similar to: Winbind group ID problems

hi there... i have a problem with winbind... i can't get the getent group working.... on the machine (where samba + winbind are running) wbinfo -u (works) wbinfo -g (works) getent passwd (works) getent group (doesn't work) -> running winbind with "-i -d 2" i get ------------------------------------------------------------------ could not lookup membership for group rid

Hello All, I want to thank everyone who reads and responds to this group. You have all been an invaluable help to me. I now have a working Samba 3.0.1 LDAP PDC and domain member server using winbind (both servers are running Slackware 9.1). I also have virtual users and groups using nss_ldap from www.padl.com, without pam or users/groups in /etc/passwd or /etc/group only in the LDAP backend....

Hello, I've been trying to get samba set up to authenticate users off a W2003/ADS system and it appears to be working for the most part. However, there is one issue plaguing me and I'm not sure how serious it is. In brief, the Windows SID => Unix GID mapping is failing in odd ways. After getting things set up, the following work: * wbinfo -g (lists all domain groups, ie DOMAIN+user)

Query re winbind, primary group enumeration from Active Directory and Services For Unix I am wondering if anyone can explain to me how the GIDs work when using winbind to extract them from an ADS server. I have Unix servers running AIX 5.3 ML-10, an ADS server running Win 2003-SP2 with SFU 3.5 installed. I have been configuring the Unix servers as domain members and using winbind to extract the

Roland, On 3/29/2019 2:54 PM, Rowland Penny via samba wrote: > get the feeling that your users have different Unix ids on each Unix > computer, this just leads to trouble. We use nss so all the unix computers at our site share the same database of users, uids and gids. The problem that I'm having seems to be that smbd is trying to find a gid from the SID for the Domain Users group

Hello to all, I have installed Samba 3.0.0 PDC + OpenLDAP 2.1. Additionally, I use "wbinfo -c" to create users and winbindd + libnss_winbind.so to resolve these users in Unix (SID <-> Unix id mapping). But I have found that users' data, created by "wbinfo -c" command, is not completely stored in LDAP backed. The "sambaUnixIdPool" objectclass is stored in

Le Sat, 18 Feb 2017 13:20:52 +0100 Emmanuel Florac via samba <samba at lists.samba.org> écrivait: > I've got a Debian/Jessie Samba 4.2.14 running as an AD member. ADC is > a Windows2008R2 server. Join worked without problem. > > # net ads testjoin > Join is OK > > wbinfo -u and wbinfo -g work perfectly and provides a list of users > and groups from the AD as

>> Hello, >> >> I have fresh instalation samba 4.17.12+dfsg from apt on Debian 12. >> >> I made new domain ADS2 >> (https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller). >> root at dc-ads2:/etc/samba# samba-tool domain provision --use-rfc2307 >> --realm=ADS2.SES.SK --domain=ads2 --server-role=dc >>

We have Windows 2008R2 domain controllers running 2003 functional level with SFU (i think thats what its called, im not the windows admin :p ) . With Winbind 3.0.33 (on Redhat 5.5) I can get the UIDs/GIDs from AD without issue using: idmap config DOMAIN:backend = ad idmap config DOMAIN:default = yes idmap config DOMAIN:schema_mode = rfc2307 idmap config DOMAIN:range = 10000 - 30000

Hi. FreeBSD 8.2 Samba 3.5.11 from ports I have an issue with group membership. id shows only small part of the groups a user is member of. I'm aware about UNIX max group issue, but this isn't related to it - for example for a user which is member of the 6 griups id shows only 3. Although wbinfo -r shows correct number of groups and wbinfo -G is able to successfully translate UNIX

Hey all I'm currently trying to use squid and samba/winbind to filter internet access based on groups in a windows 2000 active directory domain. Im running Mandrake 10.1 Community and samba 3.0.10 installed from rpm. Following the directions in the samba manual for setting up winbind I have: - configured nsswitch.conf - checked to see if the libnss_winbind.so library is there - checked

Hey all I'm currently trying to use squid and winbind to filter internet access based on groups in a windows 2000 active directory domain. Im running Mandrake 10.1 Community and samba 3.0.10 installed from rpm. Following the directions in the samba manual for setting up winbind I have: - configured nsswitch.conf - checked to see if the libnss_winbind.so library is there - checked to see if

Le Sat, 18 Feb 2017 13:18:53 +0000 Rowland Penny via samba <samba at lists.samba.org> écrivait: > On Sat, 18 Feb 2017 13:50:52 +0100 > Emmanuel Florac via samba <samba at lists.samba.org> wrote: > > > Le Sat, 18 Feb 2017 13:20:52 +0100 > > Emmanuel Florac via samba <samba at lists.samba.org> écrivait: > > > > > > I've added >

Hi, I've joined a Suse 9.1 Pro linux computer to a Windows 2003 SP1 ADS using: # kinit Administrator@DOMAIN # net ads join The computer account is created on the DC and wbinfo (-t -u -g) all work. Then I try getent passwd or getent group and nothing. This is with: #grep winbind /etc/nsswitch.conf passwd: compat winbind group: compat winbind # ps -ef | grep -E

Hi, I have these following configurations: Active Directory 1 = DomainA.com AD1 Primary Group = Domain Users AD1 Group 1 = Linux (member: DomainB\ad2testuser1) Server joined = linux1.DomainA.com (configured Kerberos and Winbind Samba4 from sernet) Active Directory 2 = DomainB.com AD2 Primary Group = Domain Users (member: DomainB\ad2testuser1) AD2 User 1 = ad2testuser1 note: (1)

i've a strange problem with samba-3.0.10 (Redhat Enterprise 4 PPC Version) in an ActiveDirectory Environment. After setting up Kerberos and the winbindd configuration i was able to join a Windows 2003 Server ADS structure and enumerate groups with winbind -g and do different kind of ADS<->Unix mappings (winbind -G <gid>, wbinfo -n <ADS-group> etc...). To make it short:

Greetings, Rowland Penny! >> # cat /etc/resolv.conf >> nameserver 192.168.17.4 >> search ads.ccenter.lan >> >> # host -t SRV _ldap._tcp.ads.ccenter.lan. >> _ldap._tcp.ads.ccenter.lan has SRV record 0 100 389 dc1.ads.ccenter.lan. >> >> # nslookup dc1 >> Server: 192.168.17.4 >> Address: 192.168.17.4#53 >> >>

On Sat, 18 Feb 2017 13:50:52 +0100 Emmanuel Florac via samba <samba at lists.samba.org> wrote: > Le Sat, 18 Feb 2017 13:20:52 +0100 > Emmanuel Florac via samba <samba at lists.samba.org> écrivait: > > > I've added > > idmap config * : backend = tdb > idmap config * : range = 10000-30000 > > to smb.conf, and now 'wbinfo -i

On 04/04/15 18:28, Andrey Repin wrote: > Greetings, Rowland Penny! > >>> # cat /etc/resolv.conf >>> nameserver 192.168.17.4 >>> search ads.ccenter.lan >>> >>> # host -t SRV _ldap._tcp.ads.ccenter.lan. >>> _ldap._tcp.ads.ccenter.lan has SRV record 0 100 389 dc1.ads.ccenter.lan. >>> >>> # nslookup dc1 >>> Server:

Hi. FreeBSD 8.2 Samba 3.5.11 from ports I have an issue with group membership. id shows only small part of the groups a user is member of. I'm aware about UNIX max group issue, but this isn't related to it - for example for a user which is member of the 6 griups id shows only 3. Although wbinfo -r shows correct number of groups and wbinfo -G is able to successfully translate UNIX