search for: modiano

...read: https://lists.samba.org/archive/samba/2016-April/thread.html#199609 Maybe I misunderstood the solution and I changed only the mapping in winbind. Is that so? >From the AD DC: > smb.conf # Global parameters [global] bind interfaces only = Yes interfaces = lo ens32:SMB netbios name = MODIANODC realm = MODIANOAD.MODIANO.COM workgroup = MODIANOAD dns forwarder = 192.168.100.5 server role = active directory domain controller idmap_ldb:use rfc2307 = yes comment = "TEST AD" log level = 4 log file = /var/log/samba/log.samba password hash gpg key ids = XXXXXXXXX # Needed...

On Fri, 20 Oct 2017 16:47:43 +0200 Giuseppe Ravasio <giuseppe_ravasio at ch.modiano.com> wrote: > Sorry for eventually wrong AD terminology! Don't worry about it, it is just confusing when you call a DC, a PDC, call it your first DC or anything, just don't call it a PDC ;-) > > > You haven't fixed the 'xidNumber:100 issue', giving 'Domain...

...set to debug and it seems that it's effectively not reporting the group membership: _________________________________________________________________________ [2017/10/20 12:54:15.922510, 6, pid=21463, effective(0, 0), real(0, 0)] ../lib/util/util_ldb.c:60(gendb_search_v) gendb_search_v: DC=modianoad,DC=testdomainDC=com NULL -> 1 [2017/10/20 12:54:15.922873, 10, pid=21463, effective(0, 0), real(0, 0), class=ldb] ../lib/ldb-samba/ldb_wrap.c:76(ldb_wrap_debug) ldb: ldb_trace_response: ENTRY dn: <GUID=56d24437-bb0b-40fa-bf73-1ebad28071cd>;<SID=S-1-5-21-XXXXXXXXXX-XXXXXXXXXX-32714...

...inserted in ldap server. ------------------------------------------------------------ When i try to login on samba from MACHINENAME as USERNAME i see in ldap's log and messages log ----------------------------------------------------- slapd[1179]: conn=124 op=1 SRCH base="ou=People,dc=modiano,dc=com" scope=1 filter="(&(objectClass=posixAccount)(uid=MACHINENAME\5CUSERNAME)) slapd[1179]: conn=114 op=1 SRCH base="ou=People,dc=modiano,dc=com" scope=1 filter="(&(objectClass=posixAccount)(uid=COMPU\5CP_NEGRI))" slapd[1179]: conn=114 op=1 SRCH attr=uid...

...RSAT) starts the IDs at > '10000' and it is suggested to use that start number. This means that even if I deployed the Domain with "--use-rfc2307" the RFC2037 attributes are not already populated? > If this is the DC, you don't need '192.168.100.50 > sambatest1.modiano.com sambatest1' in /etc/hosts Yep sorry for not trashing the line... We are using an IP alias for ssh access and another one for samba. so the sambatest1 is just the entry for the other ip alias. >> Clustered DataONTAP seems to be missing thoose files, or they are not >> accessibl...

On Mon, 23 Oct 2017 09:11:23 +0200 Giuseppe Ravasio <giuseppe_ravasio at ch.modiano.com> wrote: > On 10/20/2017 05:48 PM, Rowland Penny via samba wrote: > >> So I tried what is suggested in this thread: > >> https://lists.samba.org/archive/samba/2016-April/thread.html#199609 > > > > I really should have said there that using '513' wasn...

On 10/23/2017 09:29 AM, Rowland Penny via samba wrote: > All that using '--use-rfc2307' does is allow the use of rfc2307 > attributes such as 'uidNumber' and 'gidNumber', it does not > populate any of the rfc2307 attributes. > > DCs works slightly different from Unix domain members, they use > 'xidNumber' attributes in idmap.ldb, these attributes

On Tue, 24 Oct 2017 12:27:18 +0200 Giuseppe Ravasio <giuseppe_ravasio at ch.modiano.com> wrote: > On 10/23/2017 10:26 AM, Rowland Penny via samba wrote: > > OK, have you tried asking the Netapp company, 'how do I use this > > with Active Directory' ? > > In this specific case no, but I already tried to open CIFS support > cases but at the end t...

On 10/23/2017 10:26 AM, Rowland Penny via samba wrote: > OK, have you tried asking the Netapp company, 'how do I use this with > Active Directory' ? In this specific case no, but I already tried to open CIFS support cases but at the end they tell me that It works as expected with a MS DC and that Samba DC is not supported by them. I cannot omit that I use Samba because they always

Hi all I had a fully working samba + ldap PDC. After upgrading from 3.0.7 to 3.0.9 I have lost synchronization of samba password and ldap password. Each time a Windows Client do a password change the server samba produce the error [2005/01/13 16:26:06, 2] passdb/pdb_ldap.c:ldapsam_modify_entry(1572) ldap password change requested, but LDAP server does not support it -- ignoring I have

I'm setting up a samba server that should authenticate against a samba 3.0 +Ldap PDC server. This is the situation 1) getenet passwd and getent group are ok 2) wbinfo -t -> checking the trust secret via RPC calls succeeded 3) wbinfo -g -> lists all the groups on PDC (nice!) 4) wbinfo -u -> lists all the users on PDC (nice again!) the problem is wbinfo -a test 1: a non existing user