similar to: [Security] Valid Users fails

hi i'm working with samba3.0rc2 no probs but i have i question concerning id-mapping i authenticate all users with ldap, works but i always need a samba user in ldap, with sid sid S-1-5-21-1042031166-387543594-2118856591-501 if i don't have it, i get an error during logon with winxp, that the domain controller could not be found or i have a non-existent account, which is not correct

hi list, i'm using samba v3.0.14a when working with "admin users =" "inherit owner" does not work for me anymore the owner is set to "root" any ideas? will "inherit owner" solve this problem? thx in advance -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany

THX SO MUCH !!! you were a big help for me! best, micha Michael Agard wrote: > Sorry, sent this before I pasted the other link: > > http://www.computing.net/windowsnt/wwwboard/forum/22485.html > > Cheers, > > Michael > > ------ Forwarded Message > >>From: Michael Agard <michael.agard@aa-rf.com> >>Date: Tue, 11 Jan 2005 09:05:32 -0500

hi folks, i hope you can help me!!! i'm using samba v3.0.14a (sernet) on debian sarge. openldap v2 is my backend, smbldap-tools 0.8.4 (patched for our organization). when adding a user via usrmgr.exe to an existing domain group i get the following error: [in usrgmr] The following error occured changing the properies of the user xxx User does not belong to this group [in smbd.logs]

hi list, just for my knowledge -> we have a working PDC / BDC infrastructure for our domain DOMA, where PDC trusts another PDC from DOMB (all samba v3). when PDC from DOMA goes down, is the trust still valid or do we have to setup the trust on *both* DCs from DOMA (net rpc trustdom establish DOMB ... )? is that possible at all? thx&greez -- Michael Gasch Max Planck Institute for

hi i've been sucessfully using samba 3.0.0 and win2k/xp clients in a domain if i try to add a win2k/xp workstation in a samba 3.0.1 controlled domain (with the same smb.conf as the 3.0.0 PDC), i always get "no mapping between account names and security ids was done" the same workstation can enter a 3.0.0 controlled domain with no problems ! machine accounts were also created so

hi list, is it possible with samba v3 and ldap backend to embedd a normal group like "normalgroup" in the group "Domain Administrators" to give members of the group "normalgroup" full administrative rights on workstations? i tried with "net groupmap addmem sid-of-normalgroup sid-of-domain-admins" and "net groupmap addmem sid-of-domain-admins

hi, weird thing: i thought when commenting out "delete user script" and "ldap delete dn" nobody is able to delete users from the domain. what happens: users are deleted, to be more specific their samba attributes are deleted but not their posix values. i won't let our admins delete users from our domain becaus we have another management to add/delete users to/from a

Hi folks, it's not really an issue for me but could you please comment this behaviour i described? may be i can then open a bug report. thx! -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution (IT) Deutscher Platz 6 D-04103 Leipzig Germany Phone: 49 (0)341 - 3550 137

hi@all i'm using netatalk and samba as fileserver for different clients (OS9,X,WinNT/2K/XP) to create shares, that are visible and accessible for all clients (via afp/smb) i created a folder and made it public in all daemons (atalk, samba) to get a better file handling i'm using the samba feature: vfs object = netatalk but there are still some problems files that are created via afp

hi, i have a question about winbind, idmap_rid and trusted domains. at sambaxp jerry said it's possible to have idmap_rid working with trusted domains. this is what we would like to have here. smbd -b doesn't show this compile option on 3.0.14a rpm (SuSE). may be this is normal, but how do i ensure that this option is in my binary w/ testing too much :) or how can i compile it

hi, i'm using machine 1 (SuSE 9.0 32Bit): rsync 2.6.2 (from SuSE RPM) machine 2 (SuSE 9.1 64Bit): rsync 2.6.2 (from SuSE RPM) my command looks like the following: /usr/bin/rsync -W --progress --rsync-path=/usr/local/bin/rsync -e ssh --delete --force -av /data/ machine2:/data/machine1/ after rsyncing both machines, some files differ ! i verified these differences with "diff",

hi, i read about samba4wins, which is really a great work from the team! do you know, if this will work with samba v3.0.14a? i ask because a german news service writes that it?s only possible with 3.0.21 (http://www.heise.de/newsticker/meldung/69132), but i can?t find this information in the notes on http://ftp.sernet.de/pub/samba4WINS/samba4wins-1.0.0-16/ thx for helping me! -- Michael

hi after successfully migrating users and groups from NT to Samba v3 i'm looking for a way to transfer some 1TB data from our old NT PDC to the newer one - Samba just copying the data doesn't work, because we have to ensure data consictency (and we can't switch the NT PDC off on a weekend to copy it, because it would take too long [some old MAC shares included and the PDC just

hi as the subject already tells you: is it better (and "cleaner") to build samba v3 always as RPM and install it or - in case of an update of samba - simply overwrite the existing version with "configure && make && make install" ? normally there aren't too many changes in the paths of the install-scripts, so that all (old) samba files are correctly

hi i recently deleted the idmap file winbindd_idmap.tdb (i have a backup ;) ), because it contained invalid mapping credentials my question: how can i create a new mapping_db, where new mappings are stored? which daemon creates this mapping_db, if it's not present? is it possible at all? thx&greez -- "Matrix - more than a vision"

hi there after successfully joining an NT domain i tried net rpc vampire -S ntpdc and get: Fetching DOMAIN database SAM_DELTA_DOMAIN_INFO not handled net: decode.c:634: ber_scanf: Assertation `((ber)->ber_opts.lbo_valid==0x2)` failed. Aborted samba compiled perfectly on my suse 8.2 box with rc1 and beta1 i had no problems with net rpc vampire so what's wrong? thx --

hi@all just for my understanding: in a samba 3.0 domain (samba 3.0 as pdc with ldap), i thought each machine, joining the domain, gets the SID $DOMAINSID-RID - whether in LDAP or the machine itself but when i check the SID of a machine account (for example locally on a windows xp client), it shows up a different SID (checked with psgetsid), but it can join/connect/browse the domain like a

hi viewing my logs i saw some weird "saerch filters" by sambav3 using openldapv2 filter: (&(&(objectClass=sambaSamAccount)(?=undefined))(objectClass=sambaSamAccount)) smb.conf related entries: passdb backend = ldapsam:ldap://localhost:389 ldap suffix = dc=eva,dc=mpg,dc=de ldap admin dn = cn=manager,dc=eva,dc=mpg,dc=de ldap filter =

hi john, i just want to point out some lacks in the current online documentation and the documentation of smb.conf distributed with the binaries/tarballs: missing explanations: - acl check permissions - acl map full control - winbindd nss info - rename user script also the documentation says in "map to guest": "The three settings are :" although there're four settings