similar to: How to provide local auth and remote domain access.

When trying to browser users or groups on the server I see these messages in the log file. [2004/09/02 10:40:15, 0] lib/smbldap.c:smbldap_search_suffix(1101) smbldap_search_suffix: Problem during the LDAP search: (Size limit exceeded) [2004/09/02 10:40:15, 0] passdb/pdb_ldap.c:ldapsam_setsampwent(1173) ldapsam_setsampwent: LDAP search failed: Size limit exceeded We are unable to browse

I have a Samba 3.0.3 system setup with LDAP. I can set the "min password length" in smb.conf and the system will respect that but when changing the password from win2k and giving it a smaller password than set it always display "password must be a minimum of 5 characters" It will display this even if "min password length" is set to 7. You won't actually be able

Hi group, I have a Linux server running 2.0.5a and setup as workgroup ADMIN. It's set to do domain logins, local, preferred and domain master are on and security is set to user level. We have the local workgroup ADMIN here on x.x.3.x subnet and on x.x.4.x there is an NT PDC that controls the MSHIP domain. The local 98 users login to ADMIN and can browse the servers across the subnet in

Anyone have any idea when 2.2 might go into beta or even a release? Spring, Summer, Fall? -- ================================================================== George Farris farrisg@mala.bc.ca Computer Support Cowichan "For every vision - there is Malaspina University-College an equal and opposite revision"

Hello, At one time I installed an alpha of samba-3.0 and it had a smbgroupedit command that mapped unix and windows groups via webmin. This seems to be missing in beta3, has it been depreciated? Also I can't seem to get the group map to take effect unless the unix group is the users primary group. Either that or I don't understand something. I do not have winbindd running or any idmap

Hi all, I have a machine joined to AD as a member server and have home drives and roaming profiles redirected in AD to the local samba member server. Users that login are authenticated via winbind and AD. I'm wondering if it is possible to have local users on the Samba system in tdbsam or ldapsam. I did try but no luck so far. Has anyone done this? -- George Farris farrisg@mala.bc.ca

I have the current situation and am trying to figure out which way is the best approach. Our organization has two domains, REMOTE and LOCAL REMOTE - remotely located Active Directory, Windows 2003 LOCAL - local Samba 3.0.x, Linux server I have computer labs and students that would like to login to REMOTE and also local accounts that need LOCAL. There is no way to have a WinXP station

Hi all, If I have a Samba server that is say a PDC for domain DOM-A can I have Samba join an ADS server that is DOM-B and have people authenticate against it without having an account on DOM-A? Does winbind provide this? -- George Farris farrisg@mala.bc.ca Malaspina University-College

I'm seeing this error in my log file under samba-3.0beta3. "The conflicting domain portions are not supported for NETLOGON calls." I have created a unix/samba user testuser and a unix group pwruser. The testuser's primary group is pwruser. Next I mapped the ntgroup to pwruser with: "net groupmap modify ntgroup="Power Users" unixgroup=pwruser" and net

Hi all, I've been reading docs and am a little confused. I'm in an organization that uses ADS and I am in a remote location. I want to configure a member samba server that can authenticate with ADS, also have local accounts and see shares all the way around. So I want to configure a Samba server that will allow students with accounts on ADS which is remote from our location (we are a

Here at the College we have configured a Samba server as an ADS member server and have everything working nicely except one rather large detail. The people that setup the domain accounts have custom "profile" and home drive locations depending on the last two characters of the user name. For example a user with the id of 545238794 will have their profile pointed to

Hi, Between Samba 3.4.15 and 3.5.11 there was a change in how 'wbinfo -r' gathers the groups of which a given user is member of. Assume there is a Windows 2003 domain called DOMA. This domain has a child domain DOMB. On DOMA there is a security group G-DL-DOMA which has domain local scope. On DOMB there is a security group G-U-DOMB which has universal scope. Group G-U-DOMB is member

Hello. I've got a samba4 domain member server. It works fine for the joined domain, but I'm not able to let user from a different domain get access. This worked fine on my samba3 member server, but I don't remember if I did anything special. I do have authentication set on the AD object for the users in question and we have a one-way trust with the other domain. All DCs are Windows

Hi All, Wonder is someone can help? We have mixed windows & Linux boxes in DomA network. Afaik all DomA clients are blocked and direct connection to DomB are not possible by design & for security. DomA DC(Windows) -- trust --> DomB DC(Windows) ^ | DomA Linux Client(DALC) winbind Samba 3.0.33 For some reason DomA Linux Client attempts ldap connection to all DomB DC once in 5 to 10

Hello all. I've set up a testing environment with two Windows DCs. The first, called DCA, is serving the domain DOMA and is running Windows 2003. The second is called DCB and serves DOMB on Windows 2008. The Samba machine I'm setting up (named ULYSSES) should be able to authenticate users from both domains for shell login. I've installed Samba 3.2.3 as a Debian package and closely

Hi, I am having difficuly deleting and renaming files with users from a foreign domain using acls. My setup is as follows : I have two Samba (3.0.14a)/LDAP domains connected via a VPN (OpenVPN) with a bi-directional trust relationship established. The trust relationship appears to be working correctly. I can log on onto PC's at either end on either Domain :) and the browse lists of both

If I create directory on the DomB DC named /test and create the following share: [test] path = /test read only = No acl_xattr:ignore system acls = yes DomA users can access that through Windows on DomB without issue, but if I set [sysvol] to "path - /test they cannot". There appears to be some special magic with [sysvol] I am unaware of. I'm not seeing any

The company I work for is split across two sites, each site has its own domain. The local end is a Samba server (DomA) with about 50 users, the remote end is NT4(DomB) with about 150 active users (400+ usernames in userlist). The two sites are connected over a VPN (Internally DomA=172.16.1.0/24, DomB=10.1.0.0/16) and the two domains trust each other. Users from either site regularly visit,

Hi everyone, I have two domains with a two way trust (DomA and DomB). When users from DomA (on a DomB Linux PC) access sysvol on DomB's DC using smbclient everything works: # smbclient //DomB /sysvol -Udoma\\user -c 'ls' -k . D 0 Thu Jan 9 13:53:03 2020 .. D 0 Thu Jan 9 14:28:29 2020 domb

Hallo. I have problem configuring winbind to authenticate against Active Directory (Windows Server 2003 R2 in native mode). Our net topology seems as follows: - We have PDCs for domain DOMA (i.e.) - there are user accounts for all people on our university. - We have PDC for domain DOMB (DC for our department) that holds computer accounts. - Between DOMA and DOMB is one side trust. So Windows