search for: primarygroupid

Hi samba team ! I have found a very strange bug when changing my user's primaryGroupID with ldif files. The bug is very easy to reproduce : 1) Create a user, create a group, add the user to the group ------------------------------- ~# samba-tool user add stduser User 'stduser' created successfully ~# samba-tool group add stdgroup Added group stdgroup ~# samba-tool group ad...

...:40, Rowland penny a écrit : > On 05/07/16 17:56, Raphaël RIGNIER wrote: >> The strange behavior is the different output between group object and >> user object >> >> and >> net ads search -U administrator >> net ads search -P >> >> in Samba Wiki, primarygroupid refers to the one for User's "Unix >> Attributes" tab. Which is in fact GidNumber. (I have made tests to >> check this) >> The primaryGroupID attribute refers to Posix primary Group in user's >> "member of" tab. Which is a conversion from SID....

Currently, when CIFS users create files these get "Domain Users" as their group. I would appreciate a different group in general and yet another group for some selected users. Googling until my fingers bled I learned that this group is somehow magically encoded in the RID 513 set as primaryGroupID for all users. With Samba3 there used to be commands like 'net groupmap' to list / modify this mapping. But these commands apparently don't work anymore in Samba4. How do I assign / determine the RID of a group in Samba4? And if I set this to primaryGroupID, will it be used for fil...

...r administrator's password: > Got 1 replies > > sAMAccountName: rowland > uidNumber: 10000 > gidNumber: 10000 > gecos: Rowland Penny > > rowland at devstation:~/programming/git/samba-master$ getent group 10000 > domain_users:x:10000 > > Have you changed the 'primaryGroupID' attribute for the users ? > > Rowland > > The strange behavior is the different output between group object and user object and net ads search -U administrator net ads search -P in Samba Wiki, primarygroupid refers to the one for User's "Unix Attributes" tab. Whic...

My tool is growing fast and it takes me to the finishing line for setting up my new user database. But nw I came across another strange issue: I'd like to change the primaryGroupID. It is currently set to 513, which simply does not exist. I wanted to set to 100, which exists and actually the user is a member of this group, but then I get the following exception: ldap.UNWILLING_TO_PERFORM: {'info': 'error in module samldb: Unwilling to perform during LDB_MODIFY...

Hi Coming from Linux, I'm struggling my way through this stuff. e.g. on my domain, the group suseusers has a SID of: S-1-5-21-1463437245-1224812800-863842198-1128 Could anyone give me a yes/no/probably/absolutely-ridiculous on any of these? -User steve has a primaryGroupID: 1128 -steve is a member of suseusers -suseusers was the 128'th SID to be allocated -given only the SID above, you could not identify it as a group -it could equally well have been a user -or a computer -1128 is called a RID -if I change 1128 to that of another group, steve changes primary grou...

...by Windows membership only. Good. b) changing ''primary'' windows group from 'Domain Users' to other group are supported only by samba 4.6.0 and newer. c) (Windows) membership are expressed using 'member' in group object (full DN of the users) but also using 'primaryGroupID' in user object (RID of the group; for b) above, primaryGroupID is ever '513'). d) in (Windows) membership, if a user have a primary group, the group does not have the relative full user DN in 'member'; again for b) above, group 'Doamin Users' have no 'member'...

Hi everyone samba --version Version 4.0.0alpha18-GIT-bfc7481 openSUSE 12.1 If I do this: ldbmodify --url=/usr/local/samba/private/sam.ldb -b dc=hh3,dc=site dn: CN=steve6,CN=Users,DC=hh3,DC=site changetype: modify add: objectclass objectclass: posixaccount - replace: primarygroupid primarygroupid: 1134 I get an error something like: ERR: (Unwilling to perform) error 53 If however I do the ldbmodify in 2 stages: ldbmodify --url=/usr/local/samba/private/sam.ldb -b dc=hh3,dc=site dn: CN=steve6,CN=Users,DC=hh3,DC=site changetype: modify add: objectclass objectclass: posixacco...

Am 06.05.19 um 16:06 schrieb Rowland Penny via samba: > Yes, user 'vincent' has uidNumber 10010, gidNumber 13010 and > primaryGroupID 513. > > 513 corresponds to the group "Domain Users", which have gidNumber > 13010 > > Vincent Might this be the problem? He has primaryGroupID set to 513 (hello calssicupgrade?) but "Domain Users" hast a gid of 13010? Regards -- Dr. Christian Naumer Resear...

I try to set up Samba 2.2.4 / LDAP as a PDC and it almost works. The only thing I don't understand is why a domain user can't have a primaryGroupID of 513 (which looks like it should be a safe default). But if I set it, login is denied with an error C0000078 on the client, and something like [2002/06/03 10:32:28, 3] smbd/sec_ctx.c:set_sec_ctx(314) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2002/06/03 10:32:28, 3] smbd/sec_ctx...

...id mapping between the server and the clients. On the client side it's very easy with the new smb.conf options : idmap config SAMDOM:unix_nss_info = yes idmap config SAMDOM:unix_primary_group = yes But on the server side winbind use the gidNumber of the group corresponding to the user's primaryGroupID. Not the gidNumber directly. So all my users have their primary group set to "Domain Users" as I have set the "Domain Users" gidNumber as say in the documentation. How can I change this behavior ? On my NFSv4 shares all the files are owned by the "Domain Users" group...

...ewis wrote: >> On 01/13/2015 09:23 AM, Rowland Penny wrote: >>> On 13/01/15 14:06, John Lewis wrote: >>>> On 01/13/2015 06:35 AM, Rowland Penny wrote: >>>>> On 13/01/15 11:33, John Lewis wrote: >>>>>> This morning I remapped gidNumber from primaryGroupID to gidNumber. I >>>>>> did that because I could not change the integer in primaryGroupID wit >>>>>> ldbedt as root. >>>>>> >>>>>> I mapped to to a new attribute called gidNumber which has no specific >>>>>> me...

On 05/07/16 17:56, Raphaël RIGNIER wrote: > The strange behavior is the different output between group object and > user object > > and > net ads search -U administrator > net ads search -P > > in Samba Wiki, primarygroupid refers to the one for User's "Unix > Attributes" tab. Which is in fact GidNumber. (I have made tests to > check this) > The primaryGroupID attribute refers to Posix primary Group in user's > "member of" tab. Which is a conversion from SID. Both are differe...

...the same. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Prunk Dump via samba > Verzonden: maandag 19 augustus 2019 10:46 > Aan: samba at lists.samba.org > Onderwerp: [Samba] winbind on DC : how use gidNumber instead > of primaryGroupID as user's primary group > > Hi Samba Team ! > > My Samba AD DC server run an NFSv4 server so I need correct RFC2307 id > mapping between the server and the clients. > > On the client side it's very easy with the new smb.conf options : > > idmap config SAMDOM:u...

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: dinsdag 20 augustus 2019 11:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] winbind on DC : how use gidNumber > instead of primaryGroupID as user's primary group > > On 20/08/2019 10:29, L.P.H. van Belle via samba wrote: > > > >> -----Oorspronkelijk bericht----- > >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens > >> Prunk Dump via samba > >> Verzonden: dinsdag 20 aug...

...n. in my > case, all users can login, so I didn't notice the difference. When I said 'ignored', I should have said 'ignored by Unix', if your users are logging into Windows, then they are not using the uidNumber & gidNumber attributes, they are using the objectSid & primaryGroupID attributes. >until I > found "getent passwd" and "id xxxx" are not working. They are the ones that rely on the uidNumber and gidNumber or primaryGroupID attributes. > > with "unix_primary_group =no", all users need to have a valid primary > group id...

...> > >> So, we need to know just how you installed samba, what packages have you > >> installed ? > >> > > Sernet-Samba 4.2.2 on CentOS7 here, too. The other machine is Sernet-Samba 3.3.15 on CentOS 5.10. > > > > In your AD setup: what is gidNumber and primaryGroupID for user rowland? > > > > regards > > > > Frank > > > > OK, this my object in AD with the relevant attributes: > > dn: CN=Rowland Penny,CN=Users,DC=example,DC=com > primaryGroupID: 513 > uid: rowland > msSFU30Name: rowland > msSFU30NisDomain:...

On 01/13/2015 09:23 AM, Rowland Penny wrote: > On 13/01/15 14:06, John Lewis wrote: >> On 01/13/2015 06:35 AM, Rowland Penny wrote: >>> On 13/01/15 11:33, John Lewis wrote: >>>> This morning I remapped gidNumber from primaryGroupID to gidNumber. I >>>> did that because I could not change the integer in primaryGroupID wit >>>> ldbedt as root. >>>> >>>> I mapped to to a new attribute called gidNumber which has no specific >>>> meaning in samba. Is there any potential p...

...is only because > I haven't yet setup PAM. > > So, we need to know just how you installed samba, what packages have you > installed ? > Sernet-Samba 4.2.2 on CentOS7 here, too. The other machine is Sernet-Samba 3.3.15 on CentOS 5.10. In your AD setup: what is gidNumber and primaryGroupID for user rowland? regards Frank

...15 09:23 AM, Rowland Penny wrote: >>>>> On 13/01/15 14:06, John Lewis wrote: >>>>>> On 01/13/2015 06:35 AM, Rowland Penny wrote: >>>>>>> On 13/01/15 11:33, John Lewis wrote: >>>>>>>> This morning I remapped gidNumber from primaryGroupID to gidNumber. I >>>>>>>> did that because I could not change the integer in primaryGroupID wit >>>>>>>> ldbedt as root. >>>>>>>> >>>>>>>> I mapped to to a new attribute called gidNumber which has no spec...