search for: mssfu30uidnumb

...d, and sfu for nss info. When running getent passwd, only a few active directory users show up, and I get lots of errors like this in my winbind log: [2006/10/20 15:33:49, 1] sam/idmap_ad.c:ad_idmap_get_id_from_sid(309) ad_idmap_get_id_from_sid: ads_pull_uint32: could not read attribute 'msSFU30UidNumber' [2006/10/20 15:33:49, 1] nsswitch/winbindd_user.c:winbindd_fill_pwent(85) error getting user id for sid S-1-5-21-1020778807-1917943211-1564386419-1158 [2006/10/20 15:33:49, 1] nsswitch/winbindd_user.c:winbindd_getpwent(711) could not lookup domain user TestUser wbinfo -u prints out all m...

...imilar schema changes. Specifically, it added uid, gid, shell, and home directory objects, plus a nice new tab called UNIX Attributes to the user properties window of the Active Directory Users and Computers MMC. So for instance, something like this should be an option in smb.conf: winbind uid = msSFU30UidNumber winbind gid = msSFU30GidNumber (this would denote the users Primary group name) winbind shell = msSFU30LoginShell winbind home = msSFU30HomeDirectory The people who use AD4Unix could change these variables to whatever it creates. Anyway, it seems like a much more simple way to get the uid'...

...ot;idmap backend = ad:ldap://<PDC's FQDN>/" in smb.conf, I can successfully do all of: #> wbinfo -S $(wbinfo -n some_user | awk '{print $1}')" #> getent passwd | grep some_user #> net ads search '(objectCategory=user)' \ sAMAccountName msSFU30GidNumber msSFU30UidNumber | \ grep -A2 some_user However, if I add the line "idmap backend = ad:ldap://<PDC's FQDN>/" to smb.conf and I do: #> wbinfo -S $(wbinfo -n some_user | awk '{print $1}')" I get the following error: "Could not convert sid <sid of some_user> to uid&...

with samba 3.0.22, I'm trying to integrate a linux box with Microsoft AD by using winbind for authentication as well as for the source of nss info. When winbind is configured to use its own local id maps, everything works fine. But when i configure winbind to use 'ad' as the source of nss info, authentication fails, 'getent' commands return no results, and 'wbinfo -r

...ing fine (FreeBSD 6.2 Release). Because nss_ldap is reported broken with dovecot I'm trying to use dovecot-ldap for both passdb and userdb. My guessed filters/attributes follows: user_filter = (&(objectClass=user)(msSFU30Name=%u)) user_attrs = homeDirectory=msSFU30HomeDirectory, uidNumber=msSFU30UidNumber, gidNumber=msSFU30GidNumber pass_attrs = msSFU30Name,msSFU30Password pass_filter = (&(objectClass=user)(msSFU30Name=%u)) But it doesn't work. Any advice? Cristian Salan

...inks to ldap in smb.conf but I can't see anything like it the other way round. No evidence of samba/winbind whatsoever in ldap.conf. Having either one of these schema extensions (R2 or SFU3.5) I don't need to further extend the schema right? SID is already there and I could probably use the msSFU30UidNumber (R2: uidNumber) attribute to do the mapping.. so AD looks like a good choice :) I like the winbind approach (in contrast to ldap) because it automatically creates unix attributes for existing domain users which saves a lot of work. In a second step I would like to kerberize the ldap query to not...

...6.1.6.18.1.310)(attributeId=1.2.840.113556.1.6.18.1.311)(attributeId=1.2.840.113556.1.6.18.1.344)(attributeId=1.2.840.113556.1.6.18.1.312)(attributeId=1.2.840.113556.1.6.18.1.337)) in <CN=Schema,CN=Configuration,DC=domain,DC=fi> gave 5 replies OID 1.2.840.113556.1.6.18.1.310 has name: msSFU30UidNumber OID 1.2.840.113556.1.6.18.1.311 has name: msSFU30GidNumber OID 1.2.840.113556.1.6.18.1.312 has name: msSFU30LoginShell OID 1.2.840.113556.1.6.18.1.337 has name: msSFU30Gecos OID 1.2.840.113556.1.6.18.1.344 has name: msSFU30HomeDirectory [2009/03/23 21:06:34, 0] li...