similar to: Multiple domains, one PDC

Hello, I have inherited a samba-tng PDC (without ldap) that I am to upgrade to samba 3. My first attempt failed miserably. I copied over the smbpasswd and the domain SID, users were able to log in, but most were not able to load their profiles. I think I have to copy over machine IDs, but I'm not sure how to proceed. The migration section of the the howto doesn't seem to apply to

Hi all, it is possible that converting the NT4 PDC to Win200x Active Directory. And converting to OpenLDAP directory? Does such an converter exist? Thanks, Roland

Hi folks, I'm using Samba 3beta running on RH 8.0 and I'd like to authentificate against a Microsoft AD. This all works very well, except that not all AD User are mapped to my Unixbox! When starting getent passwd, my UnixBox shoiws just my User from passwd and some of the AD User - not all!! Looking through my User with the command wbinfo -u all AD user are shown correctly! Anybody

Greetings ... Please could someone confirm that Samba 2.2.x and Samba 3.0 ( Head ) does not support Trusts between domains. Thanks Mailed Lee

Hi, I posted this problem before in more detail (http://marc.theaimsgroup.com/?l=samba&m=104756899022766&w=2) but received no response. At the current state of Smaba 3.0 and Samba-TNG these two seem to be incomaptible. Samba 3.0 can't join a TNG controlled domain. I think this should affect a lot of installations as TNG as a controller and "stable" as file/printserver seem

Would like to know if it is possible to switch to the latest production release of samba (2.2.3a) from samba-tng 2.6alpha and maintain the same configuration, password, mapping files, security identifiers, etc as tng. If not how would I convert my setup from tng to main with minimal effort? thank you __________________________________________________ Do You Yahoo!? Got something to say? Say

OK: First, please respond to me directly, as I'm not on the TNG list. Here's the situation: I will be setting up a "computer lab" for 30-40 PC's with various users (students). Here are my needs: 1) One Touch (point) User administration (the simpler the better) 2) Simplest set of LINUX SW possible 3) NO NT PDC 4) All clients are W2K. 5) Want

Hello, all! Let's say, hypothetically, that one was trying to migrate a NT4 domain to Samba without the knowledge of the NT admin of a domain you trusted. :) Basically, what I need is the password for my trust account, but it's in some obfuscated hash under the G$$xxxxx secret. Does anybody know how this is stored, or am I down to sniffing network traffic? Thanks, David Boynton

I keep hoping for better wasy to remotely manage windows machines through samba. In the very old samba-tng there was an rpcclient that could connect to a remote machine and do various things like read/write the registry, grab event logs, etc. I could never get it to work very well and waited for a better one. The trouble is the rpcclient program in samba-current doesn't have these features.

Hi, is there a HOWTO about migrating from Samba TNG to Samba 2.2? I have problems with the user profiles on the Windows client machines, they are recreated on login on the new Samba (2.2.5) machine. I copied the SID (with smbpasswd), /etc/passwd and smbpasswd to the new machine, and everything works fine, except for the user profiles. Currently we are not using server-saved profile, but we will

Samba 2.2.3a on OS-X 10.2.6 Trying to get a standalone server up and running with user level security. All the users have valid accounts and passwords, but we've enabled password sync and password chat and chat debug for the accounts as we don't do authentication against the active directory. unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat debug = yes passwd chat

I have instaled samba 2.2.6pre2 (due problems with printr drivers download in 2.2.5) and I have also tried to install it using ldapsam backend. It seems be working, but there are two problems: - if I try to display directory ACL (file - properties - security) I show only the user name, group name and others field are shown only as SIDs. There is no hit to LDAP (OK, groups seems be supported

Is it possible to point rpcclient at a samba PDC and change the user's password? With rpcclient I can "logon" to the PDC as someone with admin privilages (to do adddriver, etc..) from a remote machine. smbpasswd -r seems to provide no similiar functionality.

I can not add a W2K computer to my newly created SMB PDC. I get the error message: the credentials supplied conflict with an existing set of credentials on SAMBA 2.2.7 and "The account used is a computer account. Use your global user account or local user account to access this server." on SAMBA 3.0.0. On W98 I am able to logon to the domain, but unable to execute the map logon

Is there a way to make rpcclient support ntlmv2? When I configure my server to only accept ntlmv2 logins, my rpcclient stops working. I tried the approach needed to make TNG's rpcclient use ntlmv2 (a line like "client ntlmv2 = auto" in smb.conf), but it didn't work. Thanks, Dave __________________________________________________ Do You Yahoo!? Yahoo! - Official partner of 2002

Hi, I have a Samba 3.0 beta server set up as an NT Domain PDC (lets call it box S), a Windows 2000 client (box W) and a Linux member server in the domain (box L). All are configured as per the most recent 3.0/HEAD howto. S and L have the same users with same UIDs and login names in /etc/passwd and /etc/shadow. When browsing the domain from W, I can access all the shares on S and L. On S I can

Hello. I've just compiled Samba-3.0.0 on Tru-64 5.1b (AKA Digital Unix, AKA OSF) with base security (no shadow passwords) using the native compiler and GNU make. In smb.conf I'm forcing NTLMv2 only: security = user encrypt passwords = yes lanman auth = No ntlm auth = No client NTLMv2 auth = Yes client lanman auth = No

Hello, In the third party software that we bought, which runs on Solaris 2.8 Server, we use the pam_smb version 1.9.8 to authenticate our users against the NT Domain. Now, our company is migrating from NT Domain to Windows 2000 ADS Domain in native mode. I saw the documention on SAMBA 3.0 (alpha 1-15), and it states that SAMBA 3.0 is compatible with ldap/ADS of Windows 2000. Have you created

Hi all, I'm about to begin building a single-sign-on environment (hopefully). We just brought our first set of Windows-based PCs in, and would like to integrate them into our existing Linux/MacOS X environment. We are currently running MIT Kerberos, and would like to create a Samba PDC which authenticates against these KDCs. Another parallel project is to migrate to OpenLDAP. I

Hi again. I've though more about the full standard being too ambitious, and now I fully agree with that. So I had a go at choosing the useful subset of Fortran on which I would like to work on - my update proposal can be viewed at https://gist.github.com/hyp/5434845 . Focusing on less should also improve my productivity and lead to a better summer of code project by drastically reducing the