search for: groupsids

Hi, I'm running Samba4 now for a couple of weeks, I'm currently stuck at the following problem: how do I change the AD groupsid? And this without the use of SUA in windows. For instance I have the group NiagaraUsers (S-1-5-21-1512407341-4132623508-1653607534-1001) with groupsid 10020. I just want to know how I can change this to 7002 for example. Best Regards Tim Vangehugten

Hiya. Still having fun with his mysql module - it appears to read from the mysql database fine, but I can't seem to add machine accounts (and I can't get too far unless I do this). It might also be my own stupidity too - let me know ;-) I've got a machine called "bbmachine" - without pdb_mysql, I can join the domain no problems. However, I need to rejoin the

...$username = substr($_, $beginpoint); open(USERSIDS, 'wbinfo -n ' . $_ . ' |'); while (<USERSIDS>){ $space = ' '; $endpoint = index($_, $space); $usersid = substr($_, 0, $endpoint); open(GROUPSIDS, 'wbinfo --user-domgroups ' . $usersid . ' |'); $j = 0; while (<GROUPSIDS>){ if ($j != 0) { open(GROUPNAME, 'wbinfo -s ' . $_ . ' |'); while...

Hiya... Trying to auth users against a mysql database using pdb_mysql. Using samba3.0 from CVS, running as a PDC. Few questions as well: In the "username column:", I'm assuming I need a real unix user here? Can I have a whole bunch of "nt username" users (i.e. non-unix users) in the mysql db to be auth'ed with samba, but they're all using the same unix user?

hi i'm out of knowledge [System] - Samba 3.0 Final - Suse 8.2 - IDMAP Backend = LDAP (Openldap 2.1) everything works fine - getent password/group shows all groups from ldap - in a test machine (XP) all SID's are correctly mapped to users, so i can see DOMAIN\User instead of S-1-5-4-xxxxx-xxxxx-xxx-RID - logons and so on are working - granting access to files on XP in tab

I have installed lots of samba 3 servers as PDCs for little networks serving 10 users or so. I have always set up the user "root" as the domain administrator, by setting its group SID to <domainSID>-512 with pdbedit. My "root" user has usually a user SID of <domainSID>-1000 since it is the first user I add to Samba. I have never set up a username map

Hi samba list, I'm using samba 3(.0.13) with OpenLDAP and I have a strange problem: the variables %U and %G don't seem to be replaced by their values. I get nothing in my logs, so I don't know where is the problem... In fact, in my smb.conf, I have something like: logon home = logon path = \\server\profiles\prof.%G logon drive = h: The profiles are loaded if I use logon

Hello, I've build a domain with Samba 3.0.23 and sucessfully joined this domain with a Windows-XP-Machine. I can log in to that machine as User "Root", wich is in the Group "Domain Admins" (rid=512). But I have no admin-rights on that machine. Also, normal User can not log in over the Remotesession (RDP). Can anybody help me to figure out why? Here is my smb.conf:

...imaryGroupSID maps to -> "users" >>so samba establishes a connection as user "testuser" / group "users", >>which fails because of my restrictive acl :/ >> >>so: is "valid users" my only chance? >> >>no way of adding more GroupSIDs for samba-users in LDAP, that samba >>recognises, that user "test_user" is in more than one group ? >> >>i mean: unix-side sees this... >> >>~# id test_user >>uid=596(test_user) gid=500(users) groups=500(users),522(kids) >> >>thx for your he...

hi i have a user ~# id test_user uid=500,gid=500 (users),groups (users,kids) as you can see, this user is in primary group "users" and also member of group "kids" if he tries to access /home/board via smb (Samba 3.0 + openldap) from a windows client (XP), he fails, because his sambaPrimaryGroupSID maps to -> "users" and /home/board is not accessible for

I confirm that Malte M?ller says. If you want to set multiple group acces, you must use ACL. the valid user parameter in smb.conf force the right of directory but the unix right is only for group user. ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467

Hi All, Are there any special CTDB/SMB configuration settings/dependencies to manage Winbind across CTDB managed servers authenticating via Active Directory(AD)? An example would be Samba's IDMAP backend for Winbind: RID vs. AD or tag Winbind to a primary CTDB node and point other nodes to authenticate from AD via proxy primary CTDB node? /etc/sysconfig/ctdb on all nodes is as follows:

OK. I am starting to believe that Samba 3.0.x is not stable. At least, the documentation for Samba as PDC with OpenLDAP backend (which is what I have been trying to do for four days) is crap. All the documentation for 3.0.x is mixed with 2.2.x. Most documents start as instructions for 3.0.x but put a lot of information that doesn't apply to 3.0.x, but 2.2.x. People in the mailing list