similar to: S3 domain member shares won't authorize secondary groups, only for W98

Bon app?tit ? tous, I have a small problem regarding delegation of domain administrator rights to a 'normal' user (eg. not root or uid!=0). I maybe fooled myself believing it is possible in Samba3, reading Samba-HOWTO-Collection.html#WKURIDS, that a user could be also a domain admin. I've created group mappings (with good RIDs) for main groups (eg. SID-512, SID-513, SID-514,

List, I am encountering some really strange behaviour with Samba 3.0.20 and OpenLDAP 2.2.28. Everything in terms of PAM and NSS has been working correctly for a long time and have not been changed in months. This week it has started playing up, with NT_STATUS_LOGON_FAILURE type errors. The local ldap server is replicated from a master. In syslog, I see things like Jun 16 16:06:14 s-sophia smbd:

On Thu, Apr 23, 2015 at 06:05:42PM +0800, Jones Syue wrote: > Hello Ervin, > > The in-memory cache lookup could be added back into > samba-4.1.6 by applying the attached patch, > if it could be compiled with Louis how-to steps, Patch didn't make it to the list. Can you point to a URL or ftp site containing the patch ?

Hi, we have tested Samba 3.0.0 and 3.0.1 with LDAP-Support (--with-ldap) on Solaris 8 and it worked fine. The machine authenticates against an OpenLDAP server. Patch 108993-23 is applied and we use native Sun LDAP client modules. On Solaris 9 we ran into problems with secondary groups. Users cannot access files if the rights are based on a secondary group and if this information is stored on

Hi Rowland, Thanks very much for your quick response. > Have you tried the command with a member of Domain Admins instead of > Administrator ? I just did and I now feel that something is wrong with our Administrator-account. Granting the SePrintOperatorPrivilege to user NAV\prtadmin with user NAV\Administator failes on our fileserver (INVALID PASSWORD). Granting the

Dear Samba-experts, I'm trying to setup automatic printer download with our samba 4.19.4 fileserver which is a domain member of our samba 4.18.2 AD. printer drivers have been installed on the fileserver: root at serv00:# rpcclient -Uprtadmin%pass1 SERV00 -c enumdrivers [Windows x64] Printer Driver Info 1: Driver Name: [Kyocera TASKalfa 5052ci NAEV] CUPS-printers have been installed

Hi all, I got a problem while trying to set up a Samba 3.4 Server in hybrid-mode. After trying for some time I managed doing a merged-build of Samba3 and Samba4 and I can now start samba4 without getting errors. However, the same is not true for Samba3: starting it, I get the below error message. Has anyone an idea about what the reason could be? Did I miss anything during build/setup?

On Mon, 7 Oct 2024 22:46:36 +0200 Peter Koch via samba <samba at lists.samba.org> wrote: > Dear Samba-experts, > > I'm trying to setup automatic printer download with our > samba 4.19.4 fileserver which is a domain member of > our samba 4.18.2 AD. > > printer drivers have been installed on the fileserver: > > root at serv00:# rpcclient -Uprtadmin%pass1

Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: winbindd.zip Type: application/x-zip-compressed Size: 52252 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/20021202/ee1c44bf/winbindd.bin -------------- next part -------------- A non-text attachment was scrubbed... Name: smbd.zip Type:

Hi * I encounter severe problems with changing ACL settings in Samba 3.0.2a after migrating users from NT PDC to LDAP-SAM. I did not find anything about this in the mailing list yet. However, I have no idea (if) what I am doing wrong here. Although I can hardly believe that I am the first one to trigger that bug, it looks like a problem with the sid_to_gid routine. So please take a look at that:

what is the 'passwd chat' line for Samba 2.2.3a-12.3 on Debian Woody that enables password synchronisation with Windows 2000 clients in a domain? I currently have this in smb.conf but it doesn't work: unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n I get the Windows message

We've updated from 3.0.24 to 3.0.25 and we've noticed some minor problems such as some clients had to reboot in order to mount the share. And the log is now showing this warning all the time: WARNING: Winbindd not running, mapping ids with legacy code [2007/05/17 08:57:37, 2] passdb/lookup_sid.c:sid_to_gid(1435) We are thinking to revert to the previous version 3.0.24 which works

Dear all, Hi. This is imacat from Taiwan. We have just upgraded from Samba 3.0.24 to Samba 3.0.25, as the samba-announce suggeseted ("... is the version that servers should be run for ..."). We are running Samba as our PDC and only server in our domain. My environment is: x86_64, Debian 4.0 r0 Etch, kernel 2.6.18, gcc 4.1.2, glibc 2.3.6. Before upgrade I have read the

Hi. I'm dealing with this "lib/smbldap.c:smbldap_open(1009)" message in the log file. I tried to find some hint in the net but I couldn't find anything that pointed to a solution. Below are the surrounding messages in a excerpt of the log file: [2007/04/02 17:31:10, 3] passdb/lookup_sid.c:fetch_sid_from_uid_cache(918) fetch sid from uid cache 1088 ->

How does one create all of the builtin groups for this release? When using tdbsam with previous releases one would automatically get such groups as: System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Admins (S-1-5-21-1832519723-2688400599-3493754984-512) -> domadmin Domain Guests (S-1-5-21-1832519723-2688400599-3493754984-514)

I have a Centos 7.6 server with samba 4.8.3  configured as a member of an AD domain using "ads' security and the "nss" idmap backend. Clients are unable to access the shares on the server - they repeatedly get asked for their credentials. The smbd log shows the user authenticating and a mapping from the user's SID to their unix uid is found. However, it seems that

Hello there, I have come to a situation where I would like to mix 2 approaches to create the contents of a file. Here is what I have: a module ''sudo'' which manages a hosts /etc/sudoers file: init.pp: class sudo { case $operatingsystem { Debian: { package { "sudo": } } } file { "/etc/sudoers": mode => 440, content =>

Hi all, On Thu, Apr 16, 2015 at 03:00:49PM -0700, Jeremy Allison wrote: > On Thu, Apr 16, 2015 at 08:42:48PM +0200, Ervin Heged?s wrote: > > Dear Samba users, > > > > here is an Ubuntu 14.04, with Samba 4 (4.1.6), and LDAP (slapd > > 2.4.31). The config came from a previous system (Debian Squeezy), > > which had been crashed (HW error - on this new machine,

Hi all The symptom is: > C:\Windows\system32>net USE z: \\10.10.23.219\share /USER:SMBUSER > [password] > > System error 1326 has occurred. > My situation I am using VirtualBox. Windows 7 Home is the host. Fedora 13 is the guest. My goal is to cause the Fedora guest to expose an smb share to the Win 7 host and have the Win 7 host mount the share as a drive. My procedure:

Hi all, We have an old 3.0.7 samba running as PDC. As we have problems with XP64 clients accessing the domain, I compiled a 3.0.23c and copied the smb.conf. Some of the client work well with the new Samba, but most of them do not. Was there any relevant change in the smb.conf part between the two versions? Thanks Bgs