similar to: Samba 3.0.0 -- ACLs are unusable due to UID/SID mappingweirdness :(

Hi, I am sure somebody asks this question about once a week. Since I have not found an answer I assume the worst -- it just does not work. So, here goes my problem. I am testing Samba 3.0.0. I have got UNIX and Windows domain users matching each other one-to-one. The server is running with "security = domain". Everything works fine and all Windows users connecting to Samba get

This was blocked with both good and bad log output due to the size limit on attachments so I've removed the log from the successfull authentication. I think its pretty obvious whats going on from the failed log, thanks Andy. -----Original Message----- From: ww m-pubsyssamba Sent: 06 May 2004 10:32 To: 'Jeremy Allison'; 'samba@lists.samba.org' Subject: RE: [Samba] Kerberos

Yes, just make your changes and then wait a couple of minutes! Samba re-reads its config file every minute or so, as soon as changes are detected they are implemented! Andy > Message: 11 > Date: Fri, 30 Apr 2004 11:48:24 +0100 > From: "ww m-pubsyssamba" <pubsyssamba@bbc.co.uk> > Subject: [Samba] Can I reconfigure Samba share without restart smb > service? >

I can't say I've tested this in any depth. Where multiple LDAP servers are listed as the LDAP backend is the behaviour of Samba that if it fails to contact the first listed server it will try the second and so on? If that's the case Samba should only ever try and update the password on a single LDAP server which would then replicate the change to any other master and slave LDAP servers

Hi all, anyone able to point out why I'm not able to get samba 3.0.0 to update my LDAP server with any idmap data? I'm using SunOne DS 5.2 LDAP server and the following entries in my smb.conf file, ldap admin dn = "uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot" ldap ssl = off ; ldap suffix = "dc=testlan,dc=bbc,dc=co,dc=uk" ** have tried with this

Hi list, I'm trying to compile samba 3.0.1 rc1 with --enable-dmalloc switch because I have been asked to provide more information on a winbindd panic on a Solaris server. However the configure fails with the error shown below, config.status: creating include/config.h Note: The dmalloc debug library will be included. To turn it on use ./configure: command substitution: line 3: syntax error:

As Samba 3.x does not work with the Kerberos included with Solaris (it has no headers) I have to remove it and replace it with MIT kerberos. Does anyone know if Solaris kerberised services will still work normally (without modification) such as kerberised NFS? I briefly tested this and couldn't het it to work, but if someone has a definative answer it might save me a lot of trouble, thanks

Hi Samba developer people, I still have a problem were winbindd panics every time I run it. I'd hoped this might get fixed as newer releases of Samba came out, but I'm now running 3.0.2pre1 and still the same problem. I want to deploy Samba on Solaris, but was unable to successfully get samba to compile with dmalloc support, so I've had to install onto RedHat 8 and use valgrind

Hi List, I'm having an issue between Samba and OS X with regards to Kerberos authentication to a Samba AD member server. I'm using local UNIX accounts and entries in the passdb instead of Windind on the samba server, ie create account by adding to /etc/passwd then smbpasswd -a username. From an OS X client system if I obtain a ticket for user "UserA" like kinit

ok I know this isn't realy a samba issue but I'm trying to gather some debug info on winbindd for the samba development guys, but I can't compile gdb 5.x or 6.0 on my solaris 9 box! Every other compile problem I've come across I've resolved by searching through google but not this time. If anyone can help I'd realy appreciate it, problem is (using gcc 3.3.2) gcc -g -O2

Hi list, If I have multiple Samba member servers in a domain can I store the groupmap data in LDAP? When I try this I get this error # net groupmap add ntgroup=Everyone unixgroup=nobody No rid or sid specified, choosing algorithmic mapping adding entry for group nobody failed! But this works correctly (creates account in LDAP server) smbpasswd -a username password the LDAP config in my

Can anyone tell me if I can configure Samba 3.x to rely only on Kerberos authentication (in an AD domain)? Ideally I'd like to use local UNIX accounts, not winbind, and negate the need for me to add an entry to passdb, then the account must exist in AD and locally on each Samba member server for authentication to work. If there is any info held in passdb, other than the NTLM coded password,

Hi All, can anyone make any sense of the error below, please advise if I need to log this as a bug but I'm not sure how to further diagnose what is happening. This is from my winbindd log file, thanks Andy. [2003/11/07 17:47:59, 1] nsswitch/winbindd.c:main(832) winbindd version 3.0.0 started. Copyright The Samba Team 2000-2003 [2003/11/07 17:48:00, 1]

Hi All, can someone elaborate on the cause of my problem mentioned below? Service records exist for DC's only on DNS servers in that domain (ie DNS server in domain X has service records only for all DC's in domain X and so on for each domain), should normal DNS forwarding not allow a client in one domain to read the service record data from another? Normal host records for all domains

Turned out the whole install was broken when not using winbind, don't know why!?! Uninstalled Samba 3.0.1, re-compiled from scratch Samba 3.0.2a and everything works as expected :-) >> Further to this problem I have found it impossible to get any syntax to succesfully mount a Samba 3.0.2 share with Kerberos authentication using the BSD "mount_smbfs" (on Mac OS X), where

* stephane.purnelle@corman.be nulis: > > > > > What's means, can I have some problem with this configuration ? > Or it's just a speed problem ? > Samba will get 2 value for same id and problem will appear soon or later. Any reason why using 2 ldapsam backend? ## Speaking for myself, It's not good to have a single point of failure in ## your authentication

Hi all, I have several UNIX servers I'd like to configure Samba on but am having trouble working out the best way to achieve consistent user and group permission across the file systems on several file servers. Basically I need to integrate the Samba server into our MS AD domain, using Kerberos for authentication which all works fine. My problem is achieving consistent permissioning with AD

Hi All, I have a concern with the behaviour of winbindd on startup in a multi-domain environment, in my case a 6 domain AD forest + trusts to 3 NT 4 domains. I've tested startup of winbindd in a 2 domain development environment and found if a trusted domain is not contactable it takes five minutes to timeout before winbindd becomes active (/tmp/.winbindd/pipe is created). If I assume this

Hi List, I'm having trouble understanding the behaviour of ACL support in Samba 3.0.3pre1 running on Solaris. Here are my problems the unix standard attributes for other seem to map to Everyone when viewing a share from a Windows client, however assigning rwx to other/Everyone does not grant access to folders for users connceted to the share, why not? I cannot work out how to change the

Hi list, I'm having difficulty joining new Samba 3.0.x machines to our production domain. I'm trying to join using net ads join -U Administrator but it just hangs. It does create a computer object in the AD though, if you Control C the hung net join and try and start winbind, winbind complains with this error "ads_connect from domain DOMAIN failed: Cannot read password" I