search for: localsid

I am trying to change the localSID for a SAMBA server, however I am unable to. I have tried the command "net setlocalsid" to no avail. To troubleshoot I have also stopped the smbd and nmbd services, but this did not help. Any help would be great! root at TheWiggle:~# net getlocalsid SID for domain THEWIGGLE is: S-1-5-21-7...

...i Marc, We are working on building a Standalone Samba server on Ubuntu 14.04 LTS. Thanks, Byron On Dec 15, 2015 5:12 AM, "Marc Muehlfeld" <mmuehlfeld at samba.org> wrote: > Hello Byron, > > Am 14.12.2015 um 23:47 schrieb Byron Bogaert: > > I am trying to change the localSID for a SAMBA server, however I am > unable > > to. I have tried the command "net setlocalsid" to no avail. To > troubleshoot > > I have also stopped the smbd and nmbd services, but this did not help. > Any > > help would be great! > > > What kind of Samb...

...pposed to be a standalone server > and how can it be one, if it has the same SID as another machine, or am > I missing something?Surely, if it does have the same SID, you are > talking a basic domain. No, if it is a standalone server, it doesn't really care about what SID itself has (localsid), but the test I did showed that it did care about what SID a user had. ... > As long as the computer can get the users details from ldap and the > underlying OS can see this info, it shouldn't make any difference what > its SID is i.e. as long as 'getent passwd <a user in lda...

...gt;> and how can it be one, if it has the same SID as another machine, or am >> I missing something?Surely, if it does have the same SID, you are >> talking a basic domain. >> > > No, if it is a standalone server, it doesn't really care about what SID > itself has (localsid), but the test I did showed that it did care about > what SID a user had. ... > > As long as the computer can get the users details from ldap and the >> underlying OS can see this info, it shouldn't make any difference what >> its SID is i.e. as long as 'getent passwd &...

Hello Byron, Am 15.12.2015 um 21:29 schrieb Byron Bogaert: > We are working on building a Standalone Samba server on Ubuntu 14.04 LTS. On my standalone host (Fedora 23, Samba 4.3.1), it's working: # net getlocalsid SID for domain DEMO is: S-1-5-21-3979603266-3590286814-3507847034 # net setlocalsid S-1-5-21-3979603266-3590286814-999999999 # net getlocalsid SID for domain DEMO is: S-1-5-21-3979603266-3590286814-999999999 # net setlocalsid S-1-5-21-3979603266-3590286814-3507847034 # net getlocalsid SID for d...

On 15/12/15 21:16, Byron Bogaert wrote: > Hi Rowland, > > We need to change the SID on a standalone server because it needs to > also act as a File Server. The authentication comes from LDAP, and we > have existing entries in LDAP for SID of the domain. Instead of change > all the SID in ldap, we would like to be able to change it on the server. > > Hope this helps. >

...I could use ldap instead of a rsync replicated smbpasswd file by setting the same SID on all servers.) The SID is locally stored in secure.tdb and you can see it with tdbtool (though in hex, and need to know that the last three 10-digit numbers in the SID are 32-bits or 4-Byte each) Seems net setlocalsid changed the sid in secrets.tdb, but the server finds its SID in LDAP after that is set up in smb.conf, and there it was not changed. I solved it by also changing it manually on the LDAP server, or made sure that the sid was changed locally before starting up smbd with LDAP configured, or deleted...

On 16/12/15 12:24, Terje Trane wrote: > On 16.12.2015 12:51, Rowland penny wrote: >> Once you start using just one machine to store the user & group >> database, you have a prototype domain. Running a workgroup with a lot >> of users is a pain, I know, I have been there, done that. Why is it a >> pain? because if a user wants to use a machine (even if just to use

Am 15.12.2015 um 21:58 schrieb Byron Bogaert: > We are running Samba Version 4.1.6-Ubuntu on Ubuntu 14.04 LTS. Is there any > other specific information you need? Do you have a change to try it with a recent version (4.3.x)? I don't have an old version here at the moment and can't say if there was a bug in that area that time. And can you show the [global] part of your smb.conf?

Hi Marc, I tried using Samba version 4.3 without much success. I still was not able to control what the local sid of the machine was. To install 4.3 on Ubuntu 14.04 LTS I needed to use the following ppa: https://launchpad.net/~bnd-acc/+archive/ubuntu/samba43 I also tried changing to the smb.conf to "SERVER ROLE = CLASSIC PRIMARY DOMAIN CONTROLLER on my 4.1.6 and 4.3 version. This also did

...hlfeld <mmuehlfeld at samba.org> wrote: > Hello Byron, > > Am 15.12.2015 um 21:29 schrieb Byron Bogaert: > > We are working on building a Standalone Samba server on Ubuntu 14.04 LTS. > > On my standalone host (Fedora 23, Samba 4.3.1), it's working: > > # net getlocalsid > SID for domain DEMO is: S-1-5-21-3979603266-3590286814-3507847034 > > # net setlocalsid S-1-5-21-3979603266-3590286814-999999999 > > # net getlocalsid > SID for domain DEMO is: S-1-5-21-3979603266-3590286814-999999999 > > # net setlocalsid S-1-5-21-3979603266-3590286814-35...

...nc replicated smbpasswd file by setting the same SID on > all servers.) > > The SID is locally stored in secure.tdb and you can see it with tdbtool > (though in hex, and need to know that the last three 10-digit numbers > in the SID are 32-bits or 4-Byte each) > > Seems net setlocalsid changed the sid in secrets.tdb, but the server > finds its SID in LDAP after that is set up in smb.conf, and there it > was not changed. > > I solved it by also changing it manually on the LDAP server, or made > sure that the sid was changed locally before starting up smbd with LDAP...

Our Global Configuration is as follows: #======================= Global Settings ======================= [global] workgroup = WIKIMEDIA netbios name = THEWIGGLE server string = %h server (Samba, Ubuntu) security = user dns proxy = no #### Debugging/Accounting #### log level = 2 log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action =

On Wed, 2015-12-16 at 01:35 +0100, Tetra wrote: > We don't need a domain for this system. The PCs used are currently > not > in a domain at all, the Linux PCs will not, the Macs like not, and > there > are even some Windows Home PCs that cannot join a domain. The Samba > servers are just for providing file shares in a way Windows > recognizes. > We don't want

...-3-howto as my guideline. The LDAP "root" user's uidNumber and gidNumber are both 0. The primaryGroupID is 512 and the rid is 1000 (I even tried using the name "Administrator" as per the aforementioned howto, but that made no difference anyway). I have mapped the group - [localsid]-512 to the "admins" group (gidNumber 0). I even tried mapping the group [localsid]-1001 to admins group too, but got the same error. I am at my wit's end, as I have scoured google, the Samba mailing lists, the howto's, documentation, etc, and have found no record of this existi...

Hi Rowland, We need to change the SID on a standalone server because it needs to also act as a File Server. The authentication comes from LDAP, and we have existing entries in LDAP for SID of the domain. Instead of change all the SID in ldap, we would like to be able to change it on the server. Hope this helps. Thanks, Byron -- *Byron Bogaert* *IT System Administrator* Wikimedia Foundation

...be logical : get_peer_name: getnameinfo failed for 172.18.101.31 with error Temporary failure in name resolution) The following commands run well : 1. getent passwd 2. net rpc user 3. smbclient -L localhost -U% 4. pdbedit -Lv 5. net rpc join -> domain SC joined 6. net localsid = net domainsid What i've missed ? Regards -- Herv? H?noch Responsable informatique Institut Sainte Catherine 1750, chemin du Lavarin, 84000 Avignon T?l?phone : 04.90.27.57.44 Messagerie : h.henoch at isc84.org

...quot;session setup failed: NT_STATUS_INTERNAL_DB_CORRUPTION". I had read something about new security features, and in the most articles I had found problems with winbind and ADS connectivity. But we don't use winbind or else, we use only the linux ldap to authenticate. The domainSID and localSID and userSID are matched to the SambaDomainSID in my openLDAP. I have checked this with the commands: - net getdomainsid - net getlocalsid - pdbedit -v hhofmann So I hope you can help me, thanks! Regards, Henry Hofmann

I am trying to implement Samba Domain Controller with replication using LDAP . My intention is to create two Samba DC servers with LDAP backend , then to set one as master and other as slave , then replicate LDAP database in master to slave I shutdown second samba server and only first samba DC was running . Then I added one XP client to first samba server , I can successfully logged in to

Should have read this first: http://samba.org/samba/docs/man/Samba-Guide/upgrades.html#id2600749 Problem is I did it the wrong way on a few production systems. Odds are this is the second time I did it wrong. Running Debian Lenny using smbldap. It mostly works. Existing members of the domain are working OK. The first thing that got my attention is was not able to join a new xp workstation to