search for: someotheruser

...ails for user1 (see below) are stored in /home/domain.at/user1, while the home dir defined in LDAP is /afs/domain.at/home/user1 (virtual users, so only dovecot, not the system does know about this user and home dir). If I do create a .k5login file in /home/domain.at/user1 with the content "someotheruser at DOMAIN.AT", then someotheruser should be able to authenticate himself as user1 via GSSAPI. However, this .k5login file is completely ignored. So it seems to me that the home is not passed on to SASL. If I do add ldap to my nsswitch (for testing only) I additionally have real system user...

...et up a simple file server with SSO capabilities to a 2K AD domain. So far, the Samba/Winbind side seems great. I am able to map shares to windows workstations based on the windows uid/gid without a hiccup. The wbinfo [-u|-g] and gentent [passwd|group] commands work great. # wbinfo -u someuser someotheruser yetanotheruser .... # wbinfo -g | more Domain Guests Domain Users Schema Admins .... # getent passwd someuser:x:15007:10011::/home/UNICITY/someuser:/bin/bash someotheruser:x:15008:10011::/home/UNICITY/someotheruser:/bin/bash yetanotheruser:x:15009:10011::/home/UNICITY/yetanotheruser:/bin/bash ......

...strict anonymous = 2 [someshare] comment = This is a share for some share path = /var/someshare read only = no writable = yes public = no guest ok = no guest only = no valid users = someuser browsable = yes force user = someotheruser force group = someothergroup browseable = yes Testing the configuration with testparm, gives this output: testparm Load smb config files from /etc/samba/smb.conf Loaded services file OK. Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility fallback) Server role: ROLE_STA...

...(advertisement) 2.> You can specify a member sequence with an agument on the memeber function like this: member => SIP/user,1 ;(ringing with first attempt) member => SIP/someuser,2 ;(ringing with first attempt) member => SIP/otheruser,3 ;(ringing with first attempt) member => SIP/someotheruser,3 ;(ringing with first attempt) But this sequence is not working as I aspected. I aspected that it's working like: member => SIP/user,1 ;(ringing with first attempt) member => SIP/someuser,2 ;(ringing with second attempt) member => SIP/otheruser,3 ;(ringing with third attempt) member...

Hi, I am trying to use dovecot with my virtual-hosting setup. I have all users in LDAP like uid=user,dc=domain.tld,o=myorganization for the user with the mail-address user at domain.tld. This is also the username that user should use for login, but it is nowhere in the ldap-db in this form together, just user and domain at their own places. Is it possible to authenticate with

...0 - 99999 I suggest, leave some room for your "linux users" Like : idmap config *:range = 2000 - 99999 In addition, also, run : net cache flush And run : systemctl stop winbind sleep 1 systemctl start winbind Then.. what does : id Administrator Tells you now. And id someOtheruser? Now please note also, your using 4.5.8 from debian. I dont know how much winbind fixed they also pickuped from samba but 4.5.8 can be tricky. I suggest, have a good look at the winbind debian bugs and samba changelog 4.5.9 for example. You have a few options. 1) Compile samba yourself. ( then...

# wbinfo -n working-group | awk '{print $1}' | awk -F '-' '{print $8}' 69153 # wbinfo -n problem-group | awk '{print $1}' | awk -F '-' '{print $8}' 136399 The OS can use that group:- # chgrp problem-group test.txt # ls -asl test.txt 0 -rw-r--r-- 1 root problem-group 0 Aug 25 17:55 test.txt # It's not a case that the group is unavailable...

We are currently in the process of replacing some of our file servers with Active Directory joined Samba servers. However, during testing we have noticed behaviour that has caught us off guard. Changes in user group membership in AD do not show up on our file servers. Specifically, changing a user's groups in AD won't affect group membership on the Samba server once the user has

I have a question on Asterisk and whether it will work with the following design. Install ASTERISK on the external side of the Network. Purchase an AudioCodes 4/8 port Analog Fx0 gateway. So far everything seems straight forward. Here is the twist. The company currently has Cisco Call Manager 3.3 which does not support SIP Trunking. But it does have a VG248. I would like to place 4 lines

...t;kacper_wirski at AD.MYDOMAIN.COM": [DOMAIN\kacper_wirski at vs-files ~]$ kinit -V Using principal: kacper_wirski at AD.MYDOMAIN.COM Password for kacper_wirski at AD.MYDOMAIN.COM: I don't know what gives. After full reboot it still works for "this" user. When I log as DOMAIN\someotheruser it behaves exactly the same (first adds DOMAIN prefix, then when once ticket is obtained correctly, it seems to work...) kerberos ssh authentication (windows via putty to centos with samba 4) works perfectly: Nov 01 12:21:29 vs-files.ad.mydomain.com sshd[1024]: Authorized to DOMAIN\\kacper_wi...

..."linux users" > Like : idmap config *:range = 2000 - 99999 > > In addition, also, run : net cache flush > And run : > systemctl stop winbind > sleep 1 > systemctl start winbind > > Then.. what does : id Administrator > Tells you now. > And id someOtheruser? > > Now please note also, your using 4.5.8 from debian. > I dont know how much winbind fixed they also pickuped from samba but 4.5.8 can be tricky. > I suggest, have a good look at the winbind debian bugs and samba changelog 4.5.9 for example. > > You have a few options. > 1...

Hello, I'm setting up AD user logins for centos 7.4 box. I've almost managed to do everything the way I want and the way I think it should be, but I'm missing last piece:   For ssh access I read parts of the https://wiki.samba.org/index.php/OpenSSH_Single_sign-on Most docs recommend using setting in smb.conf: winbind use default domain = no that means that all domain users have