) was created with

..., but I think it shows something strange, if I > > > run 'id rowland' on a Unix domain member, I get: > > > > > > uid=10000(rowland) gid=10000(domain users) groups=10000(domain > > > users),102(netdev),1001(unixtest),10002(unixgroup), > > > 10010(group12),10024(unix > > > admins),10004(testgroup),10011(printeradmin),2001( > > > BUILTIN\users),2000(BUILTIN\administrators) > > > > > > My 'idmap config' lines are similar to yours, but, as you can see, > > > the users 'gid' is 'gid=10000(...

Hello, my enviroment: All Servers are Ubuntun 16.04-18.04 SAMBA AD DC Server and several SAMABA DOMAIN MEMBER (connected via WINBIND). In ADDC I've created a group "restrictaccess" and added some users. Now when im typing "id <username>" on a Domain Member, for some users the group "restrictaccess" are listed for some not! For example: ON DC: #

...rectory: /home/rowland loginShell: /bin/bash memberOf: CN=DnsAdmins,CN=Users,DC=samdom,DC=example,DC=com memberOf: CN=Unixgroup,CN=Users,DC=samdom,DC=example,DC=com memberOf: CN=TestGroup,CN=Users,DC=samdom,DC=example,DC=com memberOf: CN=Unix Admins,CN=Users,DC=samdom,DC=example,DC=com memberOf: CN=Group12,CN=Users,DC=samdom,DC=example,DC=com homeDirectory: \\MEMBER1\home\rowland objectClass: top objectClass: securityPrincipal objectClass: person objectClass: organizationalPerson objectClass: user gidNumber: 10000 lastLogonTimestamp: 131418520439158520 whenChanged: 20170613182723.0Z uSNChanged: 12103...

...>> memberOf: CN=DnsAdmins,CN=Users,DC=samdom,DC=example,DC=com >> memberOf: CN=Unixgroup,CN=Users,DC=samdom,DC=example,DC=com >> memberOf: CN=TestGroup,CN=Users,DC=samdom,DC=example,DC=com >> memberOf: CN=Unix Admins,CN=Users,DC=samdom,DC=example,DC=com >> memberOf: CN=Group12,CN=Users,DC=samdom,DC=example,DC=com >> homeDirectory: \\MEMBER1\home\rowland >> objectClass: top >> objectClass: securityPrincipal >> objectClass: person >> objectClass: organizationalPerson >> objectClass: user >> gidNumber: 10000 >> lastLogonTimest...

...s when we started with LDAP. The gid of 20 is "users" in hp-ux. And it was inserted into AD from LDAP during "samba classicupgrade". > > uid=10000(rowland) gid=10000(domain users) groups=10000(domain > users),102(netdev),1001(unixtest),10002(unixgroup), > 10010(group12),10024(unix > admins),10004(testgroup),10011(printeradmin),2001( > BUILTIN\users),2000(BUILTIN\administrators) > > My 'idmap config' lines are similar to yours, but, as you can see, the > users 'gid' is 'gid=10000(domain users)', yours is 'gid=20(games)...

...sers,DC=samdom,DC=example,DC=com > >>> memberOf: CN=Unixgroup,CN=Users,DC=samdom,DC=example,DC=com > >>> memberOf: CN=TestGroup,CN=Users,DC=samdom,DC=example,DC=com > >>> memberOf: CN=Unix Admins,CN=Users,DC=samdom,DC=example,DC=com > >>> memberOf: CN=Group12,CN=Users,DC=samdom,DC=example,DC=com > >>> homeDirectory: \\MEMBER1\home\rowland > >>> objectClass: top > >>> objectClass: securityPrincipal > >>> objectClass: person > >>> objectClass: organizationalPerson > >>> objectClass: u...

...'100-9999' for the 'NIS' (and this is a stupid name) range, but I think it shows something strange, if I run 'id rowland' on a Unix domain member, I get: uid=10000(rowland) gid=10000(domain users) groups=10000(domain users),102(netdev),1001(unixtest),10002(unixgroup),10010(group12),10024(unix admins),10004(testgroup),10011(printeradmin),2001(BUILTIN\users),2000(BUILTIN\administrators) My 'idmap config' lines are similar to yours, but, as you can see, the users 'gid' is 'gid=10000(domain users)', yours is 'gid=20(games)', how is this possible...

...> a stupid name) range, but I think it shows something strange, if I > > run 'id rowland' on a Unix domain member, I get: > > > > uid=10000(rowland) gid=10000(domain users) groups=10000(domain > > users),102(netdev),1001(unixtest),10002(unixgroup), > > 10010(group12),10024(unix > > admins),10004(testgroup),10011(printeradmin),2001( > > BUILTIN\users),2000(BUILTIN\administrators) > > > > My 'idmap config' lines are similar to yours, but, as you can see, > > the users 'gid' is 'gid=10000(domain users)', yours...

...unix domain member that the user 'emily' isn't logged into: id emily uid=10001(emily) gid=10000(domain users) groups=10000(domain users),2001(BUILTIN\users) And from one where she is: id emily uid=10001(emily) gid=10000(domain_users) groups=10000(domain_users),10002(unixgroup),10010(group12),2001(BUILTIN\users) Rowland

...=com >>>>>> memberOf: CN=Unixgroup,CN=Users,DC=samdom,DC=example,DC=com >>>>>> memberOf: CN=TestGroup,CN=Users,DC=samdom,DC=example,DC=com >>>>>> memberOf: CN=Unix Admins,CN=Users,DC=samdom,DC=example,DC=com >>>>>> memberOf: CN=Group12,CN=Users,DC=samdom,DC=example,DC=com >>>>>> homeDirectory: \\MEMBER1\home\rowland >>>>>> objectClass: top >>>>>> objectClass: securityPrincipal >>>>>> objectClass: person >>>>>> objectClass: organizationalPers...

Hi, When using AD authentication from a rhel8.1 environment with samba-4.10.4 installed, information on the primary group group01 set on the AD side for any user user01 cannot be obtained. [root @ rhel8_1 ~] # id user01 uid=2001107(user01) gid=2000513(domain users) groups=2000513(domain users),2001107(oec0814e),2001103(group01) If you perform the same operation on the same AD from the

...,DC=samdom,DC=example,DC=com > > >> memberOf: CN=Unixgroup,CN=Users,DC=samdom,DC=example,DC=com > > >> memberOf: CN=TestGroup,CN=Users,DC=samdom,DC=example,DC=com > > >> memberOf: CN=Unix Admins,CN=Users,DC=samdom,DC=example,DC=com > > >> memberOf: CN=Group12,CN=Users,DC=samdom,DC=example,DC=com > > >> homeDirectory: \\MEMBER1\home\rowland > > >> objectClass: top > > >> objectClass: securityPrincipal > > >> objectClass: person > > >> objectClass: organizationalPerson > > >> objectCl...

...ginShell: /bin/bash > memberOf: CN=DnsAdmins,CN=Users,DC=samdom,DC=example,DC=com > memberOf: CN=Unixgroup,CN=Users,DC=samdom,DC=example,DC=com > memberOf: CN=TestGroup,CN=Users,DC=samdom,DC=example,DC=com > memberOf: CN=Unix Admins,CN=Users,DC=samdom,DC=example,DC=com > memberOf: CN=Group12,CN=Users,DC=samdom,DC=example,DC=com > homeDirectory: \\MEMBER1\home\rowland > objectClass: top > objectClass: securityPrincipal > objectClass: person > objectClass: organizationalPerson > objectClass: user > gidNumber: 10000 > lastLogonTimestamp: 131418520439158520 > whe...

...N=DnsAdmins,CN=Users,DC=samdom,DC=example,DC=com > >> memberOf: CN=Unixgroup,CN=Users,DC=samdom,DC=example,DC=com > >> memberOf: CN=TestGroup,CN=Users,DC=samdom,DC=example,DC=com > >> memberOf: CN=Unix Admins,CN=Users,DC=samdom,DC=example,DC=com > >> memberOf: CN=Group12,CN=Users,DC=samdom,DC=example,DC=com > >> homeDirectory: \\MEMBER1\home\rowland > >> objectClass: top > >> objectClass: securityPrincipal > >> objectClass: person > >> objectClass: organizationalPerson > >> objectClass: user > >> gidNum...