similar to: Samba authentication against an NT group in Apache

We would like to have our Apache Linux-based web server use our existing NT domain to authenticate some of our web pages. We are using the Apache module mod_auth_pam to use pam-based authentication and then the winbind pam module to do the actual authentication. We have gotten to the point where we can authenticate using NT _users_, but we have not been able to authenticate using _groups_. For

Hello everybody When I try to connect (net use) a samba share (Acl protected) from a windows XP workstation I obtain the following message in the "/var/log/samba/workstation_name.log" : . . . [2004/01/15 11:12:44, 0] smbd/sec_ctx.c:initialise_groups(244) Unable to initgroups. Error was Operation not permitted . . . The network connection to this share run sucessfully but when I

Hello, I'm running samba 2.2.7a-8.90 on a RH 9.0 I have installed this samba from an "src.rpm" to include some options (--with-winbind , etc, ...) and joined my system to the WINNT domain. So I'm able to acess any linux "share" from my NT worksation ... but when I try to run a script that "smbmount" some windows share ... the screen seems to be blocked and

Hello everyone, We have a CentOS 6.3 NFSv4 server and client, and we've run into a situation where the client is unable to list "private" (chmod 700-ed) directories, even if the current user owns the directory in question. A bit more background: we're also using Samba 3.5+Winbind to provide authentication and UID/GID mapping against a Windows 2008 R2 domain controller.

Hello Samba Users, I cannot change a user's Samba password from a Windoze client or from the Unix Samba server when "unix password sync = True". Any ideas what/where I screwed up? AtDhVaAnNkCsE - Samba version 1.9.18p10 on a Solaris 2.5 box. - compiled with the following flags: FLAGSM = -DSUNOS5 -DSHADOW_PWD -DNETGROUP -DFAST_SHARE_MODES -DALLOW_CHANGE_PASSWORD - global

Hello-- I am a fairly new dovecot user and have run into a problem. I am running dovecot 1.0alpha5 (built from source) on a Fedora Core 1 machine. The system has about 400 users with over 80 IMAP users, and we have just transitioned from UW-IMAP. Thus all users are currently still mbox users. I would like to transition them to maildir users (this was the main point for me switching servers), and

I am having a strange problem that I thought someone might be help resolve. I am using Samba 3.4.7 at the moment, but I've had the same issue with Samba 3.4.6 and Samba 3.5.2. NOTE: Domain, hostnames, usernames and SIDs have been changed to protect the guilty. I am seeing an unable to successfully execute a variety of lookups from wbinfo and I think this is the underlying cause of some

Hello, I have run into troubles trying to jump from 1.0alpha5 (basically running smoothly) to 1.0beta5 and/or beta7. I am seeing errors such as the following set for nearly every user. dovecot: May 01 16:21:02 Info: IMAP(joeuser): Disconnected: Logged out dovecot: May 01 16:21:02 Error: IMAP(joeuser): file ioloop.c: line 153 (timeout_remove): assertion failed: (*timeout != NULL) dovecot: May

We're running Samba 3.0.20 on a Solaris 9 server, using the Blastwave build. smb.conf file is below. Our user homes are on a Veritas file system with vxquota enabled, usually 50M per user, and then users have links under their home dirs to file systems with larger quotas or no quotas. For example, /home/joeuser has a 50M vxquota, but /home/joeuser/aux is a softlink to /vol/aux on which

I'm running Samba with LDAP on SuSE. Users had trouble logging in - finally I just ran db_recover & restarted ldap and samba. It looks like the LDAP database got corrupted somehow because samba couldn't get the LDAP data. Also I created accounts with smbldap-useradd -m -a -B 1 username. Some of the users were just using the same password samba seemed to kick them out. I used

Hello All, I've been discovering the joys of Samba/ADS integration here (the environment is a chip design concern that has chip simulation tools, many of which run in Linux, but some of which only run in Windows. Winbind, and a Linux based NAS server are the cornerstone through which Windows and Linux elements of the toolchain will be able to seamlessly communicate, once we get all the

I'm baaaaack. :-) I've managed to implement a suggestion from Hans Morten Kind from this list that seems to have stopped the crashing. However, my hack - commenting out a call to i_unreached() - makes me queasy because I have no idea of the ramifications of it (I don't habitually code, myself). So I wanted to lay it out for y'all in case this is a problem that you feel

I'm trying to use ssh on the client side, mainly because I want to authenticate rsync clients using LDAP. I'm having issues. It seems when I use --rsh="ssh -l username", that the rsync server is ignore my rsyncd.conf uid and gid directives. My goal is to create a "dropbox" repository for files where a user can basically rsync a file to another allow on the rsync

We have a working samba file server using winbind to authenticate with a Win2003 server in native mode. [2008/05/10 18:22:54, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1651) set_dc_type_and_flags: domain STARTREK is in native mode. [2008/05/10 18:22:54, 5] nsswitch/winbindd_cm.c:set_dc_type_and_flags(1654) set_dc_type_and_flags: domain STARTREK is running active directory. I now want to

I have installed samba 2.2.7a on FreeBSD from the ports collection. I have used an existing samba config file which worked with samba 2.0.x. I am using security = server Yesterday, a user attempting to use a print share started getting rejected with the message: [2003/01/22 13:52:21, 1] smbd/password.c:server_validate(1101) password server is not connected [2003/01/22 13:52:21, 1]

Hi all, I have done a fair bit of searching of the mailing list archives, google and the manual, but have not had any luck as yet. I apologize for the length of this e-mail, but I thought it was better to provide what I could right off the bat instead of waiting to be asked for it. I am having the following oddity with a new samba server: I have it configured to talk to an

# wbinfo -n working-group | awk '{print $1}' | awk -F '-' '{print $8}' 69153 # wbinfo -n problem-group | awk '{print $1}' | awk -F '-' '{print $8}' 136399 The OS can use that group:- # chgrp problem-group test.txt # ls -asl test.txt 0 -rw-r--r-- 1 root problem-group 0 Aug 25 17:55 test.txt # It's not a case that the group is unavailable...

Does anyone know when Asterisk is supposed to support prioritization of the SRV records returned. I think it's accepted that right now the Asterisk always just uses the first record returned regardless of priority. I also noticed, on register, that it queries for an A record first. If it gets a response, it will use that address to send the REGISTER. If it does not, then it will launch an SRV

I've been beating myself senseless trying to build OpenSsh 3.0.1 on Solaris 2.5.1 and get AFS login working. The symptoms of the problem are: sshd builds (used --with-afs and -with-kerberos4 - there is no PAM on this box), accepts connections from non-AFS users, but does not accept a connection from an AFS user; the user sees "permission denied" after entering the password. The

Can someone explain the changes in the system PAM setup for Centos5 vs. earlier verions? I have servers configured to use SMB authentication against a Windows domain controller so I don't have to deal with separate passwords. That still works the same for users that actually have local accounts. However, on some machines I also build the mod_auth_pam module for apache and use an