similar to: ¿can I create more sids?

OK, I had this working a few days ago, but have evidently changed something that I cannot locate. Someone hit me with their 2x4. Samba 3.0.22, Fedora Core 4, ldapsam (OpenLDAP 2.3.24). smbd will not start, with the "ERROR: failed to setup guest info" error (I have "guest account = guest", which is a valid user with correct info in LDAP): ldap_connect_system: Binding to ldap

Hi, we want to use ldapsam:trusted=yes to improve performace as nss_ldap is killing our ldap server doing enumeration. once i enable it smbd dies silently... this is the last part of a ./smbd -d 10 -i NT user token: (NULL) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups smbldap_search: base => [ou=groups,ou=filestore,dc=sunderland,dc=ac,dc=uk], filt er =>

Hi there, I've been trying to set up Samba 3.0.14a with Active Directory integration on a network with an ordinary W2k Server PDC. I'm currently having a problem which I'm convinced has nothing to do with my Windows or Samba configuration. The problem only occurs when trying to connect to the Samba server from an authenticated domain account which is only a member of the default

I am trying to get windind to work so my domain users can touch shares on this Linux box without being prompted for credentials. I put these in nsswitch.conf: passwd: files winbind group: files winbind Then I did this: cp /usr/src/samba-3.0.13/source/nsswitch/libnss_winbind.so /lib ln --symbolic /lib/libnss_windbind.so /lib/libnss_winbind.so.2 Make libnss_windbind

Hello, I have a problem with a LDAP backed based Samba PDC. Last week, due an hardware problem, I lost my primary LDAP server and PDC. I reinstalled the LDAP server and populated it with the old data, I also reinstalled Samba. The problem is that I can't log in to samba as root (cn=root,dc=info,dc=uvt,dc=ro). All others user accounts ar working except root. Eg.:

Hello, I'm not sure if it's a bug - or I'm just too stupid..!? Downloaded the Samba beta-code from ftp.suse.com/gd - rpm's for SuSE 8.2 (03/06/22). Installed all packages with no problems - samba works well, but integration in a W2K Domain fails. Kinit is successful but joining a domain brings up the following errors. nas-01:~ # net ads join [2003/06/23 21:44:41, 1]

Hi, How can I remove the "domain PHOENIX" SID from the PDC? It was a test domain I had set up before this machine went live around 18 months ago. I believe this is the issue that's causing me to have problems migrating this PDC to a new machine. This is the output from the current PDC: phoenix:/ # net getlocalsid SID for domain PHOENIX is: S-1-5-21-3597458131-155160113-1223051555

Hello, I have Samba setup with as a domain member server (security = ADS). wbinfo -g works wbinfo -u works getent passwd works getent group works There is a directory name /dir/shared with the following permissions. drwxrwxrwx 2 root users The information shows up fine in Windows on the security tab root (Unix User\root) usesrs (Unix Group\uses) Now, I go into the Linux

I'm migrating from a very very old Samba (Cobalt Qube Network Appliance, seemingly some 2.1... Samba version). I've got over a hundred Windows XP clients that have "joined" the existing domain. I want to migrate all those memberships to the new Samba so I don't have to visit every one of those client machines individually. I think I know how ...except I haven't been able

Hello, I am using smaba-3.0beta3 on linux (RedHat 7.3). I noticed that 'net rpc vampire' does not retrieve the existing SIDs from the domain PDC, rather it creates new ones. This is a problem if users have files saved locally on their NT workstations, as the SIDs won't match after the migration to samba PDC. Is there a way to migrate from an NT PDC to a samba one and still

I would like to migrate users into my Samba3 server. Problem is I have a sambaDomainSID that conflicts with my Windows domain SID. My backend is LDAP. I'm not sure what to delete so I can get my SambaDomainSid in sync with Windows domain SID and start migrating users. Thanks! TJ ------------------------ Cannot import users from LABOR at this time, as the current domain:

I found part of the problem... the Red Hat 9 kernel does not ship with the ACL patches installed. ;-) Does anyone know if there is a repository that hosts Red Hat kernel RPMs with the ACL patches applied? Michael St. Laurent <> wrote: > I have a newly upgraded Red Hat 9 Samba server (now ver. 3.04, > formerly ver. 2.2.7a) on which I would like to start using ACLs to > provide the

Hello, If I have a PDC with a netbios name FIRST, and I want to add a BDC - named SECOND - do these machines need to have the same SIDs, or different (I just copied files / settings from PDC to BDC and I'm not sure what to do next)? Tomek

Hello good people of Samba, I've been working with the latest Samba (3.0.11pre2) and have noticed that between 3.0.11pre1 and 3.0.11pre2, wbinfo --user-sids <SID> has stopped working. I have confirmed that going back to version 3.0.11pre1 (everything else being held steady) corrects the error I'm seeing. #wbinfo -n <username> <big long SID> #wbinfo --user-sids=<big

Hi Guys, Just a quick one...I use ldap backend for samba users and unix(PAM+NSS) users. If I was creating a new user/group/computer manually do the RID and UID/GID have to match up somehow or something?? I mean I've been reading somewhere that that RID should be somethings like UID+2x1000 or something?? Algorithmicbase?? Whats this all about? Am I making any sense? Cheers, Rhys

Hi I have PDC on samba 3.0.10 with LDAP (OpenDirectory on MacOSX). I need configure fileserver(both NFS and SMB) in domain(samba 3.0.25a on Solaris) Server get NSS information from LDAP(OpenDirectory) and winbind get UIDs from NSS: idmap backend = nss Users authentication works fine. Users can use shares. I can view ACLs, but can't set it. log: > [2007/08/28 16:47:44, 0]

I have a samba server running on a Linux RHEL5 system. The system uses nss_ldap and gets passwd and group information from a non-windows ldap server. The smb.conf file is using security=ads and spnego in order to user Kerberos tickets rather than ntlmv2. I have done a net ads join, and the authentication is working fine, however when I try to set an ACL on a file from a windows client

Hi All, I cannot access/write to shares so I turned the logging level up to 3. This is the error from the 'test' share while attempting to create a new folder: [2009/09/29 09:57:45, 3] lib/util_sid.c:string_to_sid(223) string_to_sid: Sid @domain users does not start with 'S-'. I am using samba 3.0.36 on gentoo smb.conf server string = Samba Server %v log level = 3 log

must a domain controller have the same machine SID as the domain (as I've read), or is will windows and linux function acceptably with the domain having one SID and the domain controllers having different SIDs ?

I'm attempting to migrate a Samba 3.x / NT domain to Active Directory. I have a Windows 2003 SE host and ADMT. I've established trusts between the Samba 3 domain and the Windows 2003 AD domain. I can use "User Account Migration Wizard" up to the "Account Transition Options". Then of I check the option to Migrate SIDs it fails with - "Could not verify auditing