similar to: ldap machine suffix = ou=Computers vs ou=Users

OK, here is the deal. My system spins like a top with one exception. I would like to store Computer accounts in ou=Computers and get them out of ou=People. I've tried simply makeing this the ou that Computers are added to but then the XP clients cannot seem to see them. Changeing this is likley to be easy to do and incredibly hard to find the specific details of how to do it. I know

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Did ldap machine suffix ever get fixed so that it can be in a sperate container from ldap user suffix? Jim C. - -- - ----------------------------------------------------------------- | I can be reached on the following Instant Messenger services: | |---------------------------------------------------------------| | MSN: j_c_llings @ hotmail.com AIM:

Hi, all! There is a share on PDC (Samba 3.0.23): [Soft] comment = Software path = /st2/soft valid users = "@Domain Users" read only = No share modes = No I do: # cd /st2/soft # touch testfile # chown testuser:"Domain Users" testfile # chmod a+rwx testfile After logon on windows workstation (domain member) as testuser, I going to

Hi, all! I'm using samba-3.0.23 (Revision: 16921, from ports collection, under FreeBSD 6.1 with OpenLDAP 2.3.24 & smbldap-tools-0.9.2a) as PDC with following config: [global] dos charset = CP1251 unix charset = KOI8-R workgroup = DOMAIN server string = Samba Server password server = passdb backend = ldapsam passwd program =

============== The problem: ============== I am in the testing stages of implementing a Samba domain. My user is logging on to a standard win xp SP2 desktop, with the samba pdc, supplying the credentials. The logon screen disappears and an "SAS window: winlogon.exe - Application Error" box pops up on the Win XP screen. If I click OK the machine reboots. My user can log onto the Debian

Good day, I would like to put Computer accounts in a different OU from the user accounts. Is this possible ? I read that there is a bug regarding this and that Computer accounts can only be created in the People OU. Is this still true ? I'm using Samba 3.0.10 Any help appreciated thanks and Regards Nic

Hi everybody, why in the new 3.0.3/4 when a new windows machine join on domain samba search (in ldap backend) on ou=Users and not in ou=computers? my smb.conf: ldap passwd sync = Yes ldap admin dn = "cn=ldap manager,dc=intra,dc=local" ldap suffix = dc=intra,dc=local ldap group suffix = ou=Groups ldap user suffix = ou=Users ldap machine

Horst B. Simon wrote: > Hi All, > > I have OX with Samba 3 and Ldap working fine, except that workstation > can not join the domain. When I try to join the domain I get > following error message: The following error occurred attempting to > join the domain. Can not find user name in Domain. But the user is > there and it creates the computer in ou=computers in ldap. All users

Paul Matthews wrote: > hi there, > > i'm trying to get my winbind working without having a local account > on the machine, but it's just not working for me > > can someone show me an example of a pam module that requires only a > Active directory password.(i'm working with /etc/pam.d/dovecot) > > i can use my AD password as long as i have a local

Hi, I seem to remember somewhere that Samba 3 can be configured so that you do not need real users for computers, that these users only exists in some tdb database. How is this possible? Can someone describe how to do this? Many thanks, Tarjei Huse

I am using a master-smb.conf with one other include for the shares file. Every time that I do a testparm -s master-smb.conf and then check the resulting file I see these config directives, which I haven't defined: printing = cups print command = lpq command = %p lprm command = But this is after I have defined "printing = cups", any ideas why? Or is this

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How does samba get Computers out of the Computers OU with out going through nss_ldap and doing getpwent? Isn't this pretty much the only way that Samba can get Machine accounts? I'm looking for a way to hide them from the Linux server. - -- - ----------------------------------------------------------------- | I can be reached on the

Hello, It seems that the smb.conf parameter "ldap user suffix" has no effect when searching for users. When searching for a user in the LDAP server samba uses the simple "ldap suffix" without prepending the "ldap user suffix". But it works for "ldap group suffix". The description of these two parameters are similar in the manual for smb.conf. Here are

Hello, Seems like there is a bug in samba configuration with the version 3.0.22 or later that it doesn't read the configuration variable within the smb.conf for ldap settings ldap user suffix = Although it's working as long as the users are under the "ldap suffix" and samba will search for the uid from the base of the domain (getting from "ldap suffix"). So it

Excerpts from smb.conf: passdb backend = ldapsam:ldap://localhost ldap admin dn = cn=admin,dc=arch,dc=uni-karlsruhe,dc=de ldap group suffix = ou=groups ldap machine suffix = ou=computer ldap suffix = o=archipool,dc=arch,dc=uni-karlsruhe,dc=de ldap ssl = no ldap user suffix = ou=aktiv,ou=Accounts The system wide ldap suffix is a different one

Hi, I would like to have a DIT similar to this for my Samba server : ou=People,dc=domain,dc=com: users accounts ou=Group,dc=Domain,dc=com: groups ou=Hosts,dc=domain,dc=com: machine accounts ou=Samba,dc=domain,dc=com: Samba specific stuff, such as sambaDomain, sambaUnixIdPool, etc My understanding is that "ldap [user|group|machine] suffix" is relative to "ldap suffix".

Hi, I'm trying to setup a samba domain controler trusting a NT4 domain. and want to use Idmap information already stored in an LDAP location. smb.conf snippets are below. I'm not getting this to work. What I see, reading log.winbindd-idmap at log level 10 is that search for Idmap entries seems to use the "ldap suffix" parameter instead of the idmap config

John H Terpstra wrote: > On Tuesday 10 May 2005 01:33, Geoff Scott wrote: >> Hi all, >> >> The new NT migration chapter of Samba guide seems to indicate in the >> migration Log Validation (section 9.3.1.1) that users get added to >> all >> the same groups that they were in under the NT4 domain. However I am >> not seeing this despite having had a

Hello, > -----Urspr?ngliche Nachricht----- > Von: Michael Gasch [mailto:gasch@eva.mpg.de] > Gesendet: Donnerstag, 27. Juli 2006 12:19 > > what about using ACLs to restrict uid-searches in the base > for samba admin? Thanks. Just to see if I got your point correctly, you mean to disallow searches involving the uid attribute in the base context for the Samba admin proxy DN, and

I'm working from the samba 3 how-to and creating my own how-to so that I get everything straight in my head. I'm trying to make an exchange replacement with samba + ldap + open-xchange + cyrus + postfix + postgresql etc etc. At the minute I'm trying to find out if Sarge has ssl already enabled in it's PAM and NSS packages, instead of me trying to compile it myself. Anyone know