similar to: LDAP and memberUid in Domain Users

samba 3.0.2 smbldap-tools 0.8.4 RH 9 nss_ldap configured pam_ldap NOT configured LDAP passwd backend winxp pro domain member Hello, i've configured smbldap-tools in smb.conf to manage users from usrmgr.exe. It works at group creation but have a strange behavior in user creation. In the LDAP there are two manually created accounts; Administrador & invitado, both posixAccount and

I have a problem with one samba 3.0.24 pdc using ldap with nss etc, sharing works fine, but ownership and the security tab seems crippled, and usrmgr.exe complains about "the specified local group does not exist" (of course without saying which group) so I dived in to check I found filters like this one below in the ldap log - is that to support nested groups? There are no groups with

Hi Samba users, First I can't open/create local group with usrmgr. Second creating global group and user is working, [third] but adding users to this [global] group failed.. I do this as yaya that has policy rights for everything, like "Domain Admins" has, and when I do it as root, it still doesn't work. Here's some infos: [root@sma-server-1 ~]# rpm -qa | grep samba

Hello all, I could not find anything in the discussion groups or documentation about using LDAP and Unix group mappings. The documentation states that in order to map unix groups to samba groups, you need to use the net group add command. However, I have an ldap backend and all my groups, that I care about are in LDAP. So I have a group called mainwdev. dn:

hello I'm running debian testing, winth samba as P.D.C, with passdb backend = ldapsam ii samba 3.0.23c-1 a LanManager-like file and printer server fo ii slapd 2.3.25-1 OpenLDAP server (slapd) ii smbldap-tools 0.9.2-3 Scripts to manage Unix and Samba accounts st ii libnss-ldap 251-5 NSS module for using LDAP as a naming servic no libpam_ldap

When doing a vampire all my PC's are shown in the resulting log as being members of the Domain Users group and none of my "real users" are shown yet in Ldap all my users are shown with memberUid in the domain users group and no computers are shown eg: dn: cn=Domain Users,ou=Groups,<snip> objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 513 cn: Domain Users

Hy, I just install OpenLDAP 2.0 and Samba 3.0. (both from RPM). I used tools from idealx (found in src from Samba 3.0) to populate the ldap tree. My ldap is empty when i start, i just added index and samba.schema in slapd.conf. I used net rpc getsid to generate my domain SID and put in the smbldap_conf.pm with others options (dc, ou, dn etc.) I didn't get any error with this tool, it create

dn: cn=Domain Admins,ou=groups,dc=mydomain objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 512 cn: Domain Admins description: Netbios Domain Administrators sambaSID: S-1-5-21-3936576374-1604348213-1812465911-512 sambaGroupType: 2 displayName: Domain Admins memberUid: root memberUid: sadmin dn: cn=Domain Users,ou=groups,dc=mydomain objectClass: top objectClass:

Hello, I'm trying to configure my user_attrs using LDAP as the userdb so that dovecot knows what secondary groups a user is a member of. The LDAP backend is an Open Directory implementation, which stores secondary group affiliations as memberUid attributes in cn=groupname,cn=groups,dc=dns,dc=name,dc=server. With ldapsearch, my query would be: ldapsearch -x -b

Hi, The Problem: I have a samba domain using LDAP as the backend, complete with the IdealX LDAP scripts. Most of my Unix boxes (certainly anything which does any Samba stuff) authenticates against the same LDAP backend, using it for groups and users. I need to grant some people sufficient priviliges to add workstations to the domain, but I don't want to give them the root password in

Hi, i have followed the idealx tutorial to the letter, however i get this error when i try to start slapd: ambepdc# /usr/local/etc/rc.d/slapd start Starting slapd. /usr/local/etc/openldap/slapd.conf: line 74: index type "uidNumber" undefined this is my slapd.conf ambepdc# cat /usr/local/etc/openldap/slapd.conf # # See slapd.conf(5) for details on configuration options. # This file

Hi All, I'm wondering if anyone can shed some light on a problem I'm having. I have a samba PDC with an LDAP backend, keeping the smb.conf file constant, When I have /etc/nsswitch.conf configured with groups: files ldap Then /usr/local/samba/bin/net rpc user info dbb only returns my primary group. If I have /etc/nsswitch.conf configured with groups: files nis Then all

do I somehow have to add RID's? [root@linserv2 sbin]# ldapsearch -x -h localhost -b "o=Mullen,c=US" '(cn=Domain Admins)' version: 2 # # filter: (cn=Domain Admins) # requesting: ALL # # Domain Admins, Groups, Mullen, US dn: cn=Domain Admins,ou=Groups,o=Mullen,c=US objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 512 cn: Domain Admins memberUid:

OK, I had this working a few days ago, but have evidently changed something that I cannot locate. Someone hit me with their 2x4. Samba 3.0.22, Fedora Core 4, ldapsam (OpenLDAP 2.3.24). smbd will not start, with the "ERROR: failed to setup guest info" error (I have "guest account = guest", which is a valid user with correct info in LDAP): ldap_connect_system: Binding to ldap

IMHO the option "winbind nss info = rfc2307" does not fully conform to the rfc2307 spec to generate user and group data and is thus "incorrect". The way it is currently done does solve one issue related to group membership mapping, but if I understand the way permissions are checked it is a non-issue. I think it is broken in the following 2 ways: 1. to generate the GID of

Hello, I' have problems with samba3 + ldap PDC. in particular can't join more then 2 workstation at domain. i thinks that problems is on generating the UID part on SID (the final part) the first Computer then join on domain have SID S-1-5-21-3642312925-2943760701-1776766777-3000 the second have evere SID S-1-5-21-3642312925-2943760701-1776766777-2052 after never workstation succeed

Hi, Hopefully someone can help me with this because its driving me up the wall. I admin a Samba PDC which authenticates through an LDAP backend. Both the samba server and pam authenticate through the entries in the LDAP database. I recently upgraded to 3.0.4 to combat the M$ hotfix that destroyed password changing. Since then things have been squiffy. All runs fine (apart from a grouping

This is with 3.0.11 and the idealx smbldap-tools 0.8.7 ----------8<------------------------------------------- # /opt/IDEALX/sbin/smbldap-groupshow 'Domain Admins' dn: cn=Domain Admins,ou=Groups,dc=wetron,dc=es objectClass: posixGroup,sambaGroupMapping gidNumber: 512 cn: Domain Admins memberUid: Administrator,luca description: Netbios Domain Administrators sambaSID:

Hy! Excuse for the previous mail, follows correction! I followed step by step that this in the address above. > http://www.hilinski.net/samba/ But when I execute, 'script smbldap-populate.pl', appears the following errors: [root@thor sbin]# smbldap-populate.pl Using builtin directory structure adding new entry: dc=maxwelleducacional,dc=com,dc=br failed to add entry: Insufficient

Greetings... I'm struggling trying to set up a samba 3.0.23c PDC with ldap backend. The server is Fedora 5, OpenLdap version 2.3.19-4. I've got it so smbd and nmbd start properly and I can use a windows box and see the domain using srvmgr.exe and usrmgr.exe. I'm then able to signon from a windows XP computer with the command net use \\pdcserver\ipc$ /user:root rootpassword Some