similar to: samba and domains

I originally sent this to samba-technical which as a typical first stpe for me was probably wrong.... ;-) Anyone here have any ideas? -----Original Message----- From: Petty, Robert [mailto:rpetty@denvernewspaperagency.com] Sent: Tuesday, September 23, 2003 10:07 AM To: samba-technical@lists.samba.org Subject: Samba 2.2.8a / Winbind and Domains I have searched the archived through google and

After upgrading rc2 -> rc4 (suse binary packages) line 'valid users = %S' in [homes] section prevents user getting to his homedirectory in logfile smbd says: [2003/09/25 15:07:59, 2] smbd/service.c:make_connection_snum(384) user 'xxxx' (from session setup) not permitted to access this share (xxxx) Hannu

On a samba 4.5.1 domain controllers (PDC and BDC), classic domain , LDAP is used as the backend for both user accounts AND for the idmapping of trusted domains . Partial smb.conf below workgroup = THISDOMAIN security = user passdb backend = ldapsam:ldap://xxxxxxxxxxxxxxxxx idmap config * : backend = tdb idmap config * : range = 5000-6000 idmap config THISDOMAIN :

hi, it?s me again :( i?m still not able to use idmap_rid in a trusted domain environment (samba v3.0.20b Sernet). well, to be clear: NSS is not working (id, getent passwd <user>, ...) so samba does not find the posix information for any user from a foreign domain it?s working in a single domain with ##################################### # WINBIND - Settings idmap backend =

With Samba on Debian Lenny joined to a Server 2003 Native domain that has two incoming non-transitive trusts (users in my domain can authenticate to the foreign domains, but their users cannot authenticate to us) winbind is taking a very long time to authenticate or list users the first time it is used after starting. Winbind blocks for four to five minutes, and anything that touches winbind will

Good afternoon all. I'm looking for some help on something that I've been bashing my head against a wall now for quite some time. The goal is this: a CentOS system joined to an AD domain should allow users of a trusted domain to authenticate and login. * I have a CentOS system ("BLUE") joined to domain BAR. Easy and done, and users in the BAR domain can log into BLUE just

If I use any of the binary packages for SuSE SLES9 greater than 3.0.7 I can not see some of my NT4 trust domain via winbind. We have 5 regular NT 4 domains that trust each other. Two of them our within our LAN (local subnet), one of these domains the samba machine is within ... security = domain. There's another 5 domains that are setup for our AD enviroment for exchange, mixed mode. Using

Hi all, Since the winbind refactoring in Samba 3.6.0, interdomain trusts between Samba servers seem to be broken in that being able to resolve or modify file permissions on the other domain work only very intermittently (eg about once out of 10 tries). This is regardless of whether I use idmap_rid or idmap_ldap as the backend. I set up two 3.6.0 domain controllers with an XP client attached

Dear Samba Team/Readers: I have been reading the mailing lists looking for a solution to a particular problem that I am having: The Setup: centos 4.3 (redhat enterprise server clone) running kerberos, samba Version 3.0.10-1.4E.2, 32 bit system. Running stock kernel 2.6.9-22. I am authenticating to a windows 2003 server, standard edition, with all service packs and patches applied. I am using

On both Samba 4.5.1 member server and Samba 3.6.25 member server I tried the following command wbinfo –set-uid-mapping=35049,S-1-5-21-xx-xx-xxx-xxx this should have created a mapping entry consistent with the one on the domain controller for a trusted user But I got the following error failed to call wbcSetUidMapping: WBC_ERR_NOT_IMPLEMENTED As far as I can tell from network

Hello Matt, I've had similar misfortunes too with interdomain trusts. I think you're working along the right lines since you seem to want to do the same thing as I. However the NT_STATUS_UNSUCCESSFUL is an error I always get when trying to connect to the IPC$ share of the PDC of the trusting domain. In my case the trusting PDC is a Windows 2003 Server. I know it's not an issue

I just set up a Samba server to serve as a file server in a Win2K domain. It's version 2.2.3a running on RedHat 7.2. I set up winbind according to the documentation provided with Samba. The Win2K domain tree includes a top-level domain A, and child domains B, C, and D. The children and parent have transitive two-way trust relationships established, and in Win2K, each domain properly

I fought with this a few months back, and was never able to resolve it, so I'm back at it trying to get things to work before classes start again in January. Here's a brief summary of the situation: I am responsible for 2 departments, Math and Socialwork, which are located in the same building and share the same network. Each department has its own samba server (RHEL4/CentOS4) and domain

We are splitting our users into 2 domains(DOMAINA and DOMAINB (changed for security reason)). I am having problems getting users who log into their workstation on DOMAINA to access a samba share on DOMAINB. We are using W2K3 servers as our AD with LDAP. Samba shares on are CentOS5.1 servers. I Can anyone point me to some docs on how to set this up? I have been rumbling through google for the past

I am trying to configuring Samba 4 classic PDC to trust Windows 2012 domain "DomainB" - the PDC is running Windows 2012 but the forest and domain functional levels are still Windows 2008. On the Win 2012 PDC I try to set up an incoming trust, but it fails with "The local security authority is unable to obtain an RPC connection to the active directory domain controller

Hallo, we use Samba 3.0.22 with MIT Kerberos and winbind on Ubuntu edgy in a Windows2003 ADS enviroment. Everything works fine like kinit, net ads join, getting the Domain accounts from the own and other domains, but one important thing fails - obviously winbind cannot resolve name to sid, when the account is in another domain, where is only a transitive trust, not a direct. Lets say there

It's been a long journey, bear with me. we have multiple domains, that have interdomain trusts in separate forests. I can successfully authenticate via "wbinfo -A A\\userA" and "wbinfo -A B\\userB"; same with -K. The host is joined do AD "A". UserA can authenticate successfully and get a shell. However I desire B\\UserB to also be able to login as well.

Running a mix of samba versions (3.6.25 and 4.5.1) in two domains- one "classic" (with samba domain controllers) and one AD (with windows domain controllers.) The eventual goal is to drop the classic domain in favor of the AD domain. Also trying to move from samba 3.x to 4.x since Samba 3 is EOL'd. the "wbinfo -u" command will list users in the servers domain

I am running Samba ver 3.0.33 on Solaris 10 (sparc) as a PDC with LDAP for the backend for both samba and unix accounts. I have also set up a trust with an Windows domain- lets call it WINDOMAIN- (the PDC for the Windows domain is Win 2003 but is in mixed mode for backwards compat.) The SAMBA domain trusts the WINDOWS domain, not not vice versa. I had also tried setting up trusts with

Greetings. I've already done with question at http://lists-archives.org/samba/37558-winbindd-hangs-up-while-retreiving-usernames.html and made decision, that winbindd tries to get users and groups in trusted domains. We have tree different domains in their forests, connected by trusted relationships: CITY-XXI.INT < - > DEP2.CITY-XXI.INT DEP2.CITY-XXI.INT < - > ALL.INT