similar to: Winbind and Organization Unit

Hi list. Maybe this could be off-topic but here I think many have used OpenLDAP to unify yours authentication needs, allowing an unique username and password for all the corporate applications. My doubt is, which rules do you use to split all the user levels so that one user could be allowed to access app A but isn't allowed to access app B (think this about many apps)? Have you been using

Hi, I have done configuration dovecot/exim/samba4ad. I use dovecot-lda not exim to deliver mail. And dovecot to authentify users. I have users with mail address on AD. When i sent mail to user mail address, its working. I have distribution group or group with mail address on AD and users as member of this groups. But when i send mail to group mail address, its not working Dovecot-lda can

Hi everyone, I have a Samba 4.2.4 AD which works fine. I'm using Windows RSAT and I'm trying to create an OU under ou=Users, but this is not allowed. I can create OU's in the top DN, but not under ou=Users. Could this be a permissions problem or is this simply not possible or allowed? Thanks a lot, Roel

I'm trying to build 3.0.30 on Alpha/Tru64-4.0G. The configure step works, but make fails when it tries to link smbd: Compiling popt/popt.c Compiling popt/poptconfig.c Compiling popt/popthelp.c Compiling popt/poptparse.c Linking bin/smbd ld: Unresolved: __unsafe_string_function_usage_here_size_t__ gmake: *** [bin/smbd] Error 1 This Should Never Happen :) -- that looks like a message for the

Hello, I'm trying to automate the creation of several small samba AD DCs, each with a different domain. Samba tool works fine for creating a brand new domain, but I haven't seen any functionality for manipulating the directory structure of a new domain. Specifically, I'd like to automate the creation of a standard set of OUs, security groups and GPOs. I'm wondering whether

I'm trying to use auth bind to avoid having a plain text password in a config file. With %u instead of %n, the @domain part of the login ends up in the uid field of the search filter. As I said, my OUs have overlapping users, so I have configured things such that the users are logging in with user at domain, and need to get the domain component into the search base as you cannot filter on

On 02/02/2020 14:39, Christian Naumer via samba wrote: > Hello all, > I just tried this on our setup and it ist the same there. I get results > from other OUs. Using sub instead of one I get the "right" results. > > Problem is, I have tried the OP's search command against Samba 4.7.12, 4.10.6 and 4.11.6 Created two OU's: OU=testou1 and OU=testou2 Created a user

Hello all, I am trying to make one of my solaris server member of our w2k3 ads domain. ldap and kerberos packages are installed. * when I try to get a ticket granting ticket, no problem ... kinit klist are all running fine .. below my krb5 config file # cat /etc/krb5/krb5.conf [logging] kdc = FILE:/var/log/krb5/krb5kdc.log # admin_server = FILE:/var/log/krb5/kadmind.log default =

Just trying to implement a simple helper over the past few days had me really confused. messages = '''' messages << content_tag(:p, ''dave'') #=> &lt;p&gt;dave&lt;\p%;gt; Eventually I realised the original empty string was not html_safe message = ''''.html_safe message << content_tag(:p, ''dave'') #=>

Hi ... I have squid integrated with OpenLdap . I need create an Ou and a lot of groups but my Openldap is integrated with Samba too. How I could create OUs in enviroment integrated ? For examaple, I create users using smbldap-tools but this tool doesn?t create Ou. Thanks . -- Bruno Steven - Administrador de sistemas. LPIC-1 - LPI ID: lpi000119659 / Code: p2e4wz47e4

I need to create a couple of OUs under Users to separate my internal users from my external users that have LDAP backed accounts so I can put ACLs over the external users so I can limit what they can see on the tree. What options do I have to create the OUs and the ACLs in a Samba4 AD-DC domain?

On Sat, 2020-02-01 at 17:22 +0000, Rowland penny via samba wrote: > On 01/02/2020 16:29, Palle Kuling via samba wrote: > > > > Queried against Samba 4.11.4 (query is for OU=Business but response is > > from OU=Test): > > $ldapsearch -D username at internal.xxx.yy -w password -H > > ldaps://192.168.1.1 -s one -b ou=business,dc=internal,dc=xxx,dc=yy > >

Hi all, here is a behaviour i can't explain. I've got a samba 3.0 PDC and a XP client in VMWare. When i log locally, i can see the pdc and access the shares. then i can join the domain normally after a reboot, i try to authentify against the pdc and ... - i cant join inmost of the time - when it manage to communicate i've got this log (level 10) : process_dgram: datagram from

Environment is Samba as a PDC, OpenLDAP backend, with smbldap-tools providing the scripts to manipulate the data. What are the recommended/mandated organizational units (OU=) for user, computer, group info. I'm pretty sure that groups go in ou=Groups, but I am confused about where user and computer data goes. I have seen ou=People, ou=Computers, and ou=Users in various places. Which is it

Hi all, When created through RSAT OUs receive, by default, ACLs to refuse removal. When created through LDIF and ldbadd OUs do not receive these ACLs. Is there a way to create these ACLs using command line tools? Cheers, mathias

I am confused as with samba-tool it does practically everything and all the default methods of M$ AD are covered. For some reason OU's seem to be missing I know OU's are very Group policy orientated but also they are simply Organisational Units. The ability to list, create and delete OU's seems to be omitted. Also when you add a user the destination OU parameter is missing. Is this

I pretend not to use RSAT on Windows any more. I use Linux as workstation and I have to access a Wondows 7 Virtual Machine with RSAT in order to manage AD. Is there any web based project? I usually work with these topics: - Manage users and groups - Manage OUs - Manage GPOs - Manage DNS

Hi! I have printers, files shared to all windoze platforms in my group. Now I want to also access the samba box via a VPN. So configuration: NT----PPTP---NT/RAS-----Linux 7 Any experience with this type of config? Quick test shows the samba host but when I try to access it the network path is not found. Thanks! ++Dirk

Hi all, Still playing with a big database (120k users, 150k computers) I tried to split my users into a lot of OUs. This increased the database size and I was not able to finish to add users into the DB because database file has reached 4GB size which seems to be the limit. First: am I right to say file /var/lib/samba/private/sam.ldb.d/DC=example,DC=com.ldb has a maximum size of 4GB? Secondly:

Hello, Is there a way to create an OU (in the AD sence) from Unix with the samba tools ? I have made a script that create all my users and groups (for a school). But I still need to create the OUs manually from windows with RSAT. Thanks. Baptiste.