search for: opendirectory

I've been working through the instructions on the samba wiki: http://wiki.samba.org/index.php/Samba4/LDAP_Backend/OpenLDAP My OpenLDAP is running on Snow Leopard Server in an OpenDirectory environment. I run into this error: Administrator password will be set randomly! Traceback (most recent call last): File "setup/provision", line 222, in <module> nosync=opts.nosync,ldap_dryrun_mode=opts.ldap_dryrun_mode) File "bin/python/samba/provision.py", line...

...ents: ... > [2011/06/08 02:06:11, 0] /SourceCache/samba/samba-235.5/samba/source/smbd/server.c:main(925) > smbd version 3.0.28a-apple started. > Copyright Andrew Tridgell and the Samba Team 1992-2008 > [2011/06/08 02:06:11, 0, pid=456] /SourceCache/samba/samba-235.5/samba/source/lib/opendirectory.c:opendirectory_fill_domain_sid_cache(1985) > opendirectory_sam_searchname[/Config/CIFSServer] gave -14136 [eDSRecordNotFound] > [2011/06/08 02:06:11, 0, pid=456] /SourceCache/samba/samba-235.5/samba/source/passdb/secrets.c:secrets_fetch_domain_sid(150) > secrets_fetch_domain_sid:opend...

Hi All, Has anyone managed to get a Mac (OS X I'm using) to authenticate to a Samba/NT domain? I've been playing with this all day, and am not getting very far - smbd, nmbd and winbind (3.0.2) all run fine, I can see the domain, can connect individually to windows shares, wbinfo shows users (and groups, I assume), but there's no hints as far as what the equivalent to

...server to a samba based file server. After a lot of testing, things now works more or less: a mac server acts as Kerberos+OpenLDAP and a linux debian 7 box is doing the file server with samba 4.2.0. A client which has "joined" (which is bound in mac jargon) the OpenLDAP/Kerberos (the opendirectory) domain can mount shares and/or home directories on the samba server, leveraging Kerberos and that is very nice, thanks to SMB3 being implemented both in samba 4 and in osx 10.10. Yet their is no way the mac client can change the permissions of a file whether using the mac "Finder" a...

...bd from starting. (FYI: Because groups can be nested in Lion, but getgrouplist() reports the list without nesting, the number of groups in some system account used by Samba, exceeds NGROUPS_MAX. The fix just forces it to 32 in lib/system.c - ugly, but it works). I do not understand how Apple's OpenDirectory integration used to work with Samba in versions <= 10.6. I assume they maintained smbpasswd tokens inside OpenDirectory. Regardless, this is no longer done in Lion. Instead, I attempted to use the pam_smbpass module to sync passwords with the tdb backend. I copied the complied pam_smbpass.dynli...

Attached is a patch to make sshd work on OSX when using plain ol' Kerberos authentication as opposed to opendirectory authentication. Cheers, Nick -------------------------------------------------------------------------- NOTICE: Morgan Stanley is not acting as a municipal advisor and the opinions or views contained herein are not intended to be, and do not constitute, advice within the meaning of Section 975 of...

I've spent the last several days trying to get Samba to bind to our OpenDirectory server for user authentication with no success. Whenever I try start Samba, it complains that the connection to the LDAP server failed with invalid credentials. I am authenticating other services against the LDAP server through NSS, so I am a bit at a loss as to why Samba won't run. I'm a...

...rate when loading the folder on Gbit LAN >> and 802.11g This is my smb.conf file, working on OSX 10.4. >> >> [global] >> guest account = unknown >> getwd cache = no >> encrypt passwords = yes >> enhanced browsing = no >> auth methods = guest opendirectory >> passdb backend = opendirectorysam guest >> printer admin = @admin, @staff >> server string = Stairway >> unix charset = UTF-8-MAC >> display charset = UTF-8-MAC >> dos charset = 437 >> use spnego = yes >> client ntlmv2 auth = no &gt...

...erberos. It does work but we have some strange behavior with secondary groups and with permissions in general. Before entering into detailed questions about "fine tunning", I'd like to be sure of the direction we've taken in the configuration. Our setup is debian samba server, opendirectory on mac and mac clients purely with security=ads. Currently we are only launching smbd but we wonder whether we also need to configure (and launch) winbindd and nmbd? Many thanks for your answers Jeremie

We have an Apple OSX 10.3.4 Opendirectory (LDAP) Server with an SAMBA (3.0.2) PDC Server with roaming profiles for Windows XP (SP1 Prof) Clients on the Server. The Share for the PCs is only shared with SMB. When a PC log off, the profile will be copied to the server and brings the error message that the files prf*.tmp can?t be copied to th...

Hi I have PDC on samba 3.0.10 with LDAP (OpenDirectory on MacOSX). I need configure fileserver(both NFS and SMB) in domain(samba 3.0.25a on Solaris) Server get NSS information from LDAP(OpenDirectory) and winbind get UIDs from NSS: idmap backend = nss Users authentication works fine. Users can use shares. I can view ACLs, but can't set it. log: &gt...

...sword(309) check_ntlm_password: authentication for user [simon_russell] -> [simon_russell] -> [simon_russell] succeeded As far as the PDC is concerned, the authentication in both case was successful. Yet, the samba client fails and report an authentication failure... The PDC is running OpenDirectory which is just a LDAP server... Am I missing something? what could I do to allow users to login using any aliases? Thank you Jean-Yves

...g_on_failure += USERID disable = no } and i also created in /etc/ a file called smb.conf that contain the following string: [global] dos charset = 437 unix charset = UTF-8-MAC display charset = UTF-8-MAC server string = Mac OS X auth methods = guest, opendirectory passdb backend = opendirectorysam, guest guest account = unknown use spnego = No printer admin = @admin, @staff After enabling the windows share in the preference pane... nothing works! I cannot add user (neither the user created in the system) to samba cause i...

...no max smbd processes = 0 printcap = server string = Mac OS X lpresume command = /usr/sbin/PrintServiceAccess release %p %j client ntlmv2 auth = yes domain logons = no lpq command = /usr/sbin/PrintServiceAccess jobs %p passdb backend = opendirectorysam guest dos charset = CP437 unix charset = UTF-8-MAC socket options = SO_RCVBUF=64240 auth methods = guest ntdomain opendirectory local master = no use spnego = yes map to guest = Bad User domain master = no printer admin = @a...

...g.sndb' (note the dates) [2010/11/11 18:33:43, 0] /SourceCache/samba/samba-235.4/samba/source/smbd/server.c:main(925) smbd version 3.0.28a-apple started. Copyright Andrew Tridgell and the Samba Team 1992-2008 [2010/11/11 18:33:43, 0, pid=90063] /SourceCache/samba/samba-235.4/samba/source/lib/opendirectory.c:opendirectory_fill_domain_sid_cache(1985) opendirectory_sam_searchname[/Config/CIFSServer] gave -14136 [eDSRecordNotFound] [2010/11/11 18:33:43, 0, pid=90063] /SourceCache/samba/samba-235.4/samba/source/passdb/secrets.c:secrets_fetch_domain_sid(150) secrets_fetch_domain_sid:opendirectory_query_...

Hello, I am currently working on a solution to replace Apple OpenDirectory on some aging Xserve hardware. I currently have CentOS Samba4 AD DC?s replicating for redundancy using sernet-samba repositories. The third one has File/Print roles defind and it works perfectly EXCEPT on OSX 10.6. IT works great on any Windows workstation and OSX 10.7,10.8, 10.9 GNOME/Nautilus an...

...nknown encrypt passwords = yes printing = BSD allow trusted domains = no preferred master = yes lppause command = /usr/sbin/PrintServiceAccess hold %p %j netbios name = fileserver wins support = no add machine script = /usr/bin/opendirectorypdbconfig -c create_computer_account -r %u -n "/LDAPv3/127.0.0.1" max smbd processes = 0 printcap = server string = Apple Xserve / RAID lpresume command = /usr/sbin/PrintServiceAccess release %p %j logon drive = H: client ntlmv2 auth =...

...re we go: I've tried to sync our users emails (Mac OS X Server 10.6.8 Snow Leopard with dovecot 1.1.20-apple0.5) via imapsync to our new server by using the masterusers authentication method on the old 10.6.8 server... The main problem on OS X Server 10.6.8 is that dovecot 1.1.20 uses the OD (OpenDirectory) driver (well I think), so that when following the directions of Master users/password from this page I can't login with the http://wiki1.dovecot.org/Authentication/MasterUsers I couldn't find anything on the OD driver directive....the dovecot 1.1.20-apple build doesn't even have the s...

...server. > After a lot of testing, things now works more or less: a mac server > acts as Kerberos+OpenLDAP and a linux debian 7 box is doing the file > server with samba 4.2.0. > > A client which has "joined" (which is bound in mac jargon) the > OpenLDAP/Kerberos (the opendirectory) domain can mount shares and/or > home directories on the samba server, leveraging Kerberos and that is > very nice, thanks to SMB3 being implemented both in samba 4 and in osx > 10.10. > > Yet their is no way the mac client can change the permissions of a > file whether using...

...erberos. It does work but we have some strange behavior with secondary groups and with permissions in general. Before entering into detailed questions about "fine tunning", I'd like to be sure of the direction we've taken in the configuration: Our setup is debian samba server, opendirectory on mac and mac clients purely with security=ads. Currently we are only launching smbd but we wonder whether we also need to configure (and launch) winbind and nmbd? Many thanks for your answers Jeremie