similar to: My lack of understanding of idmap

Hi, My doubt is about Idmap + LDAP + winbind, related do BDC + PDC. We are using Samba 3.0.33 (Slackware 12.0.0). Our layout is almost like this one http://us1.samba.org/samba/docs/man/Samba-Guide/images/chap6-net.png, but we have more BLDGn than this example. Actually, we are taking ideas from http://us1.samba.org/samba/docs/man/Samba-Guide/happy.html and from

hi, can somebody explain, how the idmap backend with ldap works exactly. sorry for that stupid questions, but the docu is not clear for me. http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/ idmapper.html#id2588292 i understand the idmap topic/difficulty, why i need this, but how the ldap get filled with idmap entries? automatically/dynamically if winbind is running? or

06.02.2016 01:12, Tristan Matthews ?????: > On Thu, Feb 4, 2016 at 12:31 PM, Alexander E. Patrakov > <patrakov at gmail.com> wrote: >> 04.02.2016 22:05, Jean-Marc Valin ?????: >>> I can see how that would cause multiple rate changes. At the same time, >>> since this would be using the interpolated code (unless you're really >>> lucky with the rate),

hi, it's me again =) i'm using openldap v2.2 and samba v3(.0.4) i wonder, if i don't use winbind, do i really need the parameter "idmap backend = " in smb.conf on PDCs/BDCs ??? those machines find their SID/UID/GID via "passdb backend =" don't they? thx -- "Matrix - more than a vision"

I am running Samba 3.4.7on Fedora Core 11 Linux. This is a domain member. My PDC is Samba 3.4.9 on Solaris 10. I have LDAP as a backend (Sun/Oracle Directory Server 6.) I have an OU for user accounts, and an OU for idmap entries. The PDC has already populated some idmap entries. An idmap entry looks like dn: sambaSID=S-1-5-21-xxxxxxxxxxxxxxx-1121,ou=mydomain,ou =idmap,o=mycomany.com

Hi folks, I'm the co-author of "Windows and Linux Integration," a recent Sybex/Wiley title. So I'm very much interested in what's coming next in the Samba world. And I've been watching the Samba 4 'technology releases" with interest. One nifty feature that I like a lot: the old options that specified many confusing types of server behavior have been replaced

Is there anyone out there from other university's that would be willing to talk to me about you samba layout. We already have it in place but we other colleges within the university that want to start using our setup but want there own domains. I'm kind of confused how this would all work.

hi list&john, i read in the documention about BDCs: The domain SID has to be the same on the PDC and the BDC. In Samba versions pre-2.2.5, the domain SID was stored in the file |private/MACHINE.SID|. For all versions of Samba released since 2.2.5 the domain SID is stored in the file |private/secrets.tdb|. This file is unique to each server and cannot be copied from a PDC to a BDC; the BDC

In Chapter 12 (Identity Mapping) of the Samba HOWTO Collection it states: <snip> Backup Domain Controller Backup Domain Controllers (BDCs) have read-only access to security credentials that are stored in LDAP. Changes in user or group account information are passed by the BDC to the PDC. Only the PDC can write changes to the directory. IDMAP information can however be written directly to

I am still trying to troubleshoot my problem of not being able to join computers to the domain. I have found this comment by John Terpstra:- >Newsgroups: linux.samba >From: John H Terpstra <j...@samba.org> - Find messages by this author >Date: Wed, 14 Jan 2004 00:00:17 +0100 >Curtis, >Do not set the UID of Administrator to 0, it will break winbind use. >Instead, use the

04.02.2016 22:05, Jean-Marc Valin ?????: > I can see how that would cause multiple rate changes. At the same time, > since this would be using the interpolated code (unless you're really > lucky with the rate), the cost shouldn't be too high. BTW, do you know > how often the rate gets updated? The rate is, by default, updated every 10 seconds. And sometimes (especially with

Hello, I am trying to figure out how to implement a samba domain in a number of remote offices around the world with partly bad and often interrupted WAN connections/VPNs. The goal is to administer the directory from the central data center. My obvious choice would be to set up a central server with SAMBA+OpenLDAP+smbldap-tools and in each remote office a SAMBA server with OpenLDAP as a

I have the following toolchain: $ ld --version GNU ld version 2.15.90.0.3 20040415 $ gcc --version gcc (GCC) 3.3.2 I attempted to build klibc with this toolchain. It builds without errors, but the included "ash" shell does not function properly. Testcase: read cmdline </proc/cmdline echo $cmdline The first command prints a message: cannot open /proc/cmdline: error 14 Other

The following threads suggest that the way to reclaim memory occupied by initramfs is to remove files from it: http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&frame=right&th=c6cb846bba1a7aea&seekm=SAUO.51B.21%40gated-at.bofh.it#link1 http://seclists.org/lists/linux-kernel/2003/Dec/0707.html However, there is no way to do it using utilities provided by klibs. Could you

The "kinit" program distributed with klibc 0.153 still attempts to do a pivot_root. That doesn't work. The correct way of going into the main system is to mount --bind the root and chroot there, as done in the "run-init" program. Could you please copy that logic into "kinit"? And please fix the comment at the top - there is "/init", not

Hi people: I've been using Samba for a long time with some "basic" features like Samba working as a PDC, integrated with OpenLDAP, being a print server, among others, for a small number of "almost controlled" users (no more than 30 or 50 users). But now I'm interested to implement a Windows domain using Samba for a University with 6000-8000 users distributed through

Hi ! I cant add any user (person, and machine) to my domain made with samba-3.0.1, openldap-2.0.27, new samba.schema, smbldap-tools-0.8.3. I have to migrate from ldap_compact to ldap backend. Rhea is a ldap server, codo is a PDC from DOMAIN. To show, what the problem is, look at the following instructions: root@rhea:~# smbldap-useradd -w loko20 root@rhea:~# getent passwd|grep loko

Hi! Since upgrade to Samba 3.6.9, I am experiencing problems concerning winbind idmapping. I am using an LDAP directory with RFC 2307 accounts and sambaSamAccount sambaSID entries for each local domain user. SIDs for other domains should be stored in sambaIdmapEntry objects in a separate LDAP tree. The problem is that winbind doesn't seem to map SIDs from the local domain to unix IDs.

Hi all, I have Samba server joined Active Directory domain based on win2008r2, using LDAP as idmap backend. Recently I upgraded from 3.3.x to 3.5.x (Sernet RPMs for Centos4). Now I constantly observe those messages in log: [2011/02/03 09:10:25.696896, 0] winbindd/idmap_ldap.c:1471(idmap_ldap_set_mapping) ldap_set_mapping_internals: Failed to add S-1-5-21-3807515285-1394671770-2144936185-513

2012/6/5 Kok, Auke-jan H <auke-jan.h.kok@intel.com> wrote on systemd-devel list: > It seems your system is taking well into 15+ seconds before btrfs is > actually *ready* on your system, which seems to be the main hiccup > (note, speculation here). I''ve personally become a bit displeased with > btrfs performance recently myself, so, I''m wondering if you should