similar to: How does group mapping function ?

Hi all, I'm testing group mapping, wondering how It works exactly... I thought Samba was storing a mapping table allowing to retreive infos on Unix/Windows groups in a DYNAMIC way. Unfortunately, group mapping seems to be static, here is what I did : [I'm using Samba b3v3 + LDAP, WITHOUT nss-ldap/pam-ldap/winbind -> everything is stored in my /etc/passwd and /etc/group + in LDAP for

Hi :) As I'd say in French "de rien !" (you're welcome :)) Yes, you can use PAM to redirect the system authentication calls to your LDAP directory, but in reality samba will continue to use two types of accounts : the "posixAccount"s (same as /etc/passwd) and the "sambaSamAccount"s. Everything will be stored in you LDAP directory, but Samba still needs two

Hello all, And now a small advert ;-) I'm pleased to announce the v 1.4 of the ldapscripts. The ldapscripts are shell scripts provided under the terms of the GPL license. They allow to manage POSIX accounts (users, groups, machines) in an LDAP directory. They can be used on GNU/Linux and FreeBSD (and any other Unix-like ?). They are similar to the smbldap-tools but are written in sh, not

Hi, Same problem for me, any clue ? Gana?l. owen@isrl.uiuc.edu@lists.samba.org on 07/31/2003 01:42:21 AM Envoy? par : samba-bounces+ganael.laplanche=edf.fr@lists.samba.org Pour : samba@lists.samba.org cc : Objet : [Samba] groupmember list fails with 3.0.0b3 and LDAP Hi all, I've been working on a PDC with group mapping with Samba-3.0.0Beta3 with OpenLDAP-2.1.22. Things

Mateus, here is a more complex (working !) example : vfs objects = recycle recycle:name = .recycle ; max-size (in bytes) of files allowed in the recycle bin recycle:maxsize = 2000000 ; keep directory trees ? recycle_keeptree = True ; files to exclude from the bin recycle:exclude = *.tmp *.temp *.swp ; root dirs to exclude from the bin recycle:exclude_dir = tmp ; include file versionning in the

Hi all ! I've been using group mapping for a few weeks and found some bugs... For three of them, I tried to develop a small patch. I don't know Samba code very well and this is my first patch, so there could be errors :-p I hope my investigations will be useful :) * Platform : Here is what I used : Debian 3.0r1, Samba 3.0.2rc1 - PDC, OpenLDAP 2.1.23 as backend smb.conf extract :

Hi all, I've been working on shell scripts that allow to manage ldap accounts (users, groups, machines). They are similar to the smbldap-tools but do not need PERL to work (and so on...) and are *very* simple to configure - they may be a good alternative. The only tools you need are standard ldap client commands (ldapadd, ldapdelete, ldapmodify, ldapsearch). The scripts can be used as

Hi all, I've had good feedbacks of people using ldapscripts v1.0... Here is a new 1.1 version, with the following improvements : - Ability to create home directories and set rights - Ability to generate randomized (or not) passwords while creating a user - Password list generation can be activated while doing a massive user import / creation - Added an _ldapinit command to initialize the

Hi all, As Samba users, we often interact with Windows environments. I've developped a PERL script that may be useful to you : it is an .evt (Windows event "log" files) viewer. It is inspired from fccu-evtreader (www.d-fence.be) and displays the contents of an event file. It is available on my website (http://contribs.martymac.com/evtViewer/evtViewer-0.2.tgz) and released under the

Hi all, I'm trying to mygrate my NT4 PDC to a Samba v3rc2 PDC. Everything worked well during accounts migration (vampire). I'm now trying to back-up the shares (homes, profiles, netlogon), in order to fully migrate the accounts. Unfortunately, I'm facing a stupid problem : each home directory (or profile directory) can only be read from its creator, NOT from the Administrator of the

Mandrake 9.1's kernel needs a patch to support ACL's : http://qa.mandrakesoft.com/show_bug.cgi?id=3615 Regards, Gana?l LAPLANCHE. bgmilne@cae.co.za@lists.samba.org on 07/23/2003 06:09:59 PM Envoy? par : samba-bounces+ganael.laplanche=edf.fr@lists.samba.org Pour : samba@lists.samba.org cc : Objet : Re: [Samba] Unofficial Samba+ACL HOWTO -----BEGIN PGP SIGNED MESSAGE-----

Hi ! I'm trying to migrate accounts from my NT4 server, I followed each step described in the HOWTO : - tunred off samba - set domain master at "No" in config file - created groups + mappings as it is advised to - created the BDC account in the NT4 server manager - net rpc join'ed the domain but when I try to vampire user/group accounts, here is what I get : # net rpc vampire

Hi ! Did you try modifying socket options in smb.conf (generally : socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE SO_RCVBUF=8192 SO_SNDBUF=8192) ? Look at Samba-Howto-Collection.html for more details... I hope this will help... Regards, Gana?l. EugeneJ@centratel.co.za@lists.samba.org on 07/18/2003 08:58:51 AM Envoy? par :

Hi all, Thank you for your help, and sorry for my late answer. Everything works fine by now ! Yes, you have to become a BDC to vampire the accounts ! This is why I was getting an "Access denied" error : I thought my Samba was a BDC, but I forgot to add "domain logon = Yes" in my smb.conf, so Samba was a simple share server. Here is the steps I followed to suck the accounts :

Hi all ! This is a patch for Group mapping bug #1 reported here : http://lists.samba.org/archive/samba-technical/2004-January/034057.html It activates users' primary group SID update when adding/modifying/deleting a group mapping. It patches utils/net_groupmap.c (net_groupmap_add, net_groupmap_modify, net_groupmap_delete) and can be applied to samba-3.0.2rc1. net_groupmap_add : Scan users

Hi list, After kudos, time comes again with problems. This time, still on the same setup as before : - Linux PDC with ldapsam, ran by RH9, OpenLDAP 2.0.27 (stock RH9 RPM+Solaris RootDSE patch), Samba 3.0.1rc1 recompiled from SRPM ; - Linux BDC is the same ; The PDC and BDC are working Ok, so I won't include the smb.conf from these. - Solaris 9 domain member (jersey) gets Posix accounts

Hi, I'm using samba 3b3 (+ldapsam) and have created a user belonging to two groups : - his primary group is mapped to the "Domain Users" Windows group, - his secondary one is mapped to the "Domain Admins" Windows group. Unfortunately, only the first group seems to be known by Samba, since the user doesn't become a "Domain Admin" at all (but he is a

Hi list, i've updated from 3.0.14a to 3.2.5 using a PDC-LDAP-setup. With 3.0.14a the "Primary Group SID" value was taken from LDAP's machine account entry. #pdbedit -Lv machine$ -d 10 ... ... smbldap_search: base => [o=mybase], filter => [(&(uid=machine$)(objectclass=sambaSamAccount))], scope => [2] init_sam_from_ldap: Entry found for user: machine$

Hi ! When I create a user with samba-ldap tools, the userRid is calculated if the -x option is set. The userGroupRid is calculated too. But is the groumapping is enabled, the SambaPrimaryGroupSID not correspond with SambaSID of groupmapping Example : Groupe "Domain Users" : gidNumber 100 displayName Domain Users objectClass sambaGroupMapping sambaSID

Hi list, # dovecot --version 2.2.13 We use Dovecot LDA and I've discovered lots of messages stating that lock files cannot be written: Mar 16 12:02:03 mailhost dovecot: lda(someuser): Error: file_dotlock_open(/home/sg/someuser/.dovecot.lda-dupes) failed: No such file or directory That user's home directory is fetched from LDAP and does not exist locally on our 'mailhost'