search for: jefftest

...config * : backend = tdb idmap config * : range = 2000-7999 idmap config MIND:backend = ad idmap config MIND:schema_mode = rfc2307 idmap config MIND:range = 8000-9999999 idmap config MIND:unix_nss_info = yes winbind use default domain = yes restrict anonymous = 2 I have a user jefftest. I found that to set the primary group that user needs to be in that group. If I set the group of jefftest to a new group (both in the UNIX attributes tab and in the Member Of tab) using Active Directory Users and Computers. Then I test the user using ldapsearch against each domain controller and...

...nd_changes >>> >>> Rowland >>> >> No and likely will not on that system. I will try with a test user >> that is also not reporting correctly. >>> > > Still not working right > > ldapu is a function I wrote to use ldapsearch > > ldapu jefftest|grep -ie uidnumber -e gidnumber > uidNumber: 11507 > gidNumber: 31025 > > even logging in as jefftest I get as follows > > jefftest::daddles { ~ }-> id jefftest > uid=11507(jefftest) gid=8513(domain users) groups=8513(domain > users),31025(jeffs_general_group),8918648(vpn...

...* : range = 2000-7999 > idmap config MIND:backend = ad > idmap config MIND:schema_mode = rfc2307 > idmap config MIND:range = 8000-9999999 > idmap config MIND:unix_nss_info = yes > winbind use default domain = yes > restrict anonymous = 2 > > I have a user jefftest. > > I found that to set the primary group that user needs to be > in that group. > > If I set the group of jefftest to a new group (both in the UNIX > attributes tab and in the Member Of tab) using Active Directory Users > and Computers. > Then I test the user using ldap...

On Tue, Mar 13, 2018 at 4:12 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Tue, 13 Mar 2018 16:05:53 -0600 > Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > >> On Tue, Mar 13, 2018 at 4:03 PM, Rowland Penny via samba >> <samba at lists.samba.org> wrote: >> > On Tue, 13 Mar 2018 15:57:35 -0600 >> > Jeff Sadowski

...idmap config MIND:backend = ad >> idmap config MIND:schema_mode = rfc2307 >> idmap config MIND:range = 8000-9999999 >> idmap config MIND:unix_nss_info = yes >> winbind use default domain = yes >> restrict anonymous = 2 >> >> I have a user jefftest. >> >> I found that to set the primary group that user needs to be in that >> group. >> >> If I set the group of jefftest to a new group (both in the UNIX >> attributes tab and in the Member Of tab) using Active Directory Users >> and Computers. >> Th...

...* : range = 2000-7999 > idmap config MIND:backend = ad > idmap config MIND:schema_mode = rfc2307 > idmap config MIND:range = 8000-9999999 > idmap config MIND:unix_nss_info = yes > winbind use default domain = yes > restrict anonymous = 2 > > I have a user jefftest. > > I found that to set the primary group that user needs to be in that > group. > > If I set the group of jefftest to a new group (both in the UNIX > attributes tab and in the Member Of tab) using Active Directory Users > and Computers. > Then I test the user using ldaps...

ok after fighting to get my groups sorted out for my test user I created an "sudoer" group and added "jefftest" to "sudoer" > id jefftest uid=11507(jefftest) gid=8513(domain users) groups=8513(domain users),31020(sudoer) and added "sudoer" to /etc/sudoers like so %sudoer ALL=(ALL) ALL now when I login as jefftest I can run commands using sudo back to my other user who I also...

...rg/index.php/Samba_4.6_Features_added/changed#winbind_changes >> >> Rowland >> > No and likely will not on that system. I will try with a test user > that is also not reporting correctly. >> Still not working right ldapu is a function I wrote to use ldapsearch ldapu jefftest|grep -ie uidnumber -e gidnumber uidNumber: 11507 gidNumber: 31025 even logging in as jefftest I get as follows jefftest::daddles { ~ }-> id jefftest uid=11507(jefftest) gid=8513(domain users) groups=8513(domain users),31025(jeffs_general_group),8918648(vpn_users),8000(staff),8004(research),310...

# cat /proc/sys/kernel/ngroups_max 65536 # sysctl kernel.ngroups_max kernel.ngroups_max = 65536 Is there a way to change/look at AUTH_SYS? Seems I have 28 groups now as my user I tried created a test user with much less groups but it turns out it is on all those other groups. As such I tried winbind nested groups=no but this doesn't seem to change anything. On Tue, Dec 8, 2015 at 5:05