similar to: Differences: ADS vs Samba-3 controlled domain

after running both it returned id: MYDOMAIN\user1: no such user. On Thu, Mar 14, 2019 at 10:23 AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 14 Mar 2019 10:07:32 -0400 > Tyrus Shivers <tyrus.shivers at bestgateeng.com> wrote: > > > After making the changes, I now get " No such user" when trying the id > > "user1"

After making the changes, I now get " No such user" when trying the id "user1" command. Yes winbind is installed and running. I am able to pull users and group successfully with wbinfo. Just not the GID and UIDs. workgroup = mydomain realm = mydomain.com security = ads idmap config * : backend = tdb idmap config * : range = 3000-7999 idmap config MYDOMAIN : backend = rid idmap

removed sssd. removed all sss occurrences and winbind from the shadow line. Selinux is disabled. firewalld is disabled. not sure if there is a difference but I have smb and winbind, I do not have nmbd or smbd. /etc/resolv.conf search mydomain.com nameserver "ipaddress for DC1" nameserver "ipaddress for DC2" Still no such user after restarting the services and executing net

yes windbind is installed and running yes sssd is installed, but it was not running. I did start it and ran net cache flush and id again and still no such user. This is the working nsswitch.conf file that was copied over from the 7.3 working system. /etc/nsswitch.conf passwd: files sss winbind shadow: files sss winbind group: files sss winbind #initgroups : files sss hosts: files

Yes global is there. testparm output shows everything is ok, no error. ROLE_DOMAIN_Member Then I can press enter and see a dump. yes, wbinfo produces output of mydomain\user I left the domain, rejoined, and still no such user. wbinfo outputs users and groups on command. On Thu, Mar 14, 2019 at 1:59 PM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 14 Mar 2019

Yes for joining the domain. Running testjoin I get: Join is OK. The network is separated and does not access the open internet so I have to come on another network to email you all :) getent passwd returns nothing for me. id returns no such user. Question: The original SMB.conf that was on the system when I inherited it running 7.3 and Samba 4.4 did not have mydomain lines and just had the *

Rowland, These are all VMs I am working on. I have tried it on several different "test" VMs. Blew away VMs and created new ones, still does not work. It takes me a little time to type the info from the directories because I cannot copy/past due to network separation. Contents below: /etc/hostname testadmin /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4

I am having similar issues going form 4.7.12 to 4.8.9 Previous smb.conf on a member server just no longer IDs users. wbinfo -u and wbinfo -g return proper information; however, id does not. The error appears to be in mapping SIDs. # wbinfo -n user <sid> # wbinfo -S <sid> ailed to call wbcSidToUid: WBC_ERR_DOMAIN_NOT_FOUND Could not convert sid <sid> to uid Notably, I do use

Hello, I am using Winbind and Samba to tie in Linux VMs with a Windows DC for authentication. The UIDs are automatically assigned when I create a new user in Active Directory. I need to manually change the UIDs of my users to a UID that is used on another network so they can access a specific share. How can I change the UID successfully and still be able to authenticate with the DC. Also, how

Understood. Just to confirm there is no way to change the UID of users or manually assign them? When I do id "user", I get just a UID and several group IDs, I do not get anything that starts with a S. I do understand the SID from Windows is tied somehow to the UID I cannot setup a trust on my end. The remote share is managed by a different set of admins, their only option for me to

On Fri, Sep 6, 2019 at 2:55 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 05/09/2019 22:45, Roy Eastwood wrote: > > Rowland, > > I must be missing something here. Why can't the OP set the UID in ADUC > to match that required in the other system? The Samba > > Domain member can use the ad backend, (rather than the rid), and no > doubt

since im not driving now..  the krb5.conf is wrong. double entries, and put in the dc ip's MYDOMAIN.COM = {  kdc = dc1.MYDOMAIN.COM   kdc = dc2.MYDOMAIN.COM  }  but use as Rowland showed first and try adding the Domain and RealmDomain setting in idmapd.conf (man idmap.conf) Greetz Louis Op 15 mrt. 2019 14:59 schreef Rowland Penny via samba <samba at lists.samba.org>: On

I recently upgraded from Samba 4.4 to Samba 4.8 when moving from RHEL 7.3 to RHEL 7.6. Now our UIDs and GIDs are not mapping properly. I tried to downgrade and that broke other applications. I have also modified the smb.conf file with nearly every option I found online and it either returns "User not Found" or incorrect UID and GID mappings. I cannot utilize the smb.conf file that is

Hi, beta4 built under RHEL4, RHEL5 and RHEL6 (the latter being the public beta). beta5 now builds only for RHEL5, the other two fail with: strnum.c: In function `str_to_llong': strnum.c:139: error: `LLONG_MIN' undeclared (first use in this function) strnum.c:139: error: (Each undeclared identifier is reported only once strnum.c:139: error: for each function it appears in.) Thanks! --

Hi Stephan, many thanks for all the work you do on the new sieve parts to dovecot. As a (downstream) packager I have some questions: a) pigeonhole is called a working title - will the final release be called something else like dovecot-sieve again? b) The versioning seems to go from 0.1.15 to 0.1.13. From a packager's POV it would be better to allow a natural version upgrade path.

Hi, just a note that FC6 now has the very latest of dovecot as an official update. :) It will upgrade the atrpms packages automatically to the official vendor version, there is nothing you need to take care of. -- Axel.Thimm at ATrpms.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not

Rowland, I must be missing something here. Why can't the OP set the UID in ADUC to match that required in the other system? The Samba Domain member can use the ad backend, (rather than the rid), and no doubt file permissions will have to be readjusted accordingly, but at least the UID's will match the other system. The Windows DC doesn't care about the RFC2307 attributes, so that

On Tue, 19 Mar 2019 08:04:45 -0400 Tyrus Shivers via samba <samba at lists.samba.org> wrote: > I made the correction to the krb5.conf to remove the duplicate entry > and add the DC IPs and it still does not work. No such user. > > Any other ideas? Any other configs that should be in place? Hi Tyrus, I just do not understand why it doesn't work for you, it should :-( I

Hi, pigeonhole/sieve check against dovecot's version comparing to what they have been built against. This means that whenever there is a minor version of dovecot released pigeonhole/sieve need to be rebuilt and then redistributed to users even if there is no need for it (I'm thinking of packaged versions of dovecot and dovecot-pigeonhole). Could the checks become ABI-version aware, so

Hi again, after replacing CRLF in 4 mboxes dsync was able to sync all of the 30+GB mailstore to mdbox. Now the (repeated) calling of dsync yields info messages of the kind dsync(athimm): Info: old/speicher: highest_modseq changed: 1 != 10 dsync(athimm): Info: root/root-heretic: highest_modseq changed: 1 != 10 dsync(athimm): Info: lists/ccrma.stanford.edu/planetccrma: highest_modseq changed: 11