search for: yyyyyyyyyy

...ystem for our company, which has about 60 users. I am new to asterisk, so thank you for your patience. I've stripped the sip.conf and the extensions.conf down to the bare minimum: Here is my extensions.conf file [globals] [general] autofallthrough=no [default] [fromprovider] exten => YYYYYYYYYY,1,Dial(SIP/151,20) [phones] exten => 150,1,Dial(SIP/150) exten => 151,1,Dial(SIP/151) exten => _X.,1,DIAL(SIP/${EXTEN}@xx.xxxxxx.net) and the matching sip.conf: [general] port=5060 bindaddr=0.0.0.0 ;10.8.0.34 srvlookup=yes disallow=all ;read somewhere you have to disallow everything fi...

...vate/idmap.ldb /usr/local/samba/private/; \ service samba4 start This results in a working configuration with the UID I'd expect: [root at dc1 ~]# id auser uid=41000(auser) gid=61000(domain users) groups=..... [root at dc1 ~]# net cache list | grep -e 1234 Key: IDMAP/SID2XID/S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-1234 Timeout: Thu Jun 18 11:02:33 2015 Value: 41000:U Key: IDMAP/UID2SID/41000 Timeout: Thu Jun 18 11:02:33 2015 Value: S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-1234 However, some time later, without any input from me at all, this changes to: [root at dc1 ~]# id auser uid=3000007(auser)...

...ere... Have you ever heard of 'Sysvol' ? Windows has the interesting fact that groups can 'own' things, Unix doesn't and domain groups need to 'own' things in 'Sysvol'. To explain how this works, lets look at a fragment of idmap.ldb: dn: CN=S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-500 cn: S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-500 objectClass: sidMap objectSid: S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-500 type: ID_TYPE_UID xidNumber: 0 distinguishedName: CN=S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-500 dn: CN=S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-512 cn:...

Am 18.09.19 um 16:17 schrieb Rowland penny: > On 18/09/2019 03:41, Simeon Peter via samba wrote: >> I would remove any uidNumber & gidNumber attributes from the >> following users (if set): >>> administrator >>> guest >>> krbtgt >> Administrator has a uidNumber since long time and owns some files. >> Are there disadvantages if I leave his

>From my .bash_history on the schema master DC, effectively: # sed -e 's/${DOMAINDN}/dc=MYDOMAIN,dc=MY,dc=TLD/g' \ -e 's/${NETBIOSNAME}/MYDOMAIN/g' \ -e 's/${NISDOMAIN}/MYDOMAIN/g' \ /usr/local/samba/share/setup/ypServ30.ldif > ypServ30-JMH.ldif # service samba4 stop # ldbmodify -H /usr/local/samba/private/sam.ldb

...ivate/; \ > service samba4 start > > This results in a working configuration with the UID I'd expect: > [root at dc1 ~]# id auser > uid=41000(auser) gid=61000(domain users) groups=..... > [root at dc1 ~]# net cache list | grep -e 1234 > Key: IDMAP/SID2XID/S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-1234 > Timeout: Thu Jun 18 11:02:33 2015 Value: 41000:U > Key: IDMAP/UID2SID/41000 Timeout: Thu Jun 18 11:02:33 2015 Value: > S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-1234 > > However, some time later, without any input from me at all, this changes to: > [root at dc1 ~]...

Hi again, Am Dienstag, 2. Februar 2016, 12:09:59 CET schrieb Rowland penny: > On 02/02/16 11:26, Markus Dellermann wrote: > > Am Dienstag, 2. Februar 2016, 09:51:03 CET schrieb Rowland penny: > >> On 01/02/16 22:24, Markus Dellermann wrote: [....] > Ok, there are two schools of thought here, you can give Administrator a > uidNumber attribute, but this, as far as Unix is

...tanceType: 4 whenCreated: 20151106115615.0Z uSNCreated: 3545 name: Administrator objectGUID: fc9d301b-d893-4cc7-8167-8d977c531afb badPwdCount: 0 codePage: 0 countryCode: 0 badPasswordTime: 0 lastLogoff: 0 lastLogon: 0 pwdLastSet: 130912845750000000 primaryGroupID: 513 objectSid: S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-500 adminCount: 1 logonCount: 0 sAMAccountName: Administrator sAMAccountType: 805306368 objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=samdom,DC=example,DC=c om isCriticalSystemObject: TRUE memberOf: CN=Administrators,CN=Builtin,DC=samdom,DC=example,DC=com memberOf: CN=Group...

...Conversion was returned as type 0, full token: Jun 13 09:52:06 dc1 smbd[9628]: [2015/06/13 09:52:06.129880, 0] ../libcli/security/security_token.c:63(security_token_debug) Jun 13 09:52:06 dc1 smbd[9628]: Security token SIDs (10): Jun 13 09:52:06 dc1 smbd[9628]: SID[ 0]: S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-1138 Jun 13 09:52:06 dc1 smbd[9628]: SID[ 1]: S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-513 Jun 13 09:52:06 dc1 smbd[9628]: SID[ 2]: S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-2613 Jun 13 09:52:06 dc1 smbd[9628]: SID[ 3]: S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-2615 Jun 13 0...

...nistrator has an other UID then 0 and I can not give the UID 0 to > two users. First thing, if there is a user called 'root' in AD, then delete it, the user root should only be in /etc/passwd. Next, if you open idmap.ldb, you will find an object like this: dn: CN=S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-500 cn: S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-500 objectClass: sidMap objectSid: S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-500 type: ID_TYPE_UID xidNumber: 0 distinguishedName: CN=S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-500 This the object for Administrator and maps the user to th...

Hello, I am using Winbind and Samba to tie in Linux VMs with a Windows DC for authentication. The UIDs are automatically assigned when I create a new user in Active Directory. I need to manually change the UIDs of my users to a UID that is used on another network so they can access a specific share. How can I change the UID successfully and still be able to authenticate with the DC. Also, how

On 25.02.2019 10:20, Rowland Penny via samba wrote: > On Mon, 25 Feb 2019 09:24:24 +0100 > Viktor Trojanovic via samba <samba at lists.samba.org> wrote: > > > >>>> I'm confused.. how is the choice of the idmap backend related to an >>>> AD DC use case? >>> Only in the case of wanting the same ID everywhere. >> In my understanding, the

On 13/06/15 00:01, Jonathan Hunter wrote: > On 12 June 2015 at 08:55, Jonathan Hunter <jmhunter1 at gmail.com> wrote: >> Thanks buhorojo. The sssd list came up trumps here. When changing ID >> mappings, the sssd database must be manually removed (rm >> /var/lib/sss/db/*). I now have sssd working again :) >> >> I shall keep an eye on the mappings during the

...was some old process using winbind rather than sssd (in nsswitch.conf I have 'files sss' for both passwd and group) - unfortunately no change. This is the same user, as shown by the SID ending -1234 here: [root at dc1 ~]# net cache list | grep -e -1234 Key: IDMAP/SID2XID/S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-1234 Timeout: Fri Jun 19 21:52:23 2015 Value: 3000007:B Key: IDMAP/GID2SID/3000007 Timeout: Fri Jun 19 21:52:23 2015 Value: S-1-5-21-xxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-1234 Key: IDMAP/UID2SID/41000 Timeout: Fri Jun 19 21:52:23 2015 Value: S-1-5-21-xxxxxxxxx-yyyyyyy...

....pol) Group information /etc/group: domain_users:x:410:root,admin,test domad:x:412:admin,root machines:x:408: smbusers:x:407: bash-2.05b# net groupmap list System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Users (S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-513) -> smbusers Power Users (S-1-5-32-547) -> -1 Print Operators (S-1-5-32-550) -> -1 Administrators (S-1-5-32-544) -> -1 Account Operators (S-1-5-32-548) -> -1 Domain Admins (S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-512) -> domadm Domain Guests (S-1-5-21-xxxxxxxxxx-y...

...ed on > another network so they can access a specific share. How can I change the > UID successfully and still be able to authenticate with the DC. Also, how > can I manually assign UIDs in the future for new users? You cannot, the 'SID' will be in the format: S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-RID The 'xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz' is what identifies the domain and the 'RID' will be (for normal users and groups) be a unique number that is equal to or larger than '1000'. if you change the 'xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz' it becomes a d...

Thanks buhorojo. The sssd list came up trumps here. When changing ID mappings, the sssd database must be manually removed (rm /var/lib/sss/db/*). I now have sssd working again :) I shall keep an eye on the mappings during the day today.. On 12 June 2015 at 07:36, buhorojo <buhorojo.lcb at gmail.com> wrote: > On 12/06/15 01:34, Jonathan Hunter wrote: >> >> On 11 June 2015 at

Thanks, Rowland , 'net cache flush' solved my problem. but I found that I can't access any share in \\myshare. some related configurations in my smb,conf .... access based share enum = yes hide unreadable = yes username map = /etc/samba/user.map I can't see any share folder of my fileserver in fsmgmt.msc. and I run "smbstatus -b" PID Username Group

...o they can access a specific share. How can I change the > > UID successfully and still be able to authenticate with the DC. Also, how > > can I manually assign UIDs in the future for new users? > > You cannot, the 'SID' will be in the format: > > S-1-5-21-xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz-RID > > The 'xxxxxxxxxx-yyyyyyyyyy-zzzzzzzzzz' is what identifies the domain and > the 'RID' will be (for normal users and groups) be a unique number that > is equal to or larger than '1000'. > > if you change the 'xxxxxxxxxx-yyyyyyyyyy-zzzzz...

...e.com:YYYYYYYY:XXXXXXXXX@sip.broadvoice.com/XXXXXXXXX [out_sipgate] type=friend username=XXXXXXXXXX secret=XXXXXXXX host=sipgate.de fromuser=XXXXXX fromdomain=sipgate.de nat=no canreinvite=yes insecure=very qualify=yes context = from_sipgate [out_broadvoice] type=friend username=XXXXXXXXXX secret=YYYYYYYYYY host=sip.broadvoice.com fromuser=YYYYYYYYYY outboundproxy=proxy.dca.broadvoice.com fromdomain=sip.broadvoice.com nat=no canreinvite=yes insecure=very qualify=yes context = from_broadvoice dtmfmode=inband dtmf=inband (some lines for the internal sip-phones follow, but nothing special) -------------...