search for: ntdomain

> > I love diving : ) > Ok mathias, Can you explain this. This i dont get.... Why is this output so different, and i dont mean the difference with NTDOMAIN\.. See the groups differences... between a ADDC and a member server.. Samba 4.4.3 ADDC id someusername uid=10002(NTDOMAIN\someusername) gid=10000(NTDOMAIN\domain users) groups=10000(NTDOMAIN\domain users),3000053(NTDOMAIN\sng-certificaat-gpo),10005(NTDOMAIN\remote-webmail), 3000058(NTDOM...

Hi Rowland, Yes, thats done, the domain user exist on both servers in local sudo group. But why do i see much more groups on the ADDC, and even groups where this user is NOT member of, like 3000005(NTDOMAIN\denied rodc password replication group). See .. 2x 3000005(NTDOMAIN\denied rodc password replication group 3000005(NTDOMAIN\denied rodc password replication group Greetz, Louis > -----Oorspronkelijk bericht----- > Van: Rowland penny [mailto:rpenny at samba.org] > Verzonden: dinsdag...

And dont forget : https://wiki.samba.org/index.php/Idmap_config_ad I also noticed and incorrect mapping, which "looks" like rights issues like in the thead here. ( it is imo not a right issue.. ) read on.. NTDOMAIN\enterprise read-only domain controllers:x:3000202: NTDOMAIN\domain admins:x:10001:NTDOMAIN\administrator NTDOMAIN\domain users:x:10000: NTDOMAIN\domain guests:x:10002: NTDOMAIN\domain computers:x:10006: NTDOMAIN\domain controllers:x:3000018: NTDOMAIN\read-only domain controllers:x:3000203: Is conf...

...le wrote: >> And dont forget : >> https://wiki.samba.org/index.php/Idmap_config_ad >> >> I also noticed and incorrect mapping, which "looks" like rights >> issues like in the thead here. ( it is imo not a right issue.. ) read >> on.. >> >> NTDOMAIN\enterprise read-only domain controllers:x:3000202: >> NTDOMAIN\domain admins:x:10001:NTDOMAIN\administrator >> NTDOMAIN\domain users:x:10000: >> NTDOMAIN\domain guests:x:10002: >> NTDOMAIN\domain computers:x:10006: >> NTDOMAIN\domain controllers:x:3000018: >> NTD...

...ou cannot include groups from trusted domains in the 'valid users =' directive on a share. Here is the scenario as I experienced it (names have been changed to protect the innocent): Configuration: - Samba 3.0.21b as a member server in a real NT4 domain (security = domain) called 'NTDOMAIN' - NTDOMAIN has a two-way trust with Windows 2003 Active Directory domain 'ADSDOMAIN' - User 'fred' has an account on NTDOMAIN (NTDOMAIN+fred) and is a member of the 'sales' group on NTDOMAIN (@NTDOMAIN+sales) - User 'wilma' has an account on ADSDOMAIN (ADSD...

Hi Heinz, Baris wrote me the following: > i'm using samba4 and RDP running.... > my configuration: > > smb.conf > > .. > auth methods = sam, winbind, ntdomain, ntdomain:winbind > server services = s3fs, winbind, rpc, nbt, wrepl, cldap, ldap, kdc, drepl, ntp_signd, kcc, dnsupdate > dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, remote,...

On 6/22/2016 8:19 AM, L.P.H. van Belle wrote: > And dont forget : > https://wiki.samba.org/index.php/Idmap_config_ad > > I also noticed and incorrect mapping, which "looks" like rights issues like in the thead here. ( it is imo not a right issue.. ) read on.. > > NTDOMAIN\enterprise read-only domain controllers:x:3000202: > NTDOMAIN\domain admins:x:10001:NTDOMAIN\administrator > NTDOMAIN\domain users:x:10000: > NTDOMAIN\domain guests:x:10002: > NTDOMAIN\domain computers:x:10006: > NTDOMAIN\domain controllers:x:3000018: > NTDOMAIN\read-only domain c...

...:55 >Aan: samba at lists.samba.org >CC: pug at felsing.net; schnaggy at schnaggy.de >Onderwerp: Re: [Samba] samba 4.2 RDP problem > >Hi, > >thanx a lot! > >i can confirm, this solution works also for me. > > >but after setting "auth methods = sam, winbind, ntdomain, >ntdomain:winbind" smbclient -k does not work anymore: > >smbclient //SERVER/netlogon -k >session setup failed: NT_STATUS_LOGON_FAILURE > > >in the log.smbd: >../source3/auth/auth_domain.c:347(check_ntdomain_security) > check_ntdomain_security: Configuration erro...

On 22/06/16 10:13, mj wrote: > > > On 06/21/2016 04:48 PM, lingpanda101 at gmail.com wrote: >> >> I found my issue. On one of my DC's I had misspelled 'idmap_ldb:use >> rfc2307 = Yes'. I had it 'idmap_lbd:'. Ran 'net cache flush' and wbinfo >> gave correct mappings. I find it odd that 'samba-tool testparm' never >> threw

...//wiki.samba.org/index.php/Idmap_config_ad > >>> > >>> I also noticed and incorrect mapping, which "looks" like rights > >>> issues like in the thead here. ( it is imo not a right issue.. ) > >>> read on.. > >>> > >>> NTDOMAIN\enterprise read-only domain controllers:x:3000202: > >>> NTDOMAIN\domain admins:x:10001:NTDOMAIN\administrator > >>> NTDOMAIN\domain users:x:10000: > >>> NTDOMAIN\domain guests:x:10002: > >>> NTDOMAIN\domain computers:x:10006: > >>> NTDOMA...

...I'm trying to query one of my remote domains for users via "wbinfo -u --domain=EUROPE" and receiving "Error looking up domain users". I have been successfully able to look up users in multiple domains i.e. "wbinfo -u --domain=UK". My current domain is called NTDOMAIN in which I have my Ubuntu Dapper (6.06) box, running winbind 3.0.22-1ubuntu3.1 and samba 3.0.22-1ubuntu3.1. NTDOMAIN is hosted on a NT4 SP6a PDC, EUROPE is a Windows Server 2003 R2 SP1, and 2-way trusts are established. I have winbind running as "winbind -d 100" for maximum logging....

...>>>>> > >>>>> I also noticed and incorrect mapping, which "looks" like rights > >>>>> issues like in the thead here. ( it is imo not a right issue.. ) > >>>>> read on.. > >>>>> > >>>>> NTDOMAIN\enterprise read-only domain controllers:x:3000202: > >>>>> NTDOMAIN\domain admins:x:10001:NTDOMAIN\administrator > >>>>> NTDOMAIN\domain users:x:10000: > >>>>> NTDOMAIN\domain guests:x:10002: > >>>>> NTDOMAIN\domain computers:x...

hi, now i did some tests with the "auth methods" option. "auth methods = sam, sam_ignoredomain, unix, winbind, wbc, trustdomain, ntdomain, guest" -> RDP works -> smbclient -k does not work "auth methods = sam, sam_ignoredomain, unix, winbind, wbc, trustdomain, ntdomain, guest, samba4" -> RDP hangs an the welcome-scrren -> smbclient -k works fine it seems there ist some problem with the "auth me...

27.06.2016 18:45, mathias dufresne: > Perhaps you don't have yet duplicate objectSid as that's not supposed to be > possible. > Rather than scripting something to look for objectSid used twice I would > start with dbcheck and other tools to verify that your database is > consistent and identical on all servers. [root at pdc ~]# samba-tool dbcheck Checking 3346 objects

I have a Samba server here with 4 users and 4 XP systems. Kind of small, but it does the job. It is running as a PDC with roaming profiles. I should note that I left professionally supporting Windows networking around the time XP came out, so I have maintained an NTDomain through a number of incarnations (NT, Win2000, Samba2/3) and use of someone elses packaging. This time I want to use as direct-to-Samba as I can. All I want with this server is to be a Samba server to Windows (and maybe Linux) machines. I have new hardware, an armv7 board that I can run eith...

...users to linux users). I tried setting up a DOMAIN auth, and it worked, however there were no users mapped to linux. I tried setting up the smbusermap like this: >>> nobody = * <<< But that revealed an unexpected situation. The user is first mapped to nobody, and then the NtDomain controller (password server) is asked if the user nobody is authen ticated correctly. Is this something, that is expected, or did I do s.th. wrong? Anyway. Does anyone know how to set up my situation? I have lost 3 days in searching and testing to no avail. Please help. Lachezar

...e(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)   Successfully added auth method 'trustdomain' [2018/01/15 16:45:53.277236,  5, pid=5412, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)   Attempting to register auth backend ntdomain [2018/01/15 16:45:53.277269,  5, pid=5412, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)   Successfully added auth method 'ntdomain' [2018/01/15 16:45:53.277302,  5, pid=5412, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_regi...

...t, I apologize for giving you the wrong info. Please clarify if I am wrong here. Thanks Russ -----Original Message----- From: Craig White [mailto:craigwhite@azapple.com] Sent: Tuesday, December 16, 2003 9:24 PM To: Smb_List (E-mail) Subject: [Samba] combining local users or smbpasswd users and NTDOMAIN usersin LDAP My last question went unanswered - probably because of the confused way that I asked it. I have a new samba server - joined to domain - running LDAP - imported the local users with the migration script into LDAP - life is good. Now I want to import the Users and Groups from my doma...

...  I installed only winbind again. With this line. apt-get install  -y --no-install-recommends winbind smbclient krb5-user libpam-winbind libnss-winbind ssh-krb5 libpam-krb5 samba-vfs-modules   tested kinit, works fine. Joined the domain, works.   Tested and works. wbinfo --domain-info=NTDOMAIN wbinfo -p wbinfo -g   and again a fail on wbinfo –u   id username works. getent passwd username works fine username:*:10002:10000:M. Username:/home/users/username:/bin/bash   getent passwd, has a “slow down” so something happens, but not putout. Also wbinfo –u has a  “slow down” on sc...

...e(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)   Successfully added auth method 'trustdomain' [2018/01/15 16:45:53.277236,  5, pid=5412, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_register_auth)   Attempting to register auth backend ntdomain [2018/01/15 16:45:53.277269,  5, pid=5412, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:60(smb_register_auth)   Successfully added auth method 'ntdomain' [2018/01/15 16:45:53.277302,  5, pid=5412, effective(0, 0), real(0, 0), class=auth] ../source3/auth/auth.c:48(smb_regi...