search for: idmap_script

...-- > >> To unsubscribe from this list go to the following URL and read the > >> instructions: https://lists.samba.org/mailman/options/samba > >> > > 'idmap_rfc2307' got me thinking about the other rarely used backends and > I wonder if you could use 'idmap_script', see 'man idmap_script' for > (limited) info > > Rowland > > Hi Rowland, Indeed, I switched to using the idmap_script back end. For posterity (in case it could ever help you or others), I have included the simple script below. It correctly returns the UID and primary GI...

On 08/07/2019 19:03, Ryan via samba wrote: >> 'idmap_rfc2307' got me thinking about the other rarely used backends and >> I wonder if you could use 'idmap_script', see 'man idmap_script' for >> (limited) info >> >> Rowland >> >> Hi Rowland, > Indeed, I switched to using the idmap_script back end. For posterity (in > case it could ever help you or others), I have included the simple script > below. It correc...

I have this working using "idmap_script" for the idmapping (homegrown script). I authenticate vs Active Directory and use SSSD to talk to OpenLDAP on the backend for group membership and posix attributes (homedir mostly). My nsswitch.conf looks like this: passwd: sss files systemd group: sss files systemd ID mapping is...

...ge, unix uid/gid numbers are determined algorithmically from the SID. But that would be wrong would it not? The uid/gid numbers are already defined on the unix system. So idmap_rid would not use the correct uid/gid numbers. Or am I missing something? I'm thinking perhaps I should implement an idmap_script backend that does something similar to idmap_nis.sh https://searchcode.com/codesearch/view/29414590/ But, instead of using ypmatch (as in idmap_nis.sh) I would use "getent passwd" calls instead to map between uid/gid and the SID number from wbinfo. Thanks for listening and helping :-)...

...and groups, both uid and gid have the same value and are the > >xid. That way Samba can also assign the ownership of files to a > >group. The idmap backend has to be able to support XID though, not > >all idmap backends do so. > > in particular idmap_autorid, idmap_rid and idmap_script support this > so called mode, idmap_ad doesn't. > > -slow > I take it that xid is used internally by Samba to identify calculated ID's, because the only place a normal user will come across them is in idmap.ldb. If this is correct, then it doesn't really matter that idma...

If we use "security=user" (and idmap_rfc2307), we won't be able to authenticate against another source, right? (e.g. an AD domain)? The password would also need to come from Samba? I saw an older posting from you about "idmap_script" is that still a valid backend? The man page exists, but I don't want to go down more deprecated rabbit holes. -- Shannon -----Original Message----- From: samba <samba-bounces at lists.samba.org> On Behalf Of Rowland Penny via samba Sent: Tuesday, May 6, 2025 11:50 AM To: samba a...

...ADS setting causes the idmap settings (e.g. idmap_ldap) to be ignored. -- Shannon Price Auburn University -----Original Message----- From: Shannon Price Sent: Monday, May 12, 2025 4:42 PM To: samba at lists.samba.org Subject: RE: [Samba] Samba 4.19 and OpenLDAPs I have this working using "idmap_script" for the idmapping (homegrown script). I authenticate vs Active Directory and use SSSD to talk to OpenLDAP on the backend for group membership and posix attributes (homedir mostly). My nsswitch.conf looks like this: passwd: sss files systemd group: sss files systemd ID mapping is...

On Fri, Jul 5, 2019 at 2:32 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 05/07/2019 18:50, Ryan via samba wrote: > > On Thu, Jul 4, 2019 at 4:49 PM Rowland penny via samba < > > samba at lists.samba.org> wrote: > > > >> On 04/07/2019 21:25, Ryan via samba wrote: > >>> I am still trying to configure Samba to authenticate

...ADS setting causes the idmap settings (e.g. idmap_ldap) to be ignored. -- Shannon Price Auburn University -----Original Message----- From: Shannon Price Sent: Monday, May 12, 2025 4:42 PM To: samba at lists.samba.org Subject: RE: [Samba] Samba 4.19 and OpenLDAPs I have this working using "idmap_script" for the idmapping (homegrown script). I authenticate vs Active Directory and use SSSD to talk to OpenLDAP on the backend for group membership and posix attributes (homedir mostly). My nsswitch.conf looks like this: passwd: sss files systemd group: sss files systemd ID mapping is...

...e.g. idmap_ldap) to be ignored. -- Shannon Price Auburn University -----Original Message----- From: Shannon Price Sent: Monday, May 12, 2025 4:42 PM To: samba at lists.samba.org<mailto:samba at lists.samba.org> Subject: RE: [Samba] Samba 4.19 and OpenLDAPs I have this working using "idmap_script" for the idmapping (homegrown script). I authenticate vs Active Directory and use SSSD to talk to OpenLDAP on the backend for group membership and posix attributes (homedir mostly). My nsswitch.conf looks like this: passwd: sss files systemd group: sss files systemd ID mapping is...

...e.g. idmap_ldap) to be ignored. -- Shannon Price Auburn University -----Original Message----- From: Shannon Price Sent: Monday, May 12, 2025 4:42 PM To: samba at lists.samba.org<mailto:samba at lists.samba.org> Subject: RE: [Samba] Samba 4.19 and OpenLDAPs I have this working using "idmap_script" for the idmapping (homegrown script). I authenticate vs Active Directory and use SSSD to talk to OpenLDAP on the backend for group membership and posix attributes (homedir mostly). My nsswitch.conf looks like this: passwd: sss files systemd group: sss files systemd ID mapping is...

> > When I try to > > access even an already-mounted NFS directory to which I have permission, > > gssproxy complains: > > > > Jul 10 08:55:51 smb gssproxy: gssproxy[1469]: (OID: { 1 2 840 113554 1 2 > 2 > > }) Unspecified GSS failure. Minor code may provide more information, > > Client 'host/smb.soe.ucsc.edu at AD.SOE.UCSC.EDU' not found in

...ould be wrong > would it not? The uid/gid numbers are already defined on the unix > system. So idmap_rid would not use the correct uid/gid numbers. > > Or am I missing something? No, that is how the 'rid' backend works. > > I'm thinking perhaps I should implement an idmap_script backend that > does something similar to idmap_nis.sh > > https://searchcode.com/codesearch/view/29414590/ > > But, instead of using ypmatch (as in idmap_nis.sh) I would use "getent > passwd" calls instead to map between uid/gid and the SID number from > wbinfo. We...

...e.g. idmap_ldap) to be ignored. -- Shannon Price Auburn University -----Original Message----- From: Shannon Price Sent: Monday, May 12, 2025 4:42 PM To: samba at lists.samba.org<mailto:samba at lists.samba.org> Subject: RE: [Samba] Samba 4.19 and OpenLDAPs I have this working using "idmap_script" for the idmapping (homegrown script). I authenticate vs Active Directory and use SSSD to talk to OpenLDAP on the backend for group membership and posix attributes (homedir mostly). My nsswitch.conf looks like this: passwd: sss files systemd group: sss files systemd ID mapping is...

On 2019-02-25 at 11:32 +0000 Rowland Penny via samba sent off: > > (I take it xid stands for both uid and gid?) > > No, I think it was chosen to differentiate them from uidNumber & > gidNumber attributes, they are similar but not the same. They also only > exist on DC's in Windows the owner of a file can be a group. In the unix world the main owner is always a user.

...netnamevalidate - Validate sharename netfilegetsec - Get File security netsessdel - Delete Session netsessenum - Enumerate Sessions netdiskenum - Enumerate Disks netconnenum - Enumerate Connections netshareadd - Add share netsharedel - Delete share New modules ----------- idmap_script - see 'man 8 idmap_script' vfs_unityed_media - see 'man 8 vfs_unityed_media' vfs_shell_snap - see 'man 8 vfs_shell_snap' New sparsely connected replia graph (Improved KCC) -------------------------------------------------- The Knowledge Consistency Checker (KCC) main...

...netnamevalidate - Validate sharename netfilegetsec - Get File security netsessdel - Delete Session netsessenum - Enumerate Sessions netdiskenum - Enumerate Disks netconnenum - Enumerate Connections netshareadd - Add share netsharedel - Delete share New modules ----------- idmap_script - see 'man 8 idmap_script' vfs_unityed_media - see 'man 8 vfs_unityed_media' vfs_shell_snap - see 'man 8 vfs_shell_snap' New sparsely connected replia graph (Improved KCC) -------------------------------------------------- The Knowledge Consistency Checker (KCC) main...

...netnamevalidate - Validate sharename netfilegetsec - Get File security netsessdel - Delete Session netsessenum - Enumerate Sessions netdiskenum - Enumerate Disks netconnenum - Enumerate Connections netshareadd - Add share netsharedel - Delete share New modules ----------- idmap_script - see 'man 8 idmap_script' vfs_unityed_media - see 'man 8 vfs_unityed_media' vfs_shell_snap - see 'man 8 vfs_shell_snap' ###################################################################### Changes ####### smb.conf changes ---------------- Parameter Name Descri...

...netnamevalidate - Validate sharename netfilegetsec - Get File security netsessdel - Delete Session netsessenum - Enumerate Sessions netdiskenum - Enumerate Disks netconnenum - Enumerate Connections netshareadd - Add share netsharedel - Delete share New modules ----------- idmap_script - see 'man 8 idmap_script' vfs_unityed_media - see 'man 8 vfs_unityed_media' vfs_shell_snap - see 'man 8 vfs_shell_snap' ###################################################################### Changes ####### smb.conf changes ---------------- Parameter Name Descri...

...>> >> >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> 'idmap_rfc2307' got me thinking about the other rarely used backends and I wonder if you could use 'idmap_script', see 'man idmap_script' for (limited) info Rowland