search for: nisdomain

...t; diff --git a/usr/kinit/ipconfig/bootp_proto.c b/usr/kinit/ipconfig/bootp_proto.c index 137847c..59b03b4 100644 --- a/usr/kinit/ipconfig/bootp_proto.c +++ b/usr/kinit/ipconfig/bootp_proto.c @@ -74,6 +74,7 @@ int bootp_parse(struct netdev *dev, stru dev->hostname[0] = '\0'; dev->nisdomainname[0] = '\0'; dev->bootpath[0] = '\0'; + memcpy(&dev->filename, &hdr->boot_file, FNLEN); if (extlen >= 4 && exts[0] == 99 && exts[1] == 130 && exts[2] == 83 && exts[3] == 99) { diff --git a/usr/kinit/ipconfig/dhcp_prot...

...n", - my_inet_ntoa(dev->ip_nameserver[0])); - fprintf(f, "IPV4DNS1=%s\n", - my_inet_ntoa(dev->ip_nameserver[1])); - fprintf(f, "HOSTNAME=%s\n", dev->hostname); - fprintf(f, "DNSDOMAIN=\"%s\"\n", dev->dnsdomainname); - fprintf(f, "NISDOMAIN=%s\n", dev->nisdomainname); - fprintf(f, "ROOTSERVER=%s\n", my_inet_ntoa(dev->ip_server)); - fprintf(f, "ROOTPATH=%s\n", dev->bootpath); - fprintf(f, "filename=\"%s\"\n", dev->filename); + write_option(f, "DEVICE", dev->name)...

...ver, so if you want > to log into the member server, you would so as root. From windows, > Administrator becomes root and carries out any changes etc as root. > > Rowland > > Ok, all understood, thank you. But how can I check if it worked with the users? I manually changed the Nisdomain and uidNumber for two users using ADUC (to 10001 and 10002, respectively), I restarted Samba (was this even necessary?), and getent passwd <username> will still not return anything. In other words, what is the quickest way to check if my member server setup worked out alright?

The company where I work is mostly a Windows shop, but I run a few CentOS servers and desktops. I have configured my systems as follows with Kickstart: authconfig --enablemd5 --passalgo=sha512 --enablenis --nisdomain=XXX \ --nisserver=nis1.XXX.com,nis2.XXX.com --useshadow --enablekrb5 \ --krb5realm=XXX.COM --krb5kdc=ldap.XXX.com --krb5adminserver=ldap.XXX.com The /etc/nsswitch.conf file looks like this: passwd: files nis shadow: files nis group: files nis The NIS services are provided...

I've updated my kickstart configuration files to work with CentOS 6 and am most of the way there integrating a CentOS 6 system into our LDAP/NIS environment. My authconfig line in the kickstart file is as follows: authconfig --enablemd5 --passalgo=sha512 --enablenis --nisdomain=XXX --nisserver=nis.XXX.com --useshadow --enablekrb5 --krb5realm=XXX.COM --krb5kdc=ldap.XXX.com --krb5adminserver=ldap.XXX.com This is virtually identical to the authconfig line I was using in CentOS 5. My issue is that users cannot log in with their network (NIS) usernames and passwords. If I l...

Hi, >Ah, I think I see the problem, If I remember correctly, you joined the >the Samba DC to a Windows DC and if you didn't have IDMU installed on >the Windows DC, you wouldn't get the required objects in AD created on >the Samba DC either. Really, IDMU was not installed. There is the file ypServ30.ldif ls /usr/share/samba/setup/ ... ypServ30.ldif But, I believe the

...ks flawlessly, with all machine accounts$ being able to do, what I need to them to do. This is obvious to me, that all I'm lacking is some settings in machine accounts (domain joined windows machines) in the ldap attributes, those attributes that are set with windows RSAT - unix attributes: nisdomain, user id, primary group So my goal is to enable "MYDOMAIN\Domain Computers" or any of the machineaccounts$ to be able to access read/write files from samba 4 domain server. As to my smb.conf. The values for ranges are working for me, because no user and or groups in passwd or group...

...com,dc=pk] Enter passwd for proxyagent: proxy Re-enter passwd: proxy WARNING: About to start committing changes. (y=continue, n=EXIT) y 1. Changed passwordstoragescheme to "crypt" in cn=config. 2. Schema attributes have been updated. 3. Schema objectclass definitions have been added. 4. NisDomainObject added to dc=tipu,dc=com,dc=pk. 5. Top level "ou" containers complete. 6. automount maps: auto_home auto_direct auto_master auto_shared processed. 7. ACI for dc=tipu,dc=com,dc=pkm modified to disable self modify. 8. Add of VLV Access Control Information (ACI). 9. Proxy Agent cn=proxy...

...irectories as shown by this excerpt from our /etc/nsswitch.conf file: passwd: files nis shadow: files nis group: files nis Our systems are configured using something similar to the following in our Kickstart config file: authconfig --enablemd5 --passalgo=sha512 --enablenis ?nisdomain=XXX \ --nisserver=nis.XXX.com,nis2.XXX.com --useshadow --enablekrb5 \ --krb5realm=XXX.COM --krb5kdc=ldap.XXX.com --krb5adminserver=ldap.XXX.com <http://ldap.xxx.com/> where nis1 and nis2 are the local AD domain controllers. With this configuration, any user can log into any CentOS syst...

...n of the samba tool and knew the MS LDIFDE tool would work. DC1 = Schema Master Find FSMO's on a Windows DC (schema master is one of them): C:\> NetDOM /query FSMO # sed -i -e 's/${DOMAINDN}/DC=example,DC=com/g' \ -e 's/${NETBIOSNAME}/DC1/g' \ -e 's/${NISDOMAIN}/samdom/g' \ /tmp/ypServ30.ldif Move the ypServ30.ldif file you've created here to the Windows DC where you will run ldifde C:\utils\> ldifde -i -f ypServ30.ldif -s SchemaMasterDC >Not sure just what Samba packages you have installed on the Debian computer From the wiki:...

Hi Howland, That is precisely what I cannot do. I do this by windows using Rsat, and when I select the NIS domain to be able to assign the gid or uid it does not appear, so I can't use samba just as a file server. Do you know if there is a way to reset or show NIS Domain? Is there any way to assign uidNumber & gidNumber attributes via console? Best regards, Gabriel Franca -----

...>>> From windows, Administrator becomes root and carries out any changes >>> etc as root. >>> >>> Rowland >>> >>> >> >> Ok, all understood, thank you. But how can I check if it worked with >> the users? I manually changed the Nisdomain and uidNumber for two >> users using ADUC (to 10001 and 10002, respectively), I restarted >> Samba (was this even necessary?), and getent passwd <username> will >> still not return anything. >> >> In other words, what is the quickest way to check if my member...

Hi, I performed the procedures below on Samba4-DC1 (Master) and apparently everything went fine. /etc/init.d/samba-ad-dc stop sed -i -e 's/${DOMAINDN}/DC=empresa,DC=com,DC=br/g' \ -e 's/${NETBIOSNAME}/SAMBA4-DC1/g' \ -e 's/${NISDOMAIN}/empresa/g' \ /tmp/ypServ30.ldif root at samba4-dc1:/tmp# ldbmodify -H /var/lib/samba/private/sam.ldb /tmp/ypServ30.ldif --option="dsdb:schema update allowed"=true Modified 55 records successfully /etc/init.d/samba-ad-dc start ldbsearch -H /var/lib/samba/private/sam.ldb -...

Yup, strange - right! Samba 4.2.2 RFC2307 attributes were added as follows: # sed -e 's/${DOMAINDN}/dc=MYDOMAIN,dc=MY,dc=TLD/g' \ -e 's/${NETBIOSNAME}/MYDOMAIN/g' \ -e 's/${NISDOMAIN}/MYDOMAIN/g' \ /usr/local/samba/share/setup/ypServ30.ldif > ypServ30-JMH.ldif # service samba4 stop # ldbmodify -H /usr/local/samba/private/sam.ldb ypServ30-JMH.ldif --option="dsdb:schema update allowed"=true Modified 55 records successfully # service samba4 st...

Hi, I've been using Samba 3 (standalone server, workgroup setup) for a long looong time and now I want to migrate to Samba 4 AD DC setup with clients joined to the newly created AD domain and all the bells and whistles that come with it. I've setup an AD DC (Debian wheezy with samba from backports) that will only handle authentication and a second AD DC that will also serve shares.

(to clarify, in case people are skimming this thread and think it is fixed..) The problem still occurs - id mappings are still being overwritten.. :(

...11/06/15 18:21, Jonathan Hunter wrote: > Yup, strange - right! > > Samba 4.2.2 > > RFC2307 attributes were added as follows: > # sed -e 's/${DOMAINDN}/dc=MYDOMAIN,dc=MY,dc=TLD/g' \ > -e 's/${NETBIOSNAME}/MYDOMAIN/g' \ > -e 's/${NISDOMAIN}/MYDOMAIN/g' \ > /usr/local/samba/share/setup/ypServ30.ldif > ypServ30-JMH.ldif > # service samba4 stop > # ldbmodify -H /usr/local/samba/private/sam.ldb ypServ30-JMH.ldif > --option="dsdb:schema update allowed"=true > Modified 55 records succes...

...nto the member server, you would so as root. From windows, >> Administrator becomes root and carries out any changes etc as root. >> >> Rowland >> >> > > Ok, all understood, thank you. But how can I check if it worked with > the users? I manually changed the Nisdomain and uidNumber for two > users using ADUC (to 10001 and 10002, respectively), I restarted Samba > (was this even necessary?), and getent passwd <username> will still > not return anything. > > In other words, what is the quickest way to check if my member server > setup w...

...uished name > (DN), NetBIOS name, and the NIS domain ? No, yes, yes and sort of ;-) No, you do not install NIS Yes, you replace '${DOMAINDN}' with 'DC=empresa,DC=com,DC=br' Yes, you replace '${NETBIOSNAME}' with the DCs short hostname in uppercase You replace '${NISDOMAIN}' (that is a bad name) with the workgroup name in lowercase. ypServ30.ldif is what installing IDMU on a Windows adds to AD and is normally only added to Samba if you provision a new domain with '--use-rfc2307' Rowland

...> I performed the procedures below on Samba4-DC1 (Master) and apparently > everything went fine. > > /etc/init.d/samba-ad-dc stop > > sed -i -e 's/${DOMAINDN}/DC=empresa,DC=com,DC=br/g' \ > ? ? ? ? ?-e 's/${NETBIOSNAME}/SAMBA4-DC1/g' \ > ? ? ? ? ?-e 's/${NISDOMAIN}/empresa/g' \ > ? ? ? ? ?/tmp/ypServ30.ldif > > > root at samba4-dc1:/tmp# ldbmodify -H /var/lib/samba/private/sam.ldb > /tmp/ypServ30.ldif --option="dsdb:schema update allowed"=true > Modified 55 records successfully > > /etc/init.d/samba-ad-dc start > &gt...