search for: nssswitch

...cate ? I thought that SAMBA authenticates directly against LDAP rather asking PAM/NSS to do this, but this doesn't seem to be true. I configured a Samba+LDAP PDC with the help of idealx.org SAMBA PDC howto. I succeeded with 3.0.2a. Just for experimenting, I used authconfig to disable ldap in nssswitch.conf and system-auth, the PDC stop working. Is it true that SAMBA need to authenticate twice, one with SambaSamAccount, and another with PosixAccount? thanks for any ideas on this matter

I'm a issue with my File Server as a Member Server. I followed many tutorials, but my authentication in Member Server doesn't work. I think the issue is in my krb5.conf or nssswitch.conf Follow is my /etc/krb5.conf in a Member Server: [libdefaults] default_realm = MEUDOMINIO.COM MEUDOMINIO.COM = { kdc = 10.133.84.25 admin_server = 10.133.84.25 default_domain = MEUDOMINIO.COM } MEUDOMINIO.COM = { kdc = 10.133.84.25...

...No [divisioni] comment = Divisioni path = /condivisioni/divisioni/ read only = No create mask = 0777 &n bsp; directory mask = 0777 inherit acls = Yes map acl inherit = Yes store dos attributes = Yes hide unreadable = Yes my nssswitch.conf passwd: compat winbind group: compat windind shadow: files hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: &n bsp; db files netgroup: nis Thank you in advance. Bye

hi.. all... can some one help me understanding how to add linux (mostly ubuntu,suse etc) what exactly i am looking for is what one should do on linux machine like editing /etc/nssswitch.conf, pam related file etc..but i dont find any standard way where one can add any linux machine to samba domain my goal is to just get authenticate through Samba Windows machine are successful getting connected to samba with all policy working like USB disable through regedit, disable drives...

...irectories valid users = %U read only = No create mask = 0664 directory mask = 0775 browseable = No writeable = yes path = /home/samba/users/%U [netlogon] path = /home/samba/netlogon browseable = no guest ok = yes read only = yes ================================================================== NSSSWITCH.CONF for PDC passwd: files ldap group: files ldap shadow: files ldap publickey: files hosts: files dns networks: files protocols: db files services: db files ethers: db files rpc: db files netgroup: db files ================================================================== SMB.CONF for Doma...

...;The other solution would be to use another instance of nsswitch.conf >for dovecot authdb passwd module. Is it possible? > > >Thanks! > >-- > >Eugene Bright > >IT engineer > >Tel: + 79257289622 > > >passwd uses getpwent library call which goes thru nssswitch. Your >explanation was strange though. If you don't want system users, why not >use ldap or sql directly? > >--- Aki Tuomi --- Eugene Bright IT-engineer Tel.: +7 925 728 96 22 -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org...

Hello! Upgrading manual tells that authdb [NSS module was removed][1] some time ago. [1]: https://wiki2.dovecot.org/Upgrading/2.3#line-100 > userdb nss was removed. Use userdb passwd instead. Can this change be reverted? I'd like to use only libnss_sss.so.2 as dovecot userdb source. It's also essential for me to enable files backend in nsswitch.conf so the system could use local

...NFS we have to disable the PAC by setting the Useraccountcontrol to : 33554432 After starting winbind I'm able to wbinfo -u, wbinfo -g, wbinfo -i <account> etc. getent passwb <account>, id <account> all works and give all the needed informataion uid, gid, etc. And with the nssswitch, idmapd and rpcsvcgssd correctly configured NFS works. So all seems ok. But then after some time (could be hours, even days, but mostly minutes) the TRUST is lost and the wbinfo -t fails and the $ smbclient -U <DOM>\\<account> //<fqdn>/<share> fails with NT_STATUS_NO_TRUST_...

...dc=com ldap suffix = dc=ff,dc=com domain logons = yes ldap ssl = off ldap passwd sync = yes ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap machine suffix = ou=Machines ldap delete dn = yes nslcd.conf uid admin gid Administrator_Group uri ldap://192.168.8.143 base dc=ff,dc=com /etc/nssswitch.conf passwd: files ldap group: files ldap shadow: files ldap /etc/pam.d/samba auth sufficient /usr/lib/security/pam_ldap.so auth sufficient /usr/lib/security/pam_unix.so account sufficient /usr/lib/security/pam_ldap.so account sufficient /usr/lib/security/pam_unix.so ses...

...config test:backend = ad idmap config test:schema_mode = rfc2307 idmap config test:range = 500-40000 winbind nss info = rfc2307 winbind trusted domains only = no winbind use default domain = yes winbind enum users = yes winbind enum groups = yes log level = 3 My nssswitch.conf: # /etc/nsswitch.conf # # Example configuration of GNU Name Service Switch functionality. # If you have the `glibc-doc-reference' and `info' packages installed, try: # `info libc "Name Service Switch"' for information about this file. passwd: compat winbind grou...

...ulling UID/GID from SFU on Server 2003 R2. LDAP mapping using the built in LDAP client in Solaris 10 works smoothly; getent returns everything it should. kerberos versions of telnet etc all work fine and forward credentials. This config uses the pam_krb5 module, not winbind and uses ldap in the nssswitch.conf Alternatively, I can not run the kinit -k for the host, leave out the krb5.keytab (and of course fix all the SPN information in AD from the above configuration) and configure Samba in AD mode and it properly joins the domain. User names get mapped properly. File access through samba works....

Can you provide your /etc/nssswitch.conf? Aki On 19.09.2018 10:40, Reuben Farrelly wrote: > I've been running with this almost identical patch already for some time: > > diff -up dovecot-2.3.0.1/src/auth/mycrypt.c.libxcrypt > dovecot-2.3.0.1/src/auth/mycrypt.c > --- dovecot-2.3.0.1/src/auth/mycrypt.c.libxcrypt??...

...My Linux server has been a great single-point of maintenance without my needing to jump through hoops. Conversely, getting any Linux workstation to authenticate to an AD instance has never worked. I tried that a few times over the last decade with zero success. In fact my workstation's /etc/nssswitch.conf still has the settings to use winbind for authentication. Fortunately it allows a fallback... Can you point me to an up-to-date and accurate howto on setting up a Linux client to use AD and NFS4?

Hi Igor, I got stuck now. I did my best. I got stuck at the winbind which I suspected is the reason why the domainA_computer cannot map the domain_B user's home directory. 1. What are the settings of your winbind? 2. Do you use only "winbind" in your libnss_ldap or use "ldap" as well? 3. My winbind works with :- (For both sides) wbinfo -t wbinfo -p wbinfo -u wbinfo

...; rpc:???????? db files > ethers:????? db files > netmasks:??? files > netgroup:??? files > bootparams:? files > > automount:?? files > aliases:???? files > thunderstorm ~ # > > Reuben > > On 19/09/2018 5:41 pm, Aki Tuomi wrote: >> Can you provide your /etc/nssswitch.conf? >> >> Aki >> >> >> On 19.09.2018 10:40, Reuben Farrelly wrote: >>> I've been running with this almost identical patch already for some >>> time: >>> >>> diff -up dovecot-2.3.0.1/src/auth/mycrypt.c.libxcrypt >>> dov...

Hello, On my system, nssswitch is like this : passwd:???? files sss shadow:???? files sss group:????? files sss So I assumed that it works with SSSD, I do not notice any issue with Samba. My share is accessible, permissions acls are working. The only thing I noticed is maybe NTLMv2 is always used by default with Samba. /[2019/...

...re solved. So I build debian packages from experimental for etch an installed them. Then I set up kerberos and samba using "security = ads". Everythings works great. I can get a kerberos ticket with kinit also I can join the ADS with "net ads join -Uadministrator". I set up /etc/nssswitch to use winbind and I can request user information successfully. But now I have to set up shared IDMAP for my samba servers to have the same UIDs and GIDs on all machines. As it would be nice to have all that on the ADS server I tried the following for days without success and that is where I need...

...been a great single-point of maintenance without my > needing to jump through hoops. Conversely, getting any Linux workstation > to authenticate to an AD instance has never worked. I tried that a few > times over the last decade with zero success. In fact my workstation's > /etc/nssswitch.conf still has the settings to use winbind for > authentication. Fortunately it allows a fallback... If you cannot get a Linux machine to authenticate to AD, then it sounds like you are doing something wrong. Can you share the smb.conf from your workstation ? > > Can you point me to...

hi, i have installded samba 4 oncentos 7 and started to use as part of active directory. But i have a problemabout sharing files between samba and windows 7. i can browse and edit sharedfiles and folders on windows 7. But when i create a new folder, the owner of the folder is seen as ?#User300012?instead of the real samba user. My sharing steps 1-?????i have add a user named ?ege? on centos

...of the folder is seen as > ?#User300012?instead of the real samba user. Question: In Linux, are you sharing these via NFS as well? If so, when it mounts, is it mounted as nobody:nobody? If so, you need to fix /etc/idmapd.conf. First, add your Domain = <whatever>. Then, uncomment Method = nssswitch. Finally, comment out the UMICH_SCHEMA. After doing that, nfs-idmapd -c clears the cache, and restart nfs-idmapd and autofs. See if that helps. Beyond that - I really don't begin to know samba well enough, but I *think* there's a line in the configuration related to ownership and uids...