search for: smbadm

...Win2000 clients. I believe that I have set the Linux Samba machine up correctly. For your review, these are the steps that I have taken: * compile Samba 2.2.2 from source, no extra options. * make; make install. (to /usr/local/samba) * groupadd machines (for my machine trust accounts) * groupadd smbadm (samba domain admin group) * useradd -d /dev/null -s /bin/false -g machines TEST$ * smbpasswd -m -a TEST * useradd -d /home/gellis -s /bin/bash -g smbadm gellis * smbpasswd -a root * smbpasswd -e root * smbpasswd -a gellis * smbpasswd -e gellis * On W2k client, try to join domain SAMBA with userna...

...ne. As I understood, this can be achieved by adding every domain user in the "Domain Admins" group. Am I right ? Is there a better way to do this ? Anyway, after reading groupmapping.html from the howto-collection, I did this: net groupmap add ntgroup="Domain Admins" unixgroup=smbadm eos:~# grep smbadm /etc/group smbadm:x:1003:toto,root eos:~# net groupmap list System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Admins (S-1-5-21-3749086184-651259868-1278831297-3007) -> smbadm Domain Admins (S-1-5-21-3749086184-...

Hi, I'm running a Active Directory domain on Samba 4.0.1 and I'm trying to join a Solaris 11 machine this domain: # smbadm join -u Administrator DOMAIN After joining DOMAIN the smb service will be restarted automatically. Would you like to continue? [no]: yes Enter domain password: Locating DC in DOMAIN ... this may take a minute ... Joining DOMAIN ... this may take a minute ... failed to join DOMAIN: UNSUCCESSFUL Plea...

...m debug pid = Yes debug uid = Yes large readwrite = Yes time server = Yes socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 load printers = No # character set = ISO8859-15 # domain admin group = @smbadm logon path = logon home = domain logons = Yes use spnego = no os level = 64 wins support = Yes passdb backend = ldapsam:ldap://localhost # ldap port = 389 # ldap server = sonne.tronicplanet.de ldap suffix = dc=troni...

...interfaces only = Yes encrypt passwords = Yes passwd program = /usr/bin/passwd %u passwd chat = *password* %n\n *password* %n\n *successful* username level = 5 unix password sync = No log level = 2 syslog = 2 log file = /var/log/samba/log.smbd printcap name = lpstat domain admin group = @smbadm add user script = /usr/sbin/useradd -d /dev/null -g machines -c '%u machine account' -s /bin/false -M %u logon script = scripts\startup.cmd logon drive = h: logon home = \\%N\%u\xphome domain logons = Yes os level = 65 preferred master = True domain master = True wins support = Yes...

Hi there. I installed OpenSolaris 10 on a test machine, and I'm trying to make it join my samba domain. Unfortunately, the only references I can find about joining a domain on Solaris are related to joining an AD domain. I just want to join a samba domain (Windows NT/2000 style) smbadm -u name DOMAIN always fail with: failed to find any domain controllers for DOMAIN I wanted to experiment with the CIFS kernel ... Thanks in advance Jean-Yves

...d %u passwd chat = Newpassword* %n Re-enternewpassword %n *passwd:allauthenticationtokensupdatedsuccessfully update encrypted = Yes passwd chat debug = yes # Additional unix password sync = yes admin users = markus domain admin group = @smbadm domain logons = yes wins support = yes add user script = /usr/sbin/useradd -g machines -c sambaclient -d /dev/null -s /bin/false %m$ nt acl support = no logon script = login.cmd Can someone help me please. Thx Markus

...ng "getent passwd username" does not return anything on the >> client machine. > > Then you have a problem, your users and groups seem to be unknown to > the underlying OS. > >> The Solaris CIFS service, aka smb/server, is joined to the domain >> with "smbadm join -u Administrator example.com" and once joined you >> can query AD users using "idmap show -cV user at example.com". By >> default, idmapd uses "Ephemeral mapping", so AD users are represented >> locally by a randomly-chosen, high-numbered uid rather t...

...bind interfaces only = Yes encrypt passwords = Yes passwd program = /opt/samba/bin/change_LDAP_passwd.sh %u passwd chat = *New*Password:* %n\n *Re-enter*new*Password:* %n\n *changed* unix password sync = Yes log level = 2 log file = /opt/local/samba/var/log.%m max log size = 50 domain admin group =?smbadm domain logons = Yes os level = 80 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes ldap server = 192.168.1.1 ldap port = 389 ldap suffix = o=myorg,o=root ldap admin dn = uid=admin,ou=People,o=myorg,o=root ldap ssl = no hosts allow = 192.168.1.0/255.255.255.0 profile acl...

...bind interfaces only = Yes encrypt passwords = Yes passwd program = /opt/samba/bin/change_LDAP_passwd.sh %u passwd chat = *New*Password:* %n\n *Re-enter*new*Password:* %n\n *changed* unix password sync = Yes log level = 2 log file = /opt/local/samba/var/log.%m max log size = 50 domain admin group =?smbadm domain logons = Yes os level = 80 preferred master = Yes domain master = Yes dns proxy = No wins support = Yes ldap server = 192.168.1.1 ldap port = 389 ldap suffix = o=myorg,o=root ldap admin dn = uid=admin,ou=People,o=myorg,o=root ldap ssl = no hosts allow = 192.168.1.0/255.255.255.0 profile acl...

...mb.conf I sent is from the DC; the OpenSolaris-based machine is not using Samba but is using the Solaris CIFS Service instead: http://docs.oracle.com/cd/E19120-01/open.solaris/820-2429/configuredomainmodetask/index.html The Solaris CIFS service, aka smb/server, is joined to the domain with "smbadm join -u Administrator example.com" and once joined you can query AD users using "idmap show -cV user at example.com". By default, idmapd uses "Ephemeral mapping", so AD users are represented locally by a randomly-chosen, high-numbered uid rather than their actual uid as sto...

...ILTIN\Replicators BUILTIN\Guests BUILTIN\Power Users BUILTIN\Print Operators BUILTIN\Administrators BUILTIN\Account Operators BUILTIN\Backup Operators BUILTIN\Users but: $ net groupmap list System Operators (S-1-5-32-549) -> -1 Domain Admins (S-1-5-21-1271412688-1617304077-3128757989-512) -> smbadm Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> nogroup Power Users (S-1-5-32-547) -> -1 Domain Users (S-1-5-21-1271412688-1617304077-3128757989-513) -> users Print Operators (S-1-5-32-550) -> -1 Administrators (S-1-5-32-544) -> -1 Account Operators (S-1-5-32-548) ->...

...rs and groups. > > Running "getent passwd username" does not return anything on the > client machine. Then you have a problem, your users and groups seem to be unknown to the underlying OS. > The Solaris CIFS service, aka smb/server, is joined to the domain > with "smbadm join -u Administrator example.com" and once joined you > can query AD users using "idmap show -cV user at example.com". By > default, idmapd uses "Ephemeral mapping", so AD users are represented > locally by a randomly-chosen, high-numbered uid rather than their &g...

...path = /samba/public > read only = No > guest ok = Yes > > [apps] > comment = Network appplications share > path = /samba/applications > guest ok = no > writeable = no > printable = no > write list = @smbadm > > ---smb.conf--- > > /etc/passwd: > > ---passwd--- > alice$:x:1011:104::/dev/null:/bin/false > whiterabbit$:x:1012:104::/dev/null:/bin/false > ---passwd--- > > Output of pdbedit -L: > > ---pdbedit--- > whiterabbit$:1012: > andrea:1001: > root:0: &gt...

...pport = yes os level = 100 domain master = yes local master = yes preferred master = yes domain logons = yes logon path = \\%N\%U\.ntprofile logon home = \\%N\%U\.ntprofile logon drive = M: logon script = logon.bat domain admin group = @smbadm Manager name resolve order = lmhosts host wins bcast dns proxy = no preserve case = yes short preserve case = yes unix password sync = true passwd program = /usr/bin/passwd %u passwd chat = *New\spassword:* %n\n *Re-enter\snew\spassword:* %n\n ....

----- Original Message ----- > From: "samba" <samba at lists.samba.org> > To: "samba" <samba at lists.samba.org> > Sent: Tuesday, October 10, 2017 2:23:02 AM > Subject: Re: [Samba] Opensolaris-ish joins but does not seem to be valid > On Mon, 9 Oct 2017 18:04:45 -0500 (CDT) > Mike Ray via samba <samba at lists.samba.org> wrote: >