search for: truevin

Rowland, I commented out what you asked me to, no change. # Global parameters [global] workgroup = TRUEVINE realm = TRUEVINE.LAN netbios name = DC01 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbi$ # idmap_ldb:use rfc2307 = yes # idmap config *:backend = tdb # idmap config *:range =...

...h. It has been a week and not even rolling back to 4.4 fixed it. What should my next steps be? I attached the server configuration file for reference. Note that it has run this way for a year without a hitch and nothing has been changed since day 1. # Global parameters [global] workgroup = TRUEVINE realm = TRUEVINE.LAN netbios name = DC01 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes idmap config *:backend = tdb...

On Sat, 14 Jan 2017 11:17:57 -0500 Ryan Ashley via samba <samba at lists.samba.org> wrote: > Rowland, I commented out what you asked me to, no change. > > # Global parameters > [global] > workgroup = TRUEVINE > realm = TRUEVINE.LAN > netbios name = DC01 > server role = active directory domain controller > server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, > drepl, winbi$ > # idmap_ldb:use rfc2307 = yes > # idmap config *:backend =...

...printer in the organization and I believe it is related. Below is all pertinent information that I can think of. The user and group ID's are from AD (uidNumber/gidNumber) and match on both member servers. root at ps01:~# cat /etc/samba/smb.conf [global] netbios name = PS01 workgroup = TRUEVINE security = ADS realm = TRUEVINE.LAN encrypt passwords = yes dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab idmap config *:backend = tdb idmap config *:range = 70001-80000 idmap config TRUEVINE:backend = ad idmap config TRUEVINE:schema_mode...

...rolling back to 4.4 fixed it. > What should my next steps be? I attached the server configuration file > for reference. Note that it has run this way for a year without a > hitch and nothing has been changed since day 1. > > # Global parameters > [global] > workgroup = TRUEVINE > realm = TRUEVINE.LAN > netbios name = DC01 > server role = active directory domain controller > server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, > drepl, winbindd, ntp_signd, kcc, dnsupdate > idmap_ldb:use rfc2307 = yes >...

...ed by users and come out the same? To be specific, these are the commented lines in my config file. They look like what you recommended to the user Richard to ensure consistent UID and GID numbers. # idmap config *:backend = tdb # idmap config *:range = 2001-10000 # idmap config TRUEVINE:backend = ad # idmap config TRUEVINE:schema_mode = rfc2307 # idmap config TRUEVINE:range = 10001-20000 Lead IT/IS Specialist Reach Technology FP, Inc On 01/14/2017 11:40 AM, Rowland Penny via samba wrote: > On Sat, 14 Jan 2017 11:17:57 -0500 > Ryan Ashley via samba <samba at...

I forgot about ldbsearch. Here is a dump of xid numbers. root at dc01:~# ldbsearch -H /var/lib/samba/private/idmap.ldb | grep xidNumber xidNumber: 3000028 xidNumber: 3000013 xidNumber: 3000033 xidNumber: 3000003 xidNumber: 3000032 xidNumber: 3000023 xidNumber: 3000019 xidNumber: 3000010 xidNumber: 65534 xidNumber: 3000031 xidNumber: 3000022 xidNumber: 3000026 xidNumber: 3000017 xidNumber: 3000027

Alright, even with that change they cannot access the share. I do not have SELinux on this system to my knowledge. The only change since my initial post was changing SAMDOM in my config to TRUEVINE as was pointed out. I then rebooted the server for good measure. People in the AD group FBC are still debied access to the FBC share and people in the AD administration group are still denied access to the staff share. Sent from my Verizon Wireless 4G LTE smartphone <div>-------- Original...

...ng the share. I have configured ACLs and the box resolves users and groups. Everything works, except for the shares. Below I attached all of the information I believe to be useful. Ask if you need more, and thank you for your help! smb.conf: ====== [global] netbios name = FS01 workgroup = TRUEVINE security = ADS realm = TRUEVINE.LAN encrypt passwords = yes idmap config *:backend = tdb idmap config *:range = 70001-80000 idmap config SAMDOM:backend = ad idmap config SAMDOM:schema_mode = rfc2307 idmap config SAMDOM:range = 500-40000 winbind nss info = rfc2307 wi...

...rd/reverse zones zone "localhost" { type master; file "master/localhost.zone"; }; zone "0.0.127.in-addr.arpa" { type master; file "master/0.0.127.zone"; }; root at dc01:~# cat /etc/dhcp/dhcpd.conf ddns-update-style none; option domain-name "truevine.lan"; option domain-name-servers 172.16.0.1,172.16.0.2; default-lease-time 600; max-lease-time 7200; authoritative; log-facility local7; subnet 172.16.0.0 netmask 255.255.252.0 { range 172.16.2.1 172.16.2.100; option routers 172.16.0.254; option broadcast-address 172.16.3.255; dd...