search for: using_rfc2307_on_a_samba_dc

Hello, I've finished a new HowTo this week (please proofread): https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC Regards, Marc

...ed and found a work around for today. Is there any tool in samba used to manipulate RFC2307 aka NIS Extensions that do not involve manipulating the ldap tree with a ldapmodify or directly editing the sam database with ldbedit? I see in the samba wiki that there is https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC that says ADUC can be used from Windows but I couldn't find anything comparable in Samba that would use msSFU30MaxUidNumber msSFU30MaxGidNumber or configures most of the NIS Entries.

I see that on the page https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Check_if_RFC2307_is_used_by_your_Domain_Controllers that idmap_ldb:use rfc2307 = yes is required on all DC when wanting to use RFC2307, but I can not find any mention of this parameter in the man pages or any explanation of exactly what it does anywhere else. I am using RFC2307 in my set up...

Hi! I'm trying to add a member to be used as fileserver, following the guides at: - https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server - https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC The AD server has been in use for month, but I can't get user information from the new member. The new member was joined to the directory, and nsswitch was configured. Running 'id username' returns 'No such user'. Running 'wbinfo -u' and 'wbinfo -g', 'wbin...

...AD users via "winbind -u" but "getent password" or "id <user>" does not work. The smb4.conf is following https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server I added RFC2307 attributes to the AD server according to https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC and installed RSAT on a Windows 7 desktop. I can see and manipulate "Unix Attributes" (giving UIDs/GIDs from 10000 upwards) and see them in the LDAP dump. In /etc/nsswitch.conf I have passwd: compat winbind group: compat winbind To the library.. the port installed nss_winbind....

...ir ADUC. That's why I strongly think and feel that this should be included in the "Using RFC2307 on a Samba DC" page of the Samba Wiki, which is functionally linked to the "Setup a Samba AD Member Server" page. Using RFC2307 on a Samba DC https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Configuring_RFC2307_and_NIS_Extensions_in_a_Samba_AD Setup a Samba AD Member Server https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server I suppose that the link to the Remote Server Administration Tools should also be included in the Wiki pages: Remote Server Administration Tools for...

...n with --use-rfc2307. On DC2 I made a join as DC exactly as https://wiki.samba.org/index.php/Join_a_domain_as_a_DC , I build samba4 with rfc2307 too. Also on additional joined Domain Controller I added the parameter idmap_ldb:use rfc2307 = yes according to the wiki https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC. I used ADUC to set Unix Attributes on a user account I installed and configured sssd 1.10 to pull the RFC2307 attributes in two DCs but the UID/GID mismatched. Do I missing some configuration? Best regards Dania

Correct me if I'm wrong? You say that by RSAT and NIS I add a uid and gid for each user in the DC. As mentioned here: https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Check_if_RFC2307_is_used_by_your_Domain_Controllers If I do this, users are added to the passwd file on the domain controller or saved to the db sam? Im go to try this tomorrow. That big problem is not provisioned with RFC2307!!!! > Date: Mon, 23 Mar 2015 20:55:23 +0000 > From: rowland...

Hello, I am running a Samba 4.1.6 AD DC on Ubuntu 14.04. I provisioned with --use-rfc2307 and have followed the instructions here to enable NIS Extensions: https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Configuring_RFC2307_and_NIS_Extensions_in_a_Samba_AD I can see the UNIX Attributes tab in ADUC and have all of the attributes populated. I am attempting to authenticate a Solaris server to AD, however it must use the unixUserPassword field for authenticating the user's password. Currently, uni...

...d check /etc/nsswitch.conf like other services and use ldap just like ssh would. the relevant part of my nsswitch.conf file looks like: passwd: compat ldap group: compat ldap shadow: compat ldap Do I need to install RFC2307 extensions per https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Administer_Unix_Attributes_in_Active_Directory and then add something like the following to my smb.conf file? idmap config DOMAIN:backend = ad winbind nss info = sfu Any advice is appreciated! Thanks! John

...iams wrote: > On Thu, 2014-10-30 at 13:41 -0300, Horacio G. de Oro wrote: >> Hi! I'm trying to add a member to be used as fileserver, following the >> guides at: >> - https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server >> - https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC >> The AD server has been in use for month, but I can't get user >> information from the new member. The new member was joined to the >> directory, and nsswitch was configured. Running 'id username' returns >> 'No such user'. >> Running 'wbinfo...

...e, than you had in your previous installation. The > easiest way is to do this via the Unix Attributes tab in ADUC. > > Beside the gidNumber, ADUC adds two more attributes: > msSFU30NisDomain: samdom > msSFU30Name: Domain Users > > > See > https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC > > > Regards, > Marc >

...that this should be included in the "Using RFC2307 on a Samba >> DC" page of the Samba Wiki, which is functionally linked to the "Setup >> a >> Samba AD Member Server" page. >> >> Using RFC2307 on a Samba DC >> https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Configuring_RFC2307_and_NIS_Extensions_in_a_Samba_AD >> >> Setup a Samba AD Member Server >> https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server >> >> I suppose that the link to the Remote Server Administration Tools >> should >> also be include...

...occur. Is that correct, just to be sure that I did understand how it works? As conclusion ==> I have to edit EVERY single user in my AD and activate [UNIX Attribute] --> NIS DOMAIN: MYDOM and assign a unique ID to it? Mirco I have done everything according https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC and afterwards with ADUC tool I assigned GID=10000 to the AD group "Domain Users". As you have seen on my initial posting, the setting was reflected to my AD users. I did not touch any setting in [UNIX Attribute] tab for my users though...

I have a test setup of samba 4.1.6 under ubuntu 14.04. When I do the query shown at https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Check_if_NIS_Extensions_are_installed_in_your_Directory it shows I have the ypServ30 container installed. If I change this query to -s sub then I find 3 entries in that subtree (see [1] below) However the full schema in /usr/share/samba/setup/ypServ30.ldif has 55 entries. The three records I ha...

On Tue, Jan 13, 2015 at 2:32 PM, Thomas Burger <tburger at eritron.de> wrote: > What works: ... > - getfacl / setfacl setting with domain object names. > > My issue: > Authorization is not working. For example: > - Write list / read list / valid users options in smb.conf are not > honored. ... > - Skipped the samba authorization and moved this to the filesystem

...t; exactly as >> https://wiki.samba.org/index.php/Join_a_domain_as_a_DC , I build samba4 >> with rfc2307 too. Also on additional joined Domain Controller I added >> the >> parameter idmap_ldb:use rfc2307 = yes according to the wiki >> https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC. I used >> ADUC >> to set Unix Attributes on a user account >> >> I installed and configured sssd 1.10 to pull the RFC2307 attributes >> in two >> DCs but the UID/GID mismatched. Do I missing some configuration? >> Best regards >> >> Dania &g...

...rongly think >and feel that this should be included in the "Using RFC2307 on a Samba >DC" page of the Samba Wiki, which is functionally linked to the "Setup >a >Samba AD Member Server" page. > >Using RFC2307 on a Samba DC >https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Configuring_RFC2307_and_NIS_Extensions_in_a_Samba_AD > >Setup a Samba AD Member Server >https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server > >I suppose that the link to the Remote Server Administration Tools >should >also be included in the Wiki pages: > >Re...

..."Using RFC2307 on a >Samba >>> DC" page of the Samba Wiki, which is functionally linked to the >"Setup >>> a >>> Samba AD Member Server" page. >>> >>> Using RFC2307 on a Samba DC >>> >https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Configuring_RFC2307_and_NIS_Extensions_in_a_Samba_AD >>> >>> Setup a Samba AD Member Server >>> https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server >>> >>> I suppose that the link to the Remote Server Administration Tools >>> should...

.... On DC2 I made a join as DC exactly as > https://wiki.samba.org/index.php/Join_a_domain_as_a_DC , I build samba4 > with rfc2307 too. Also on additional joined Domain Controller I added the > parameter idmap_ldb:use rfc2307 = yes according to the wiki > https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC. I used ADUC > to set Unix Attributes on a user account > > I installed and configured sssd 1.10 to pull the RFC2307 attributes in two > DCs but the UID/GID mismatched. Do I missing some configuration? > Best regards > > Dania Well, not configuration, but you seem to have mis...