similar to: RID Question

I have ACL's enabled and am getting a new error, in the Samba log (V 3.0.1Pre1, when attempting to set permissions on a file through Win2000: get_domain_user_groups: primary gid of user [terry] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that Do I need to create a group on the windows(2000) side? The entries in the domaingroup.map

Is the rid of a user required to be 2*uid+1000 in HEAD when using an ldap backend? Is it still necessary that users also exist in /etc/passwd? I'd like to replace NIS and win NT domain auth with ldap, and want to keep the current unix uid's and the NT rid's, so the migration is transparent to the end users. -david

I have been searching for information about implementing Logon Hours with a Samba 2.2.5 PDC (or for that matter any version of SAMBA) but haven't yet noticed any postings or correspondence. I have set up a a Samba PDC and have mapped shares, authenticated users, blah blah blah, .... everything seems to work fine. I checked with 'rpcclient' to see what sort of information is

Hello!! A customer of mine recently experienced a catastrophic failure of their PDC, and their BDC is not running as stable as we'd like. They've agreed to move PDC/BDC schema to Linux (currently they run NT4). So the question is: having ONLY a BDC available for SAM database, how do I extract that so I can replicate that to Samba and do a "transparent" upgrade (if possible)?

Hi, Is there any way to use an external program to validate users' passwords? It would be something like an exec command that would return the authentication result. What I'm willing is to be able to authenticate a samba user against a radius server. Why? Because I get to use tokens (one life time password) against different realms. Has anybody an idea? Thank you -------------- next

Hi! How can I maintain users old NT RIDs while migrating to Samba PDC when they start from 1000. The RID to UID conversion algorithm is RID = 2 * UID + 1000 so the user with RID of 1000 would be root (0 * 2 + 1000 = 1000) on Unix. Maintaining the old RIDs is essential for migrating on-the-fly, because re-adding hundreds of computers to domain and losing local user profiles is not an option. Any

Hi. I'm still having problems to login with Windows 2000 SP2 into my Samba PDC. The idealx howto says: "user and group rids must be given in hexadecimal in LDAP", however it also says: "However, the rids were written in decimal in LDAP. So at least 2.2.3-pre, Samba do not read them as hexadecimal anymore.". What's the case for 2.2.4? hex or dec? Alexander Skwar --

Hi * I encounter severe problems with changing ACL settings in Samba 3.0.2a after migrating users from NT PDC to LDAP-SAM. I did not find anything about this in the mailing list yet. However, I have no idea (if) what I am doing wrong here. Although I can hardly believe that I am the first one to trigger that bug, it looks like a problem with the sid_to_gid routine. So please take a look at that:

LS. After upgrading from samba 3.0.7 to samba-3.0.9 it appears that algorithmic rid base is now checked to be larger then 1000 . Because of this I get the follwoing error when trying to log in: [2004/11/19 18:26:50, 2] lib/smbldap.c:smbldap_search_domain_info(1374) Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=<DOMAIN>))] [2004/11/19 18:26:50, 2]

Hi, is there a HOWTO about migrating from Samba TNG to Samba 2.2? I have problems with the user profiles on the Windows client machines, they are recreated on login on the new Samba (2.2.5) machine. I copied the SID (with smbpasswd), /etc/passwd and smbpasswd to the new machine, and everything works fine, except for the user profiles. Currently we are not using server-saved profile, but we will

Hello, I wondered how domain groups are handled with Samba (2.2.5): I set up a Samba DC and have serveral XP clients. On the Samba machine I greated a group named "ntadmins" and put the following line in my smb.conf: domain admin group = @ntadmins On of my domain admins is user "wojtek" which has the primary group "user" but is also memeber of the

Hello list, I have a few questions to ask... I am about to migrate from Samba 2 to 3 (3.5.9). I am going to use LDAP as backend in the future and came across something I don't understand. As far as I know the 'old' way to generate RIDs for users is to take their uidnumber, multiply it by two and add 1000. For computer accounts it would be 1001 instead of 1000. I am now trying to

When I set up my initial users for the Samba domain i did not realize that RIDs were supposed to be dynamic. I was creating the user as a posixAccount in LDAP, and then adding the Samba elements via a script that I wrote. Their RIDs are the same as their UID. For instance if I have a user with uidNumber 1036, her SID would be <domain-SID>-1036. This is fine except for idmapping for

Hello everybody. I'm trying to create a local group with this command and I get this error: net sam createlocalgroup peocio [2007/06/28 11:03:16, 0] passdb/pdb_interface.c:pdb_new_rid(1066) Trying to allocate a RID when algorithmic RIDs are active [2007/06/28 11:03:16, 0] groupdb/mapping.c:pdb_default_create_alias(468) Could not allocate a RID -- wasted a gid :-( Am I missing anything?

Has anyone seen this: http://www.microsoft.com/windows/Embedded/sak/evaluation/compare/advantage.asp And has anyone from the Samba team posted a response? It seems like some of the information presented there is contrary to what I know about Samba. ERX

I am considering allowing (relitivly) untrusted local users onto my fileserver, so they can use SFTP to access their home directories. I have a custom shell, (a taint-mode enabled perl script) that allows users to change their password, which I have modifed to only allow a '-c' command for the sftp-server. I have also disabled TCP port forwarding. However, some reading of the OpenSSH

As I have mentioned earlier on this list, I want to allow (relitivly) untrusted local users to SFTP to my server, as a secure method of remote file access. What I would like to do is to keep users within their home directory. I don't mind that it follows symlinks (if fact its probably a requirement), but some basic restriction on what users can see/access would be handy. The check I

Dear all, I have 3 backbones for my local network. 1st backbone: down 1024kbps, up 1024kbps through eth1 2nd backbone: down 2048kbps, up 2048kbps through eth2 3rd backbone: down 1024kbps, up 128kbps through eth3 Local network: 192.168.0.0/16 through eth0 Router: Linux Slakware 11 with iproute2 Please let me know how to shape both incoming and outgoing traffic for this case. LARTC doc only

Hi folks, I'm using Samba 3beta running on RH 8.0 and I'd like to authentificate against a Microsoft AD. This all works very well, except that not all AD User are mapped to my Unixbox! When starting getent passwd, my UnixBox shoiws just my User from passwd and some of the AD User - not all!! Looking through my User with the command wbinfo -u all AD user are shown correctly! Anybody

Hi everyone, Iam quite new to Samba, Iam trying to set it up as a PDC. When I do: smbpasswd -m machine -a user I get an error message like this: tdbsam: no NUA rids available, cannot add user paulien$! Failed to add entry for user paulien$. Failed to modify password entry for user paulien$ What does this mean? I tried searching on google and some other sites, but don;t seem to find the correct