similar to: XP Joining domain

I've been googling for a while now and haven't found a decent answer to this question. How do I allow users to join the domain without handing out a domain admin level account? Is there someway to limit what other domain features this account has access to? Thanks, Derek -------------- next part -------------- A non-text attachment was scrubbed... Name: PGP.sig Type:

I've got a Samba PDC and a Samba domain member server. I successfully joined the domain, started winbind and run the wbinfo -p; wbinfo -t tests, both succeeded. But if I do a winbind -g I only get BUILDIN/group and if I do a wbinfo -u I get "Error looking up domain users". But ntlm_auth succeeds. So I'm a little confused. At this point this is a minor issue since

We are running Redhat 9, 2.4.20-30.9 kernel, Samba 3.0.0 and Winbind 3.0.0. Security is set to "Domain" and we are trying to set up shares which will be available to valid NT 4.0 users and groups. Winbind appears to be working, and you can use the commands "getent group" and "getend passwd" to see that it is communicating with the NT domain for user and group

I was wondering if anyone has come across an error in their winbindd log: could not lookup membership for group rid S-1-5-21-3506869558-4124343851-970148941-2025 in domain BOGUS (error: NT_STATUS_NO_SUCH_GROUP) I have all the mappings done correctly: domainadmin (S-1-5-21-3506869558-4124343851-970148941-512) -> domainadmin domainusers (S-1-5-21-3506869558-4124343851-970148941-513) ->

I have 3 Linux rh9.0 servers on the network all using Samba/LDAP to authenticate. One is acting as the PDC and the other two are domain members. On one server I don't have winbind running and everything works great, however, on the other server, if I turn off the winbind I get a password prompt and cannot access the server. I have no need for winbind but I'm forced to keep it on.

Hey, I have a samba 3.0.0. PDC on my Fedora Core server. I have one win 98, one XP and one NT clients. As I log on, I get "primary gid of user [username] is not a Domain group" error. I am sure gid is 100 (users) and my add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u If I login using the root account, I don't have this problem. What can I do to fix

I've got a very odd situation occurring. I recently upgraded to Samba 2.0.26a and now secondary group membership doesn't work. On the filesystem I have this layout /derek /derek/Folder 1 /derek/Folder 2 derek has these ACLs # file: derek # owner: root # group: root user::rwx group::r-x other:r-x Folder 1 has these ACLs # file: Folder 1 # owner: root # group: g1 user::rwx group:rwx

When setting up an LDAP PDC do I have to have both user and machines in the ou=People container? Here's what I've got. LDAP Tree ou=People,o=umd.umich.edu ou=NIS,ou=Groups,o=umd.umich.eud ou=machines,ou=Samba,ou=Services,o=umd.umich.edu ou=Idmap,ou=Samba,ou=Services,o=umd.umich.edu smb.conf (ldap stuff) ldap delete dn = no ldap suffix = o=umd.umich.edu ldap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Actually determined this was a CUPS issue. I split the CUPS and Samba servers, system load on the Samba box now averages about 0.3 while load average on the CUPS system is about 0.8 or 1. Thanks, Derek On Aug 28, 2005, at 9:47 AM, Jim Ross wrote: > Derek Harkness wrote: > >> Is it better to setup lots of small print servers or one

Hi @all, I have some question I can't find a explanation. I have a standalone Samba3 as PDC. It works perfect with LDAP. Now I want to implement Policies. 1) Is it possible to use GPO from ads ? And if so, where to store this policies. 2) Or can I only use policies created with poledit from NT4 which should be stored in NETLOGON. Any help or links about this would be apreciated.

In my AD setup I have 3 domain controllers (dc1, dc2, dc3) when samba/ winbind are talking to dc1 everything is great when talking to dc2 or dc3 I get this error "kinit succeeded but ads_sasl_spnego_krb5_bind failed: Strong(er) authentication required" and nothing works. I don't think its a samba config problem but my AD admins aren't real helpful in getting samba

Dear lists... But this still un-solved the real problem to join w2k to samba3-ldap . I'm here with the same situation. I even switch my distro to SuSe with same result, still cant join domain. Please give us hint how to solve or debug this problem. regards reza -----Original Message----- From: Craig White [mailto:craigwhite@azapple.com] Sent: Tue 7/20/2004 9:48 AM To:

This maybe more appropriate on the developers list but I'll ask here first. Anybody know if any improved support for AFS is being added to either samba 3 or 4? We currently share all user home directories, shared files, web sites, etc. etc. from AFS using Samba. This setup is working great, thank you to everyone involved!! I'm just concerned that AFS support might not make it

Okay I don't think what I want to do is possible but here goes. I want to deploy a samba domain for my windows clients, but I want samba to use AFS on the back end. But AFS requires kerberos to get tickets and tokens. So is there anyway to make this work. I personally don't care if samba accepts kerberos tickets from the client or not, but a ticket and AFS token will need to be

I am attempting to set the SePrintOperatorPrivilege right on my RHEL 5.2 samba server and need some guidance. The samba box is currently joined to an AD forest in which I have a delegated OU, I do not have a Domain Admin account. Samba seems to want/need an Admin account in order to make changes to the server configuration such as rights. So the question is. Is there away to set a

Has anybody found a fix for the Access 2003 printing? I've got a couple of work arounds but neither is a good long term solution. 1) Set the default printer to something other then a Samba print queue. 2) Map the Samba print queue to a dos LPT port. Thanks, Derek To boldly go where I surely don't belong. -------------- next part -------------- A non-text attachment was scrubbed...

Hello All, I'm integrating an existing unix environment into an exist AD environment. I'm thinking of switching from nssldap to nss_winbind but have one problem. My user's home directories are in the format of /home/user/<$first letter>/<$second letter>/<$username> (/home/user/ d/h/dhaknes). Looking at the template homedir it doesn't appear that I can

Hello. I''m trying to set up hvm for linux or windows. I start with a very simple configuration without disks at all. but the virtual machine does boot or even "power up". If i remove the ioemu from the network device and specify type=brige or type=route everything goes fine, the boot process is starting but then I cant get network working in the guest.

I was wondering if any one else is having issues with supplementary groups not being recognized. It seems as if Samba is ignoring the sup.groups. I'm using RH9.0 on Intel with samba-3.0.0-2_rh9 and OpenLDAP 2.0.27. When I do a "id -a username" the user is in all the necessary groups but when accessing shares the users' primary GID is used only. For example, uid=1001(jgray)

Marco, I have some preliminary HowTos and software available at http://quasi.ksl.com/icecast/ It's not as nice as http://www.6809.org.uk/kja3/ices2-howto.shtml, but I'm working to make it better as I become more familiar. Hope it helps. The ices2 program is designed for .ogg streaming while icecast-1.3.12 and related streamers, MuSE, liveice and DarkIce will still stream .mp3 quite nicely.