similar to: NT4 Migration -> Samba 3.0.2a + LDAP

Hi! Has anyone got any "success story" or any good advice of using Posix ACLs (or Enhanced Attributes) with Samba? I'm using Debian woody with 2.4.22 linux, ext3fs and Samba 3. -- Pirkka

Hi! I'm using Samba 3.0 pdc with Debian Woody, LDAP and ACL-support. ACL works great, but if I try to ADD an acl-permission via windows security-tab there is none to choose from. It shows that my domain is selected and there are some basic users (Everyone, Authenticated users, CREATOR-OWNER etc.) that can be chosen, but no users or groups of mine. Is this by design or am I missing

Hi! This teamware mailclient (teamware.com) that we use at the office has problems adding files as attachments from our Samba 3.0.2a share. The attachment file browser sees the files but fails to add them as attachments (with an error message: "valid.stf - file not found" regardless of the file name in question). I tracked this thing down to scandinavian letters (if your mail

,--------------- Weitergeleitete Nachricht (Anfang) Betreff: Re: [Samba] smbpasswd fails to add machine account with ldapsam Absender: Christoph Rudorff Datum: Mon, 17 Nov 2003 19:58:19 +0100 Newsgruppe: linux.samba Pirkka Luukkonen wrote: > Hi! > > I am seeing other users with the same problem as I have. confirmed. > My samba also fails to add machine accounts.

Hi! My Samba setup broke after upgrading Samba from 3.0.5-1 to 3.0.6-3 using Debian apt-get upgrade. It seems to me, that the problems lies within winbind. Any help would be appreciated! -- Pirkka > The Samba 'panic action' script, /usr/share/samba/panic-action, > was called for pid 8012 (/usr/sbin/smbd). > > Below is a backtrace for this process generated with gdb, which

Hi! I am seeing other users with the same problem as I have. My samba also fails to add machine accounts. It seems to me if it didn't even try. If I use some other script (pdbedit, smbldap-tools) than smbpasswd it manages to add the account but still fails to authenticate within the same session. If I try again the machine account exists and authentication goes ok. server:~# smbpasswd -a -m

I'm trying to grasp pg. 154 of the "Official SAMBA-3" book by Terpstra and Vernooij and I'm just missing a critical networking concept. I understand that SIDs are the numerical identification of a user for the Windows world. I understand that UIDs are the equivalent for the *nix world. But what the @$@! is a Relative IDentifier (RID)?!? On page 153 the command to map a

I have a bunch of Windows users using a Win2k server as a PDC. I want to move all the server functions to a Samba server without disturbing the users in any way. The client machines are all Win2k, using local profiles. Samba insists on algorithmicly generating the RID from the UID, so the Windows user, after migration, gets a new SID and loses contact with their local profile. In fact, they

Hi * I encounter severe problems with changing ACL settings in Samba 3.0.2a after migrating users from NT PDC to LDAP-SAM. I did not find anything about this in the mailing list yet. However, I have no idea (if) what I am doing wrong here. Although I can hardly believe that I am the first one to trigger that bug, it looks like a problem with the sid_to_gid routine. So please take a look at that:

When I set up my initial users for the Samba domain i did not realize that RIDs were supposed to be dynamic. I was creating the user as a posixAccount in LDAP, and then adding the Samba elements via a script that I wrote. Their RIDs are the same as their UID. For instance if I have a user with uidNumber 1036, her SID would be <domain-SID>-1036. This is fine except for idmapping for

Hello, I want to use samba v3.3.x to implement an NT4/Win2k style domain: a samba PDC and a samba BDC, using ldapsam for the 'passdb backend'. I plan to use RedHat Directory Server v8.2 as the ldap server. I'm trying to sort out how user/group management and nss will work. I'm confused about how/when the samba-supplied ldap schema is used (I mean the schema that's in the

Hello list, I have a few questions to ask... I am about to migrate from Samba 2 to 3 (3.5.9). I am going to use LDAP as backend in the future and came across something I don't understand. As far as I know the 'old' way to generate RIDs for users is to take their uidnumber, multiply it by two and add 1000. For computer accounts it would be 1001 instead of 1000. I am now trying to

On Mon, 2016-11-28 at 14:03 +0000, Rowland Penny via samba wrote: > On Mon, 28 Nov 2016 14:22:00 +0100 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > > > > > > NT4-PDC: > > > > # net groupmap list > > Domain Users (S-1-5-21-2940660672-4062535256-4144655499-513) -> > > users > > Domain-Admins

I was wondering if anyone knows if there are any plans to fix Bug #1139 (reproduced below) in version 3.0.3. I haven't tried 3.0.3pre1 yet, but from what I read of the changes it doesn't look like this bug has been addressed. Is there some other work around? This bug is quite annoying as some of our users/administrators would like to use Windows to modify ACLs and we recently

Hi, In 3.0.23 and 3.0.23c in our domain controlled by samba with an ldapsam backend when I try to add a machine to the domain I now get this message: [2006/10/04 12:08:03, 0] passdb/pdb_interface.c:pdb_new_rid(1067) 'algorithmic rid base' is set but a passdb backend without algorithmic RIDs is chosen. Please map all used groups using 'net groupmap add', set the maximum

Is the rid of a user required to be 2*uid+1000 in HEAD when using an ldap backend? Is it still necessary that users also exist in /etc/passwd? I'd like to replace NIS and win NT domain auth with ldap, and want to keep the current unix uid's and the NT rid's, so the migration is transparent to the end users. -david

Am 2016-11-28 um 15:03 schrieb Rowland Penny via samba: > On Mon, 28 Nov 2016 14:22:00 +0100 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> NT4-PDC: >> >> # net groupmap list >> Domain Users (S-1-5-21-2940660672-4062535256-4144655499-513) -> users >> Domain-Admins

Hello, sorry, but I cannot find start of this discussion thread, so my question may be stupid. Is your domain classicupgraded from Samba 3 or provisioned from scratch? I have similar problem with our domain which is upgraded. If I provision the new domain everything works, but in old domain there is something broken inside. For Rowland: Does exist utility with similar function as "net rpc

A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 6083 bytes Desc: not available URL: <http://lists.samba.org/pipermail/samba/attachments/20120625/569cea1a/attachment.bin>

Hey everyone, I'm preparing for a transition in which I'll be moving everything (PDC, WINS server, big file shares) off an old Linux server running Samba 2.2.7 onto a much newer Linux system running Samba 3.0.22. In the process, I'll be switching from smbpasswd (only thing supported under Samba 2.x, if I understand correctly) to ldapsam on Samba 3.x. I want to keep the same domain