similar to: Results of net idmap dump don't match input to net idmap restore

Greetings, (re-phrased posting) In order to get CIFS and NFS interoperability in an EMC Celerra environment I'm trying to pre-populate a Samba winbindd idmap database (/var/lib/samba/winbindd_idmap.tdb) with some fixed entries. My thought was that a "net idmap restore" from a manually generated file should match the output from a subsequent "net idmap dump". But it does

Hi, I'm getting confused about the role that kerberos authentication plays. What exactly is the point of using kerberos to join a samba server to an AD domain? If using kerberos still requires you to rely on winbindd for all the nsswitch stuff then what is the point? I can just as easily specify workgroup = wkgrp security =

Hi! I'm trying to convert my tdb-based idmap mapping to a LDAP-based one. This generally works as intended, with one exception - the highest uidNumber/gidNumber in use is not transferred, and this causes duplicate use of the same uid/gidNumber. Here's what I'm doing: 1) net idmap dump /var/cache/samba/winbindd_idmap.tdb > idmap.dump 2) Set idmap backend in smb.conf to

Hello all. I use Samba 3.6.3 on FreeBSD in combination with ZFS, and it all works fine. I use zfs send to receive my store on a backup machine and i want the users id to be the same as on the master server so to say. Keeps my backups easy accessable with samba! Now i know i can dump the IDMAP database using the following: net idmap dump. I expect a whole bunch of lines,but i get the following,

Samba version 3.0.0.14.3E Linux Enterprise version 2.4.21-4 Server Role: ROLE DOMAIN MEMBER Not currently using kerberos. This is part of my smb.conf. [global] workgroup = WKGRP netbios name = NAME server string = Samba Server security = DOMAIN password server = PASS_SERV username map = /etc/samba/smbusers log level = 3 max log

This is what there is in winbindd_idmap.tdb of both members that i have, whewre file server 2 is working well and file server 1 lose winbind rfc track. # # FILE SERVER 1 - PROBLEM # # tdbdump winbindd_idmap.tdb { key(9) = "USER HWM\00" data(4) = "\D0\07\00\00" } { key(10) = "GROUP HWM\00" data(4) = "\D0\07\00\00" } { key(14) = "IDMAP_VERSION\00"

>The 'idmap config' lines are borked, the default domain '*' lines are >okay, but the 'MUC' domain lines are half correct, yes you can use the >'rid' backend, but you must set a range. You did set a range, but it was >incorrect and you have commented it out. The two ranges must not >overlap, but what you had before you commented it out, well,

On Thu, 13 Oct 2016 10:33:20 +0200 Udo Willke via samba <samba at lists.samba.org> wrote: > Hi everyone, > > after some struggling I have finally set up a Samba AD DC and a file > server more or less successfully. Unfortunately I am failing at one > of the last steps: the configuration of the home share, where I can't > set the permissions correctly which, as a

Hi I`m trying to start win2k3R2 in XEN with this config # grep -v ^# /etc/xen/win2k3.hwm | grep -xv '''' import os, re arch = os.uname()[4] if re.search(''64'', arch):     arch_libdir = ''lib64'' else:     arch_libdir = ''lib'' kernel = "/usr/lib/xen-3.2-1/boot/hvmloader" builder=''hvm'' memory = 1024 name =

On 01/07/2020 12:59, Georg.Biberger--- via samba wrote: >> The 'idmap config' lines are borked, the default domain '*' lines are >> okay, but the 'MUC' domain lines are half correct, yes you can use the >> 'rid' backend, but you must set a range. You did set a range, but it was >> incorrect and you have commented it out. The two ranges must

Hi! I'm apologize for my poor English, but have a question. This question is a shorter than one i posted not so long ago (https://lists.samba.org/archive/samba/2013-September/175649.html) and received no answer for a while. In this question i took a log from the different server, but this is no matter: the problem persists on all of my servers. So, my OS is FreeBSD 9.0, my Samba is 3.6.18

Greetings! I have a samba 3.6.18 acts as a domain member. I'm using a samba nss and creating local groups for a domain users. Here part of my nsswitch.conf: group: files winbind passwd: files winbind The problem is that the tdb unix GID mappings returns different ID from time to time for the same SIDs. Suppose we have a local group "samba_svn1", created with "NET SAM

On 9/7/2012 12:12 PM, Krzysztof Parzyszek wrote: > On 9/7/2012 7:20 AM, Matthew Curtis wrote: >> >> The attached patch implements one possible solution. It introduces a >> position stack and a couple of directives: >> >> * 'CHECK-PUSH:' pushes the current match position onto the stack. >> * 'CHECK-POP:' pops the top value off of the stack

Hi Samba folks, I had a couple questions about password complexity checking. To preface, in smb.conf, we set: check password script = /usr/local/sbin/crackcheck -d /usr/share/cracklib/pw_dict Also, if I understand correctly: /usr/local/sbin/crackcheck comes from samba source rpm package. maybe we need to compile it ourselves. /usr/share/cracklib/pw_dict* comes from cracklib-dicts rpm

Hi everyone, after some struggling I have finally set up a Samba AD DC and a file server more or less successfully. Unfortunately I am failing at one of the last steps: the configuration of the home share, where I can't set the permissions correctly which, as a consequence, seems to prevent the creation of the users' folders on the home share I am using the standard Samba packages on

Hello Rowland, thank you for your swift reply. I made the modifications you suggested, which unfortunately did not better the situation. No change as to the "Creator Owner" rights and the Administrator account still shown as locked. Also, I couldn't spot any suspicious messages in the Samba logfiles besides maybe get_referred_path: |profiles| in dfs path

Hello all...I was having incredible difficulty in setting up my HP Color LaserJet 4500 to be shared on a Caldera 2.3 Linux server with access to it from Windows 2000 machines. I've been working about a week now (sadly enough) and I think I've made some progress mainly from information in newsgroups and online documentation. Here's what I have so far: I can print from the linux

I have a samba 3 domain running for a while and have noticed that desktop.ini is displayed often on login and that my personal desktop is not being sync'd with my repository. Last week I was building a new box for a user and am converting this same user to a domain profile at the same time. I have found that the user's romaining profile is not being created on the samba server. The user

I see list discussions on this subject from a few years back but they were very brief and, it seems, inconclusive. I would be interested in hearing from anybody who has discovered the "trick" to getting an EMC Celerra to join their Samba 3.x domain. I have an old NetApp Filer happily joined. I simply created an account with "smbldap-useradd -w filername" and when I then

Am 14.10.2016 um 15:04 schrieb Rowland Penny via samba: > On Fri, 14 Oct 2016 14:32:52 +0200 > Udo Willke via samba <samba at lists.samba.org> wrote: > >> Hello Rowland, >> >> Am 13.10.2016 um 18:25 schrieb Rowland Penny via samba: >>> It sounds like you don't have IDMU installed, not sure if you can >>> install it on 2012. >> are you