Displaying 5 results from an estimated 5 matches for "low_range".
2024 Dec 01
3
pam_winbind Appears to need a Network Connection to Succeed at Offline Authentication
...nix domain members, I would always get
the same Unix IDs, then I thought differently. The 'single source of
truth' isn't rfc2307, it is the accounts RID and the 'rid' idmap
backend calculates the Unix ID from the RID and the DOMAIN low range set
in the smb.conf file:
ID = RID + low_range
So, if the low_range is set to '10000', the Domain Users group will
always get the Unix ID '10513' and so on.
10513 = 513 + 10000
Coming to to the users shell and home directory, these are always
relative to the Unix domain member, they are not mounted from another
computer (NOTE...
2024 Dec 05
1
pam_winbind Appears to need a Network Connection to Succeed at Offline Authentication
...lways get
> the same Unix IDs, then I thought differently. The 'single source of
> truth' isn't rfc2307, it is the accounts RID and the 'rid' idmap
> backend calculates the Unix ID from the RID and the DOMAIN low range set
> in the smb.conf file:
>
> ID = RID + low_range
>
> So, if the low_range is set to '10000', the Domain Users group will
> always get the Unix ID '10513' and so on.
>
> 10513 = 513 + 10000
>
> Coming to to the users shell and home directory, these are always
> relative to the Unix domain member, they are no...
2024 Dec 04
1
pam_winbind Appears to need a Network Connection to Succeed at Offline Authentication
...lways get
> the same Unix IDs, then I thought differently. The 'single source of
> truth' isn't rfc2307, it is the accounts RID and the 'rid' idmap
> backend calculates the Unix ID from the RID and the DOMAIN low range set
> in the smb.conf file:
>
> ID = RID + low_range
>
> So, if the low_range is set to '10000', the Domain Users group will
> always get the Unix ID '10513' and so on.
>
> 10513 = 513 + 10000
>
> Coming to to the users shell and home directory, these are always
> relative to the Unix domain member, they are no...
2018 Dec 14
0
Sample smb.conf for ADs authentication
...ea on why the *ad* back end does not
> work ?
As I said, it was only a test, it shows that there is connectivity to
your AD DC, but the ID's are not what I expected.
The 'rid' backend works by calculating the ID from the user or group RID
It use this formula:
ID = RID - BASE_RID + LOW_RANGE_ID
The 'BASE_RID' defaults to '0', so it becomes:
ID = RID + LOW_RANGE_ID
The 'LOW_RANGE' is what is set in smb.conf:
ID = RID - BASE_RID + 10000
So all the users and groups should be '10000' or above.
Did you restart Samba and also run 'net cache flush'...
2018 Dec 13
7
Sample smb.conf for ADs authentication
Hello,
I am trying to configure samba on a Centos 7.5 linux server ( Samba 4.8.3
) to share files stored on that server to a set of windows PCs running win7
and win10.
Some facts:
- the linux server is NOT the domain controller but it successfully
joined the domain ( realm join ...).
- we have a few linux servers on which we will want to configure samba in a
similar way to share files.
- the