similar to: Winbindd -> winbindd_idmap.tdb deleted

hi list, just for my knowledge -> we have a working PDC / BDC infrastructure for our domain DOMA, where PDC trusts another PDC from DOMB (all samba v3). when PDC from DOMA goes down, is the trust still valid or do we have to setup the trust on *both* DCs from DOMA (net rpc trustdom establish DOMB ... )? is that possible at all? thx&greez -- Michael Gasch Max Planck Institute for

Am 05.10.2016 um 22:12 schrieb Rob via samba: > On Tue, 4 Oct 2016, Rowland Penny wrote: > >> This is very strange, have you tried running 'net cache flush' on the >> domain member ? >> >> Have you compared the users AD objects ? > > Running 'net cache flush' on the member does fix things, albeit only > for a while: > > # wbinfo -i

On Wed, 5 Oct 2016, Achim Gottinger wrote: >> Hi Rob, >> >> You can try to use tdbtool to delete the offending key with uid 2020. >> https://www.samba.org/samba/docs/man/manpages-3/tdbtool.8.html >> I'd stop samba make an backup of winbind_idmap.tdb and give it a try. >> In my case deleting the mappings from idamp.tdb fixed the issue of changing >>

Hi, I'm running Samba 3.6.6 on Ubuntu Quantal. I have a need to manually assign some of the UID mapping on a samba domain member file server. I have used tdbtool to add the correct mapping record to winbindd_idmap.tdb. However, I am at a loss as to how to force that change to "propagate" so as to show in the permissions structure of the file system and in the output of such

hi list, i'm using samba v3.0.14a when working with "admin users =" "inherit owner" does not work for me anymore the owner is set to "root" any ideas? will "inherit owner" solve this problem? thx in advance -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany

Hi, All >From the winbindd man page, there should be winbindd_idmap.tdb to store the sid/uid/gid mapping. But in my setup, i can't find it. I can only see winbindd_cache.tdb. Can you tell me how to generate winbindd_idmap.tdb? --smb.conf-- [global] idmap uid = 10000-1000000 idmap gid = 10000-1000000 idmap backend = rid winbind enum users = no winbind enum groups = no winbind

hi, weird thing: i thought when commenting out "delete user script" and "ldap delete dn" nobody is able to delete users from the domain. what happens: users are deleted, to be more specific their samba attributes are deleted but not their posix values. i won't let our admins delete users from our domain becaus we have another management to add/delete users to/from a

hi, i read about samba4wins, which is really a great work from the team! do you know, if this will work with samba v3.0.14a? i ask because a german news service writes that it?s only possible with 3.0.21 (http://www.heise.de/newsticker/meldung/69132), but i can?t find this information in the notes on http://ftp.sernet.de/pub/samba4WINS/samba4wins-1.0.0-16/ thx for helping me! -- Michael

hi folks, i hope you can help me!!! i'm using samba v3.0.14a (sernet) on debian sarge. openldap v2 is my backend, smbldap-tools 0.8.4 (patched for our organization). when adding a user via usrmgr.exe to an existing domain group i get the following error: [in usrgmr] The following error occured changing the properies of the user xxx User does not belong to this group [in smbd.logs]

Hello list, Is there a possibility to add entries to the winbindd_idmap.tdb manually? I know I can use tdbdump to see the entries, but is there a chance to modify? My problem is I have to map some uid to some Windows SID without using LDAP. On the other hand new user not having any uid in linux should map to the range of uid I defind by using idmap uid = 10000-20000 2nd Question: Is it

On Tue, 4 Oct 2016 12:29:19 -0400 (EDT) Rob via samba <samba at lists.samba.org> wrote: > > On Tue, 4 Oct 2016, Rob wrote: > > > On Mon, 3 Oct 2016, Rowland Penny wrote: > > > >> On Mon, 3 Oct 2016, Rob wrote: > >>> # idmap config for domain > >>> idmap config MY.AD.REALM.COM:backend = ad > >>>

hi, i have a question about winbind, idmap_rid and trusted domains. at sambaxp jerry said it's possible to have idmap_rid working with trusted domains. this is what we would like to have here. smbd -b doesn't show this compile option on 3.0.14a rpm (SuSE). may be this is normal, but how do i ensure that this option is in my binary w/ testing too much :) or how can i compile it

hi, i'm using machine 1 (SuSE 9.0 32Bit): rsync 2.6.2 (from SuSE RPM) machine 2 (SuSE 9.1 64Bit): rsync 2.6.2 (from SuSE RPM) my command looks like the following: /usr/bin/rsync -W --progress --rsync-path=/usr/local/bin/rsync -e ssh --delete --force -av /data/ machine2:/data/machine1/ after rsyncing both machines, some files differ ! i verified these differences with "diff",

hi i've been sucessfully using samba 3.0.0 and win2k/xp clients in a domain if i try to add a win2k/xp workstation in a samba 3.0.1 controlled domain (with the same smb.conf as the 3.0.0 PDC), i always get "no mapping between account names and security ids was done" the same workstation can enter a 3.0.0 controlled domain with no problems ! machine accounts were also created so

hi list, is it possible with samba v3 and ldap backend to embedd a normal group like "normalgroup" in the group "Domain Administrators" to give members of the group "normalgroup" full administrative rights on workstations? i tried with "net groupmap addmem sid-of-normalgroup sid-of-domain-admins" and "net groupmap addmem sid-of-domain-admins

hi after successfully migrating users and groups from NT to Samba v3 i'm looking for a way to transfer some 1TB data from our old NT PDC to the newer one - Samba just copying the data doesn't work, because we have to ensure data consictency (and we can't switch the NT PDC off on a weekend to copy it, because it would take too long [some old MAC shares included and the PDC just

hi as the subject already tells you: is it better (and "cleaner") to build samba v3 always as RPM and install it or - in case of an update of samba - simply overwrite the existing version with "configure && make && make install" ? normally there aren't too many changes in the paths of the install-scripts, so that all (old) samba files are correctly

G'day Folks, We are having problems with numerous duplicate entries in winbindd_idmap.tdb resulting in the available userid range set in smb.conf being quickly and repeatedly exhausted. The duplicate entries all appear to have a WBA_PASSWD key, e.g { key = "WBA_PASSWD/UID/9945\00" data = "nexxxo01\00" } { key = "WBA_PASSWD/UID/9720\00" data =

Hello list, I want to migrate from samba 3.0.14a to 3.0.2* . Now my question ; is it possible to keep the winbindd_idmap.tdb with new installation, because keeping that relations is a __MUST__ , otherwise i would have to run some unix scripts over the user directories to fix uids and gids of them. Thanks in advance for your hints. kind regards martin schreiber

We're using s. 2.2.8a in conjunction with a win2k dc. For uid/gid-mapping we use winbindd. Now we plan the migration to samba 3. We have about 100 Users and i don't want to rebuild the idmaps by hand. Is it possible to move the winbindd_idmap.tdb to the ldap idmap backend? -- +++ GMX - die erste Adresse f?r Mail, Message, More +++ Neu: Preissenkung f?r MMS und FreeMMS!