similar to: Converting local unix users to winbindd

Hi! I use Samba 2.2.2 on Linux Red Hat 7.1. My Samba server is NT domain member (security = domain), and I use winbindd. I detect some strange situation, as I look. See below. For example, my NT domain is MYDOMAIN (PDC implemented on NT4), and this domain have user myuser (MYDOMAIN+myuser as see him Samba&Winbindd). Linux, which run Samba&winbindd, have local user myuser too. Local

Just noticed a somewhat subtle gotcha when adding users to a Red Hat Linux system running winbindd. If you use 'adduser', it will see your winbindd uid range and think all the UIDs up to that point are in use. It'll then pick the next available one and use that for the new user ID. Winbindd, unaware of this, will go ahead and pick that UID for the next user you add to the NT domain!

Hai Tom, Im not in 4.2 yet, but maybe i can help analize your problem. ( as long its possible, big power outage in the netherlands.. ) this : https://lists.samba.org/archive/samba/2014-September/185031.html is a good example how not to setup your samba server. so before we can think with, please post (and sorry if its again) some info. Your OS? Compiles samba or os provided samba, or

Rowland said: >> Is there a set of settings to restore the mapping of AD users to pre-existing Unix Users? >No >> >> Does the official Samba distributed project source continue to support AD Users mapping to pre-existing Unix Users? >I do not think it ever did. I found this reference quickly from google describing the previous behavior. Winbind was always optional

IDAMP cache somehow ends up with an unmapped SID2UID entry (i.e value = -1) and the SID2GID entry expires. At this stage winbindd returns unmapped for a SID-to-UNIX-IDs request. This results in smbd giving incorrect group memberships and incorrect resource access, until the SID2UID entry expires. This is surely a bug? Samba version is 3.6.6 as bundled with our current Solaris 10 patch revision

Hi Is it possible to have both unix permissions and Windows permissions on the same Directory? We are Migrating to a SAMBA fileserver, and want this functionality. I have a Win2k AD Domain, and SAMBA 2.2.8a , with these basic settings security = domain and winbindd running nt acl support yes I currently have winbind providing me with fully functional windows permissions.. BUT .. also creating

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The net commands work: net ads testjoin, net ads user (after a ticket is created). However, winbindd refuses to run correctly. It has an --set-auth-user configured, but the following commands don't work: [root@nassc01 samba]# wbinfo -p Ping to winbindd failed on fd -1 could not ping winbindd! [root@nassc01 samba]# wbinfo -t checking the trust

Hello, I apologize in advance for cross-posting (and posting for help) to samba-technical, but I've been seeking help on the samba list and bugzilla since last week and have had no replies. Using Google, I've found this issue referenced only once on the mailing list and once in a bugzilla bug (10991). Unfortunately, I've found no resolutions. The problem appears to be specific to

The same problem ocurred today. The same log in /var/log/messages in DC, and I have to stop and start the samba service. Any help is appreciate. Regards, Rafael ----- Mensagem original ----- De: "Rafael Domiciano" <r.domiciano at senff.com.br> Para: "Rowland Penny" <rowlandpenny241155 at gmail.com> Cc: samba at lists.samba.org Enviadas: Terça-feira, 1 de

Thanks Rowland for response. OK, setup the "log level = 10". I noticed something today. I have to restart the samba server 2 times. In the second restart I did a named restart too. Maybe could be something related to communication to named? I did the named.conf conforming the wiki, adding these 2 lines: options { .... # DNS dynamic updates via kerberos tkey-gssapi-keytab

On 01/09/15 14:49, Rafael Domiciano wrote: > I've implemented AD samba in our structure almost one month, after almost two months of tests. Everything is working, including GPO, although we are still adapting to the new way of working, after all AD domains is quite different from NT domains. > > But I have experienced strange problems with the winbindd, which has happened at least 3

Hi! I have the following problem: winbindd getgrnam/getpwnam/lookupname calls do not return for a long time (> 30 seconds) which is obviously quite annoying to the users. This usually happens at the "first" login, i.e. subsequent connections are not delayed until a (probably cache) timeout. I've failed to determine who is responsible for the caching yet. I'll provide

Hi, I have a small problem with winbindd (from samba 3.07) + W2k3 Ad: wbinfo -g fetches a list of only the Global security groups. I need to be able to chown(1) directories to be owned by domain local groups so that I can assign Global groups permissions to these directories. I was wondering if this was a know bug/feature with winbind? (I did have a look through a few of the list archives -

Okay okay - forgive me for being a whiney itchbay. But the fix was (when discussing *nix systems) quite counter intuitive ... I noticed that, even after using chmod #uid file, that the system was not returning the string name for the appropriate numerical uid. So, since I was headed out to lunch, I went ahead and rebooted the server. Lo and behold it all appears to work now. Correctly even.

Hi, I have been trying to use Winbindd in SLES 11 SP3 (Samba version 3.6.3-17.25.1) to fetch AD (Windows 2008 R2) identities into the Linux box and currently running into some problem w.r.t domain local groups and thought I could get some help here.. I have a two domain setup, in which DOMAIN1 is the parent domain and DOMAIN2 is the child domain. I have 2 users DOMAIN1\user1, DOMAIN2\user2 and

On 02/09/15 13:34, Rafael Domiciano wrote: > The same problem ocurred today. The same log in /var/log/messages in > DC, and I have to stop and start the samba service. Any help is > appreciate. > > Regards, > > Rafael > > > ------------------------------------------------------------------------ > *De: *"Rafael Domiciano" <r.domiciano at

Hello, I've been working on converting our OmniOS home directory member servers from Samba 3.6.25 to 4.3.8. For the first few hours after startup, everything is accessible and works as expected. Eventually, winbindd stops responding and smbd starts logging this error: domain_client_validate: Domain password server not available. At this point, authentications no longer work.

Hi list, I'm using samba3.6.12. I find that seems only the parent winbindd process can accept connections, and it dispatches connections to his child. besides it only dispatches connections to the completely idle child(find_idle_child). AFAIK, nginx lets all its processes to accept connections, so it has a good performance. I'm wondering can I modify some winbindd code to let all

----- Mensagem original ----- De: "Rowland Penny" <rowlandpenny241155 at gmail.com> Para: samba at lists.samba.org Enviadas: Terça-feira, 1 de Setembro de 2015 12:05:20 Assunto: Re: [Samba] Samba AD - Issue with winbindd: Could not write result On 01/09/15 15:33, Rafael Domiciano wrote: > Hi Rowland, thanks for your response. > > Both samba is self compiled. >

Samba 3.5.8 on OpenSolaris (SunOS 5.11) Intel platform; gcc 4.2.3; built with "configure --with-winbind --with-krb5 --with-ldap --with-ads" Samba is joined to our Windows-2008 AD domain. Pretty much everything works, except that winbindd can't convert between SIDs and uid/gid: 1. wbinfo -r WIN\\lanz (Returns nothing -- no output) First I obtain my SID from "wbinfo -n