search for: rowland

...own you server. > winbind enum users = no > winbind enum groups = no > > And then try this: > wbinfo -a marcio > > > I'll bet that works. > How much are you prepared to bet ;-) This has never worked for me, but everything else seems to work, so I ignore it: rowland at devstation:~$ wbinfo -a rowland Enter rowland's password: plaintext password authentication succeeded Enter rowland's password: challenge/response password authentication failed Could not authenticate user rowland with challenge/response rowland at devstation:~$ wbinfo -a rowland Enter r...

Hi Rowland, > Gesendet: Freitag, 19. Juni 2015 um 12:22 Uhr > Von: "Rowland Penny" <rowlandpenny at googlemail.com> > An: samba at lists.samba.org > Betreff: Re: [Samba] (Samba 4.2.2) wbinfo -i does not get the (correct) unix primary group gid > > > > > OK, I n...

Hi all, Is there a way to extract the whole attributes of objects, even hidden attributes, using ldbsearch or any samba tool? Hidden attributes have to be hidden from ldapsearch which can be used through network and so, remotely. ldbsearch can be used only locally by root, which [should] limit who is using it, so perhaps I thought it was possible : )

...itch > from sssd to winbind and I can't find anything. > Hi, Stefan, I think you have something set up incorrectly, or you are connecting to a DC, or something changed after Samba 4.17.8 I can logon using ssh with kerberos to a Unix domain member running on bookworm (Samba 4.17.8) rowland at devstation:~$ ssh rowland at TESTDM12.SAMDOM.EXAMPLE.COM Creating directory '/home/rowland'. Linux testdm12 6.1.0-9-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.27-1 (2023-05-08) x86_64 The programs included with the Debian GNU/Linux system are free software; the exact distribution terms fo...

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: maandag 5 augustus 2019 9:59 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] problems with authentication > > On 05/08/2019 08:24, L.P.H. van Belle via samba wrote: > > Hai, > > > > I think this is an old bug.. ( pretty sure ab...

On 17/07/16 07:12, Mark Foley wrote: > On Sat, 16 Jul 2016 19:39:21 +0100 Rowland penny <rpenny at samba.org> wrote: >> On 16/07/16 19:09, Mark Foley wrote: >>> On Sat, 16 Jul 2016 08:28:14 +0100 Rowland penny <rpenny at samba.org> wrote: >>> > [lots of extraneous stuff deleted] > >>>>> >>>> OK, just an update...

Hi Rowland, > Gesendet: Freitag, 19. Juni 2015 um 13:52 Uhr > Von: "Rowland Penny" <rowlandpenny at googlemail.com> > An: samba at lists.samba.org > Betreff: Re: [Samba] (Samba 4.2.2) wbinfo -i does not get the (correct) unix primary group gid > > On 19/06/15 12:26, Frank Gr...

...an Belle via samba > Verzonden: maandag 5 augustus 2019 10:08 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] problems with authentication > > > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Rowland penny via samba > > Verzonden: maandag 5 augustus 2019 9:59 > > Aan: samba at lists.samba.org > > Onderwerp: Re: [Samba] problems with authentication > > > > On 05/08/2019 08:24, L.P.H. van Belle via samba wrote: > > > Hai, > > > > > > I thi...

On Tue, 30 May 2017 09:22:59 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > > All I can think of is, you have a user with 'sAMAccountName=username' > and another with 'CN=username', this could lead to 'len(targetmember)' > being 2 > OK, I can confirm my thoughts, if I run:...

...> > I tried borth /var/lib/samba/sam.ldb and /var/lib/samba/private/sam.ldb) > and the environment environment has LDB_MODULES_PATH set. > > I can easily look at the objects using the ADUC from the RSAT, not sure why > this isn't working... > > On 19 June 2017 at 12:59, Rowland Penny via samba <samba at lists.samba.org> > wrote: > >> On Mon, 19 Jun 2017 12:38:09 +0200 >> Viktor Trojanovic <viktor at troja.ch> wrote: >> >>> Here is the DC's smb.conf: >>> >>> >>> [global] >>> workg...

On 16/07/16 19:09, Mark Foley wrote: > On Sat, 16 Jul 2016 08:28:14 +0100 Rowland penny <rpenny at samba.org> wrote: > >> On 15/07/16 08:17, Rowland penny wrote: >>> On 15/07/16 00:34, Andrew Bartlett wrote: >>>> On Thu, 2016-07-14 at 22:05 +0100, Rowland penny wrote: >>>>> On 14/07/16 21:52, Andrew Bartlett wrote: >>>&...

...9;m not sure what you mean by showing you the user's AD object, can > you elaborate? OK, install ldb-tools if not installed, then run this: ldbsearch -H /usr/local/samba/private/sam.ldb -b 'cn=users,dc=samdom,dc=example,dc=com' -s sub "(&(objectclass=person)(samaccountname=rowland))" Just in case it has got split up over multiple lines, the above should just one line. Replace: /usr/local/samba/private/sam.ldb with the path to your sam.ldb dc=samdom,dc=example,dc=com with your dns/realm names rowland with your users name You should get something like this back: # r...

...bug of RFC2307: > > https://bugzilla.samba.org/show_bug.cgi?id=15405 > Sorry, but allowing for bug 14618, it works for myself. https://bugzilla.samba.org/show_bug.cgi?id=14618 On a Unix domain member using the 'rid' backend, I get this: adminuser at testdm12:~$ getent passwd rowland rowland:*:11104:10513:Rowland Penny:/home/rowland:/bin/bash The user 'rowland' can logon, but if the user logs out and the network is disconnected, the user cannot logon until: A) the network is reconnected. B) 'lock directory = /var/cache/samba' is added to smb.conf and Samba is...

Hi all! On Monday, January 8th, 2024 at 08:23, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sun, 7 Jan 2024 15:00:27 +0100 > Marco Gaiarin via samba samba at lists.samba.org wrote: > > > Mandi! bd730c5053df9efb via samba > > In chel di` si favelave... > > > > > idmap config smadom:schema_m...

Hi Rowland, Yes. When I create a share I get the expected 'Everyone' group under 'Share Permissions' for example. I'm assuming I must map this object to Unix so all windows users can access this share. However in AD there is no 'Everyone' group to set a gid. I wouldn't...

Rowland, Thanks so far for the assistance. I have a question about setting up shares on a member server. How do I map to users or groups that do not display in AD(Everyone,System,Authenticated Users)? On 1/2/2015 2:08 PM, Rowland Penny wrote: > On 02/01/15 18:59, James wrote: >> Rowland,...

Hi, I set up a samba 4 in Debian 9.9 as a Domain member server, but authentication is not working as follows: root at srv-proxy:/etc/samba# wbinfo -a marcio at EMPRESA.COM.BR Enter marcio at EMPRESA.COM.BR's password: plaintext password authentication succeeded Enter marcio at EMPRESA.COM.BR's password: challenge/response password authentication failed wbcAuthenticateUserEx(+marcio at

Rowland, That was the issue. Windows computer management console showed 0 connections. That obviously wasn't correct. A reboot corrected the issue. ACL's working as expected. I probably should have ran a 'netstat' to verify. Any best practices on who should or shouldn't h...

...authenticated users. That prompted me to ask myself "what if I wanted the everyone group to have access"? How does the member server know who the everyone group is since the share is created on the server. What mappings if any do I need to make sure are in place. On 1/5/2015 9:12 AM, Rowland Penny wrote: > On 05/01/15 14:00, James wrote: >> Hi Rowland, >> >> Yes. When I create a share I get the expected 'Everyone' group >> under 'Share Permissions' for example. I'm assuming I must map this >> object to Unix so all windows users...

...the ADDC the UID users are always going to be different from those obtained by the DC winbind Member? I talk about destroy the member server, because I have the freedom to do it again if necessary, this server is not in production. Regards. > Date: Mon, 23 Mar 2015 19:28:19 +0000 > From: rowlandpenny at googlemail.com > To: samba at lists.samba.org > Subject: Re: [Samba] UID and GID mapping throw DC and Member DC > > On 23/03/15 19:15, Jhon P wrote: > > What do you mean with different winbinds? > > On the DC, winbind is built into the samba daemon, you do not run...