similar to: Questions on Samba3/OpenLDAP/PDC

passdb appears a lot of times in smba logs, even if it uses LDAP as a backend, as in my config. Maybe the log message should be changed in the code for something easier to debug... But this error message you said, only appears if you try to add or delete the user twice from LDAP, so you should remove "-a" from the add user script and comment out the user delete script if you intend to

Hello, have some little problems adding user to domain with USRMGR.EXE My System runs on SuSE 9.1 (2.6.5-7.75-default), samba-3.0.4, smbldap-tools-0.8.5, openldap2-2.2.6 If I try to add a new user with USRMGR.EXE I get an error "Access denied", but if I look into LDAP the new user was correctly added to LDAP. If I confirm the error-message and then cancel the "NEW USER"

I'm using Samba 3.0.22 on Ubuntu 6.06.1 as PDC for our Windows workstations. The passdb backend is tdbsam. I want to employ roaming profiles and due to the fact that we have a mixed Windows environment (Windows 2000 Pro and Windows XP Pro) I have the following entry in my smb.conf: logon path = \\%L\profiles\%U\%a Basically, this works fine. If a user is working on a W2k workstation, his

I am trying to get two Samba PDC/Domains setup with a trust between them. They are separate domains because they are separate companies (one is a subsidiary of the other) located in different cites. I am using Centos 5.1 x86_64 and Samba 3.0.28a packages built by me from Fedora 8 source RPMs. Based on what I have read, in order to do the trust thing I need to use Winbind/idmap to handle the non

Greetings! I created a Samba/OpenLDAP/smbldap-tools Primary Domain Controller. So far I am able to do the folowing: 1. Using USRMGR,EXE to administrating users and groups. 2. Adding Windows 2000, XP workstation on the fly. 3. PDBEDIT/SMBLDAP-TOOLS/GQ all works as they suppose to. 4. LDAP autheticate unix accounts. However, I am not able to to the following:

Hi, I'd like to upgrade my 2.2 samba to the latest 3.x stable, so I'm experimenting with the new features of 3.x on a RHEL 3 clone. I've run into some difficulty when using usrmgr.exe for administrating users. I've filled out the 'add user script' define with: add user script = /usr/sbin/useradd -g sambausers -c "Samba User" -d /dev/null -s

Hello guys! I'm using samba 3.2.4 (binaries from samba.org) on SLES9+sp3. I am building a PDC with LDAP support (i am attaching my config files), I'm also using ldapsam:trusted and ldapsam:editposix. Although I am setting the account lock after 3 failed tries in usrmgr, and verified that the parameters are actually set in the LDAP, no locking occurs. I started thinking that it was my

Hi all, I have set up a test configuration with Samba 3.0.2a and ldapsam/nss on FreeBSD 5.2.1, one PDC and two BDC's on different subnets. Most is now humming along quite well and I need to get a grip on the administrative side of it. - Is it possible to use the NT4 usrmgr.exe to administer accounts? Have people used to nothing but Windows who needs to add/delete users. I have tried but

Hello to all, I got samba3 PDC working with ldap. But I' m still wondering how to set important things about the users passwords. The first thing when a user login the first time should be to change his/her password? Where do I set when the passwords expire and how do I set it to 60 days? I do not work mith Microsoft's usrmgr because of Vista clients.I look at my samba/ldap with LDAP

I've spended days trying to get a Samba3 PDC configuration. It almost works now, but I have experimented a lot of problems and now my configuration is still FAR from perfect. I have no more time left so I'm looking for somebody to share his/her configuration files with me. That is what I'm setting: Samba 3.0.0 PDC with LDAP backend. The same LDAP users and groups as valid

I have two users on my network, Mary and Bob, who work together in a shared share. They both belong to the group Accounting. Bob is a savvy Linux user who accesses the share via NFS4. Mary toils away using Windows accessing the share via the Samba server. Mary will create a directory on the share and dump a number of files in which Bob and Mary will split the load. Bob, being a LInux user, will

I groupapped the domadmins group in linux to ntgroup="Domain Admins" but instead of mapping to the SID number ending in 512 it's creating a new SID number endind in 2025 mapped to domadmins... Does anybody knows why??? It worked in the previous server. This is the command I execute net groupmap add ntgroup="Domain Admins" unixgroup=domadmin If I use the rid=512 option I

Hi list, hi John, having seen last week a post (see http://marc.theaimsgroup.com/?m=107341768923846) that remind me some quirks I encountered, I'd like to see a preamble added to the chapter 12 of the howto. It concerns the diffent types of admin you will need in a PDC setup. I say preamble, but it could be found anywhere else, as long as it could be found (I have lost long hours

Greetings! I tried to post this question to openldap group but somehow my post never showed up there. Anyway, I built PDC using Samba3 and OPENLDAP and now like to integrade NIS service to it. I searched the net there are quite a few guides on how to replace NIS with LDAP. However, in our environment, we have almost all sorts of Unix platforms, e.g. Linux (mainly Redhat), Solaris, HPUX, AIX,

Hello List, we have installed samba Version 3.0.20-0.1-SUSE. when I'm entering > net getlocalsid I get > SID for domain <netbios name> is: S-1-5-21-4166838278-3756557259-2095403906 entering > net getlocalsid <domain name> returns > SID for domain <domain name> is: S-1-5-21-2018781741-1218799122-1862565094 Does this mean that the pdc itself is not in the domain

Hi, I have the following situation concerning group mapping: when I enter > net getlocalsid I get > SID for domain PDC is: S-1-5-21-4166838278-3756557259-2095403906 when I enter > net getlocalsid DOMAIN I get >SID for domain DOMAIN is: S-1-5-21-2018781741-1218799122-1862565094 The group mapping shows > net groupmap list > Domain Users

Hi, I have a server which until recently was serving a domain of about 20 XP PCs in a school. Over the summer I updated Samba to 3.5.4-0.70, and replaced the desktops with new machines which are running Win7 Pro 64 bit SP1. This being a school, I have a system of mandatory group profiles set up, and all of the pupil groups curently have copies of the same mandatory profile (generated via the

Thanks to Nate Partenheimer <npartenh@butler.edu> I will try this. On Thu, 20 Aug 1998, Partenheimer Nate wrote: > > Problem: > > -------- > > Maintaining two password databases for 6000 accounts > > > > Dave, > > This may or may not be something you want to consider... > We have been trying to give users one username and password which will >

Dear List, we've the following setup: login: PDC (Samba + Master LDAP with Slave LDAP) appserver: BDC (Samba + Master LDAP with Slave LDAP) fileserver: Samba domain member server Everything is running with Samba3 and OpenLDAP2 The following problem: when the PDC is not available (test shutdown) the clients can log into the domain (netlogon- script is running from BDC), but the fileserver

Heya all, So I've finally got a machine on this Samba 3 domain. Yey. Its an XP Pro box, so I grabbed the UsrMgr.exe and SrvMgr.exe programs from Microsoft, and hoped to at least use UsrMgr to see lists of users, maybe even as a full User manager, since I can't find a decent one that does all the samba3 stuff. Anyway, I'm on the domain, and I run the UsrMgr.exe program and I get an