search for: idmap_adex

Hi Guys, I'm having problems getting the new idmap_adex module to work. When using the idmap_adex plugin I get the following: # wbinfo -n administrator S-1-5-21-XXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500 User (1) # wbinfo -i administrator Could not get info for user administrator As expected attempting to lookup user & group info via commands which use...

Hi! $SUBJECT says it all. Why am I asking? A few times in the recent past I've stumbled across this module when trying to make changes in the winbind infrastructure that would involve changes to idmap_adex. The problem here is that I have no chance to test those changes, because I do not have the test setup including a Likewise Cell infrastructure around. Is anybody around using this module and willing to run tests against Likewise Cell infrastructure after changes have been done? Thanks, Volker...

Hi, Actually I am using the Backend Idmap_AD. I thought Idmap_adex is still under heavy development. Tobias Mit freundlichen Gr??en Tobias Mucke LFK-Lenkflugk?rpersysteme GmbH Serverpool, FCI4 Landshuter Stra?e 26, 85716 Unterschlei?heim, GERMANY Phone: +49 89 3179 8438 Fax: +49 89 3179 8927 Mobile: +49 170 635 3830 E-Mail: tobias.mucke at mbda-systems.de...

After spending some time trying to figure out how to merge the allocating backend from idmap_ldap and the rest of idmap_adex, I have found that it may not be worth the effort to avoid having to configure idmap_ldap. Has anyone had success with idmap_ldap as the uid/gid allocator and idmap_adex in Samba4? I haven't done much with ldap, so any instructions on how to add schema info needed for idmap_ldap (if any) t...

...so I need a way to authenticate my users using username, uid, gid, shell and homedirectory from AD. I've been using Kerberos+LDAPs before but that requires a dummy AD user hardcoded with username and password in /etc/ldap.conf which is making me icky. According to the man pages it looks like idmap_adex should do the trick for me, however I can't get things to work. (see config files below) Running 'wbinfo -u' does give me a the list of valid users, however 'getent passwd' waits a second after displaying the local users and then just gives me back the command-line prompt....

Hi Guys, I'm setting up a new file server in our domain environment and I'm having problems with the adex configuration/module. I have couple of working file servers using rfc2307/idmap_ad and they are working perfectly. What attracted me to the idmap_adex module is the domain trust/forrest authentication support. I have 2 domains not in the same forest with a 1-way trust setup. The server in question is joined to the domain that is trusted by the "outside" domain. Here are pastbins of my cleaned configs: krb5.conf<http://pastebin.com/V...

...from the Samba server's domain as well as the other trusted domains in the forest? I have made sure that the GC included attributes have the necessary RFC2307 attributes included. They're not by default so you have to make sure they do get populated into the GC (at least according to the idmap_adex man page) Speaking of which, I tried using idmap_adex with 3.5x and 3.6.0, but although the users/groups enumerate just fine with wbinfo, I am not getting any idmapping through NSS. I have seen comments that idmap_adex' features were being rolled into idmap_ad (no need to have more than one i...

...samba \ --localstatedir=/var \ --with-rootsbindir=/sbin \ --with-syslog \ --with-utmp \ --with-readline \ --with-libsmbclient \ --with-winbind \ --with-shared-modules=idmap_rid,idmap_ad,idmap_adex,idmap_hash \ --without-automount \ --with-ldap \ --with-ads \ --without-smbmount \ --without-dnsupdate \ --without-libtalloc \ --without-libtdb \ --without-libnetapi \...

Hello, I'm unable to update my Samba from 4.1.17 to 4.4.2. I'm looking to build from tar instead. From what I gather the following should be the steps taken. ./configure --without-ad-dc -- sbindir= /usr/sbin --sysconfdir=/etc/samba/ --/usr/share/man/ make make install Am I missing something else? Thanks. -- -James

...amba/smbpasswd \ --with-piddir=/var/run/samba \ --with-pammodulesdir=/lib/x86_64-linux-gnu/security \ --with-pam \ --with-syslog \ --with-utmp \ --with-winbind \ --with-shared-modules=idmap_rid,idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_tdb2,vfs_dfs_samba4,auth_samba4 \ --with-automount \ --with-ldap \ --with-ads \ --with-dnsupdate \ --with-gpgme \ --libdir=/usr/lib/x86_64-linux-gnu \ --with-m...

...tedir=/var/lib/samba/private > --with-smbpasswd-file=/etc/samba/smbpasswd > --with-piddir=/var/run/samba > --with-pammodulesdir=/lib/$(DEB_HOST_MULTIARCH)/security --with-pam > --with-syslog --with-utmp --with-pam_smbpass --with-winbind > --with-shared-modules=idmap_rid,idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_tdb2,vfs_dfs_samba4,auth_samba4 > --with-automount --with-ldap --with-ads --with-dnsupdate > --libdir=/usr/lib/$(DEB_HOST_MULTIARCH) > --with-modulesdir=/usr/lib/$(DEB_HOST_MULTIARCH)/samba > --datadir=/usr/share --with-lockdir=/var/run/samba > --with...

...the user or group RID to bits 0 - 19 in the Unix id and hashes 96 bits from the domain SID to bits 20 - 30 in the Unix id. The result is a 31 bit uid or gid that is consistent across machines and provides support for trusted domains. Please refer to the idmap_hash(8) man page for more details. idmap_adex ========== The adex idmap/nss_info plugin is an adaptation of the Likewise Enterprise plugin with support for OU based cells removed (since the Windows pieces to manage the cells are not available). This plugin supports * The RFC2307 schema for users and groups. * Connections to trus...

...the user or group RID to bits 0 - 19 in the Unix id and hashes 96 bits from the domain SID to bits 20 - 30 in the Unix id. The result is a 31 bit uid or gid that is consistent across machines and provides support for trusted domains. Please refer to the idmap_hash(8) man page for more details. idmap_adex ========== The adex idmap/nss_info plugin is an adaptation of the Likewise Enterprise plugin with support for OU based cells removed (since the Windows pieces to manage the cells are not available). This plugin supports * The RFC2307 schema for users and groups. * Connections to trus...

...-with-pammodulesdir=lib64/security --with-piddir=/run/samba --with-relro --enable-avahi --with-systemd --with-shared-modules=auth_unix,auth_wbc,auth_server,auth_netlogond,auth_script,auth_samba4,vfs_cacheprime,vfs_readahead,pdb_tdbsam,pdb_ldap,pdb_ads,pdb_smbpasswd,pdb_wbc_sam,pdb_samba4,idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_rfc2307,idmap_rid,idmap_tdb2 --without-gpgme '--bundled-libraries=!tdb,!talloc,!tevent,ALL' ... make install DESTDIR=/home/abuild/rpmbuild/BUILDROOT/samba-4.10.0-100.x86_64 CONFIGDIR=/etc/samba [  759s] PYTHONHASHSEED=1 WAF_MAKE=1  ./buildtools/bin/waf insta...

...the user or group RID to bits 0 - 19 in the Unix id and hashes 96 bits from the domain SID to bits 20 - 30 in the Unix id. The result is a 31 bit uid or gid that is consistent across machines and provides support for trusted domains. Please refer to the idmap_hash(8) man page for more details. idmap_adex ========== The adex idmap/nss_info plugin is an adaptation of the Likewise Enterprise plugin with support for OU based cells removed (since the Windows pieces to manage the cells are not available). This plugin supports * The RFC2307 schema for users and groups. * Connections to trus...

...the user or group RID to bits 0 - 19 in the Unix id and hashes 96 bits from the domain SID to bits 20 - 30 in the Unix id. The result is a 31 bit uid or gid that is consistent across machines and provides support for trusted domains. Please refer to the idmap_hash(8) man page for more details. idmap_adex ========== The adex idmap/nss_info plugin is an adaptation of the Likewise Enterprise plugin with support for OU based cells removed (since the Windows pieces to manage the cells are not available). This plugin supports * The RFC2307 schema for users and groups. * Connections to trus...

...the user or group RID to bits 0 - 19 in the Unix id and hashes 96 bits from the domain SID to bits 20 - 30 in the Unix id. The result is a 31 bit uid or gid that is consistent across machines and provides support for trusted domains. Please refer to the idmap_hash(8) man page for more details. idmap_adex ========== The adex idmap/nss_info plugin is an adaptation of the Likewise Enterprise plugin with support for OU based cells removed (since the Windows pieces to manage the cells are not available). This plugin supports * The RFC2307 schema for users and groups. * Connections to trus...

...the user or group RID to bits 0 - 19 in the Unix id and hashes 96 bits from the domain SID to bits 20 - 30 in the Unix id. The result is a 31 bit uid or gid that is consistent across machines and provides support for trusted domains. Please refer to the idmap_hash(8) man page for more details. idmap_adex ========== The adex idmap/nss_info plugin is an adaptation of the Likewise Enterprise plugin with support for OU based cells removed (since the Windows pieces to manage the cells are not available). This plugin supports * The RFC2307 schema for users and groups. * Connections to trus...

...tatedir=/var --with-privatedir=/var/lib/samba/private --with-smbpasswd-file=/etc/samba/smbpasswd --with-piddir=/var/run/samba --with-pammodulesdir=/lib/$(DEB_HOST_MULTIARCH)/security --with-pam --with-syslog --with-utmp --with-pam_smbpass --with-winbind --with-shared-modules=idmap_rid,idmap_ad,idmap_adex,idmap_hash,idmap_ldap,idmap_tdb2,vfs_dfs_samba4,auth_samba4 --with-automount --with-ldap --with-ads --with-dnsupdate --libdir=/usr/lib/$(DEB_HOST_MULTIARCH) --with-modulesdir=/usr/lib/$(DEB_HOST_MULTIARCH)/samba --datadir=/usr/share --with-lockdir=/var/run/samba --with-statedir=/var/lib/samba...

...gfilebase=/var/log/samba \ > --with-piddir=/run/samba \ > --with-privatedir=/etc/samba \ > --enable-cups \ > --with-acl-support \ > --with-ads \ > --with-automount \ > --enable-fhs \ > --with-pam \ > --with-quotas \ > --with-shared-modules=idmap_rid,idmap_ad,idmap_hash,idmap_adex \ > --with-syslog \ > --with-utmp \ > --with-dnsupdate > Okay, that should work. > > Have you read this: > > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > > But have you read the above wikipage ? Rowland