similar to: getting GROUPS under Samba

Hi, my etc/pam.d/login file is given at the end. i am using winbind and single sign on is working now. on the fly directory creation also works. when i check the /var/log/messages i have this error in there 1.Jun 23 05:40:46 niit158VM pam_winbind[1696]: user 'linwin/zubair'granted acces 2.Jun 23 05:40:46 niit158VM pam_winbind[1696]: user 'linwin/zubair' granted acces

Hi, I have a active directory domain of windows 2000. inside AD i have three user groups. Teachers, students and administration. every user has his home directory created on the fly. the umask is 0022. now what i want is that apart from users accessing there home directories there should be some other folders too which they can access. like teachers would like to access the

Hi, I want to achieve, that the IT staff could add machines (2000/XP) to samba-3 (LDAP backend) on the fly. Creating a new machine account to LDAP requires special access to samba (uid=0). In samba-2.2.x was a great parameter called "domain admin group". So everyone, who belonged to the specified group and root (uid=0) could modify LDAP. Others got message - "cannot access LDAP

samba@samba.org Serge Gavrilov <serge@pdmi.ras.ru> Ed Schernau <ed@schernau.com> Jeremy Allison <jeremy@valinux.com> Cristian POP <cpop@compas.dntcj.ro> Ed Schernau <ed@schernau.com> John Evans <samba@kilnar.com> David Bullock <davidb@loftuscomp.com.au> Gunnar Lindholm <gunnar.lindholm.320@student.lu.se> Junaid Iqbal

Hi all we have samba 3.0.21c with OpenLDAP backend as PDC and also 4 BDC's Suddenly on PDC we are getting these error messages in /var/log/messages I am unable to register any system to the domain. niether able to logon to the domain. ########################################################################################## Feb 15 11:14:32 msdpl smbd[18212]: [2007/02/15 11:14:32, 0]

Hi, 1. I want to migrate NT to Samba 3 domain without needing to rejoin all machine (using same domain name and SID). just curious, machine account should belong to what group sid? does it matter if belong to any value? 2. I just examine output of pwdump, some of member domain or even NT BDC is has "*****" in password field which means this account was disabled. I've verified that

HI, when i try to execute the kinit command on my Red hat 9 system with samba 3 i get the following error [root@niit125 root]# kinit junaid@NIIT.EDU.PK Password for junaid@NIIT.EDU.PK: kinit(v5): Clock skew too great while getting initial credentials so how do i solve the clock skew problem cause i have checked the time on both of them it is the same. the net ads join command doesnt

Anyone dare to explain? For #2 I'm not using rpc vampire because it can't migrate hash password. ---- Hi, 1. I want to migrate NT to Samba 3 domain without needing to rejoin all machine (using same domain name and SID). just curious, machine account should belong to what group sid? does it matter if belong to any value? 2. I just examine output of pwdump, some of member domain or even

I have just set up 3.0.4 as AD memberserver on SuSE9.1 and try to set some access to a folder. getent group and getent passwd works fine, but "chgrp 'NAT-SDU%someADgroup' /data" fails with "chgrp: invalid group name 'NAT-SDU%someADgroup'". Strangely enough "chgrp 'NAT-SDU%some-otherADgroup' /data" works just fine. "chown

Hi all, An enterprise planed to migrate its fully MS Windows NT domain to a pure SAMBA one. I would like to gain some experience of those one who allready worked on a same architecture. This company is spawn in many geographic parts : One primary site hosting one PDC and a BDC (with WINS services) , many other site hosting a BDC (with WINS replicator) and sometimes some "members

I'm in the process of learning Samba and evaluating it as a possible replacement for Windows NT servers in our office next year. I have set up a small test network comprised of one NT 4 (SP6a) Workstation, one Windows 2000 Pro (SP3) and one Fedora Core 3 running samba 3.0.11 as a PDC. I'm using LDAP as the passdb backend with smbldap-tools 0.8.7-1. The Windows 2000 Pro machine can join the

the name of my active directory domain is niit.edu.pk so what should i write in this parameter default_relam = YOUR.KERBEROS.REALM also while trying to join the domain i eecute this command kinit Administrator@your.keberos.REALM My shell gives me the error cannot find kinit. can any one tell me where in my file system can i find kinit Regards ===== Sahibzada Junaid Noor Ph #

Hi, -----Original Message----- From: John H Terpstra [mailto:jht@samba.org] > "domain admin group" removed > > Because you now have something much more powerful that provides real NT > Groups to your NT/200x/XP clients. But if I use LDAP for both Samba and system auth. The groups, what I added with base.ldif (idealx) exist in samba and system. for example "getent

I had a simular problem in a single server (unix) environment with PC clients although we were using NFS stack for drive maps. The issue is came down to this: a MS-DOS pathspec cannot exceed 64 characters, with the pathspec looking something like 'server_name:\directory\dir...\...\filename.ext". Your NT and Samba systems are probably selected a SMB protocol like Core Plus or LAN Man 1.0,

Hi, I've a samba 3.0.24 server running in a debian "alike" OS with a (Open)LDAP backend and I'm having the following problem: I have LDAP users that belong to more than one (POSIX) group. For instance, I have a user2 that belongs to group "users" and "grupo2" and I have a share with the following ACL settings: getfacl /home/shares/share1/ getfacl: Removing

Has anyone worked out a way around the 1+16 group limit imposed on Solaris in regards to samba. Our situation is that users only see the Solaris 2.6 server via Samba - ie. no user has telnet or general unix access to the server. Is there a way using Samba to allow users to belong to more than 16 secondary groups (ie. bypassing the underlying unix group limitation). I am aware that you can

Hi all, I am in the process of moving our schools student file server to Samba from Win2k3 and I want to replicate the setup we currently have which puts students home directories under their graduation year like this: \students\2008\username Under AD students are in OU's based on grad year. We're using winbind (with idmap_rid tdb) to pull users and groups from AD, 'getent

Hey All, I have successfully been able to integrate AD authentication into Samba, but today I came across and unusual problem. First I should mention I am using NT ACL support and setting up the ACL's on the Linux box. The problem I have is Samba/Winbind will correctly recognize and authenticate some AD groups I have set up but there a some it will not. The AD groups have been setup as

On 02/06/20 13:08, Rowland penny via samba wrote: > On 02/06/2020 12:16, Sebastian Arcus via samba wrote: >> Does anybody have any idea what might be happening here? I've just >> copied the configs and databases and Linux users to another machine >> with Samba 4.6.7 - and classicupgrade does the same thing - it doesn't >> import any users. I am guessing that

I am currently running Samba 2.2.4 on a RH 7.1 box acting as a PDC with two Win2k test clients attaching to it. Users authenticate to the PDC via an LDAP server running on the PDC and that works ok. I can also join the domain with no problems. What I am trying to accomplish is to have a domain user or better yet a group of domain users, be able to log into the win2k box and have the linux