similar to: Retrieving UNIX UID/GID directly through Active Directory

with samba 3.0.22, I'm trying to integrate a linux box with Microsoft AD by using winbind for authentication as well as for the source of nss info. When winbind is configured to use its own local id maps, everything works fine. But when i configure winbind to use 'ad' as the source of nss info, authentication fails, 'getent' commands return no results, and 'wbinfo -r

Scenario: Samba-3.0.20b domain member server on SuSE 9.3 (w/ all available patches applied) providing kerberos authentication through a Windows 2000 domain with AD4Unix services installed. Problem(s): 1. Can only view users from one OU in Active Directory (default is: CN=Users, problem container is: OU=authenticated) 2. According to log.winbind and log.smbd authentication fails with error:

Hello list users. In my journey to world of Linux/Windows interoperability, I have now almost reached my goal to successfully authenticate Linux users using Windows Server 2003 SP2. The (hopefully) last obstacle is that "wbinfo -i <username>" causes the following error to be produced in log.wb-<DOMAIN> file (consequently, logins are failing also of course). Samba version is

The nss_ldap has some performance problems and doesn't have any caching features that windbind does. What I was aways wondering is does IDMAP write UID/GID derived from SID to the extended schema in AD? Can winbindd use this extended schema, instead of using nss_ldap? -----Original Message----- From: samba-bounces+letz_samba=realmspace.com@lists.samba.org

Hello, I have a configuration with dovecot-ldap working with openldap (on FreebSD 5.4 Release). Now I'm trying to do the same thing with an Active Directory (win2k3). I have installed an properly configured SFU. Via nss_ldap-pam_ldap is working fine (FreeBSD 6.2 Release). Because nss_ldap is reported broken with dovecot I'm trying to use dovecot-ldap for both passdb and userdb. My

I have been digging around for information on this in either online and published books, but I haven't yet found the answer. I am interested in AD connective through AD Kerberos/LDAP/SFU or AD Kerberos/LDAP/AD4Unix. I have a pure win2k3 environment, so there is no backwards support via PDC emulator. Published books document older NT-like environments. *cries* If there are any documents,

I have winbind v3.0.26a running on ubuntu server v7.10 (gutsy). I intend to get user & group info from MsActiveDirectory. However, when I type: getent passwd somerandomuser I get the uid and gid for the user, as recorded in the msad schema by virtue of sfu, but the homedir and loginshell that are returned are like what "winbind nss info = template" would return by default:

Hello! I'm building a samba fileserver that would share the same files for both linux and UNIX clients and ACLs should still work from windows. The UNIX clients don't have any users either, because all user information is taken from an AD. The setup is the following: Samba 3rc1 fileserver Win2k3 AD Server + Win2k clients and Linux clients Basically the win2k3 AD schema has been updated

I have two boxes on which I am trying to get idmap_ad (from xad_oss_plugins) to provide uid/gid mapping, and am getting the error: "Could not convert sid <sid of some_user> to uid" The story so far goes like this: Without the line "idmap backend = ad:ldap://<PDC's FQDN>/" in smb.conf, I can successfully do all of: #> wbinfo -S $(wbinfo -n some_user | awk

Hello, I've a small Linux network, NFS amd NIS server with three clients. Each machine is running winbind to connect to a windows 2000 domain. All is working fine, I just have a problem synchronizing the uids generated by the winbind to a windows user that logs on to the Linux network. For example, on one machine a user can get uid 10000 and on another machine the same user can have uid

Hi All, I am relatively new to samba but recently I have been working a lot with it in order to unite ID/GID on our unix clients.we have Active Directory DC and I would like to allow users to use their accounts when working on these clients (clearcase related). I have started working with winbind and reached to a point when I Joined the domain,got details using wbinfo -u/-g and su <domain

Hi, I've a linux client (RH8) and a MS W2K with Active Directory server. I can login from a linux agains AD with the extension schema (AD4Unix installed). I can obtain a kerberos ticket and when i use smbclient //server/share -k (kerberos authentication) all is OK, but..... When i try to mount a directory with smbmount or with mount all is ok but i've noted that the security of W2k are not

Hello! I've been running a custom hacked samba 3.0rc1 to get winbindd to bind every SID simply to what getpwent returns as the UID. The newest versions of samba seem to support the possibility to have winbindd to use /etc/passwd and /etc/group as the storage backend. So basically what I need is that each time samba wants to know the SID of the username "joe" it would just query

Hi everybody, Shortly, I want my Active Directory users to be able to use Linux samba file server. The network is: Win XP and w2k clients, an AD server (w2k) and Linux samba file server (RedHat 7.1). The services on Linux box (imap, ftp, ssh) are configured to use pam_ldap and nss_ldap, so 'getent passwd' works fine and gets accounts from both /etc/passwd (root and a couple of accounts)

Hi all We have the following environement: Microsoft ADS for Windows Users, NIS for Un*x Users. Samba 3.x Fileservers. Win2k/XP Clients which use CIFS to connect to the Fileserver. FreeBSD/Linux Clients which use NFS to connect to the Fileserver. For the moment, Windows User authenticate against the ADS and Un*x users authenticate against a NIS Server. Everything runs fine. But we would like

Hi there ! This is my first post and I really would like to have this stuff working ... if not, I should go to Win2k3 server .... please help me to avoid it !!!! I've been trying to integrate Mac OS X (10.3) clients to my Samba server through the Active Directory Plugin with no success. This PDC is currently working for 90 PC's with XP SP2. My server is well configured from the DNS (or

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I have a small planning problem... I built an environment for a customer about six (or so) months ago based on RH8 which authenticate and mount homes from an AD server... The Linux stuff was straigt forward - using LibNSS/LDAP and LibPAM/{LDAP,Krb5} for authentication and samba (2.x something) to mount the home directories. Unfortunatly, this

Hi, I'm using samba 3.0.23c, and having a bit of trouble getting it to play nice with my active directory. I'm using Windows Small Business Server 2003 with the SFU 3.5 NIS server/schema extensions installed. I have samba configured to use ad as the idmap backend, and sfu for nss info. When running getent passwd, only a few active directory users show up, and I get lots of errors

Hello List-Friends ;-) O.K. I am a real beginner, so please don't hurt me ;-) but im still working since a few days to get it running and google is my best friend. I also bought O'Reilly 's Samba Book and a lot of other online stuff, but AD-Samba-winbind should be too new. I use Suse 9.1 and Samba 3.0.4 as ADS Member Server. We have an W2k Advanced Server (and a M$-Admin which

Hi- I'm deploying a fileserver running Samba 3.0.2a in an environment that contains NT and UNIX users. I'd like to have my fileserver set up as follows: - Users connecting to the fileserver from NT boxes are authenticated against the Win2K ADS Domain Controller. - Users connecting to the fileserver from other UNIX boxes are authenticated locally using NIS and access the shared volume