similar to: Description of LDAP-attribute sambaSIDList

Hello, I have a Samba PDC (3.x) running in a OpenSUSE 10.2 system. The authentication backend is Open LDAP. I want to create a group share (WTCCC) which should be accessible to a group of users (belonging to a group called WTCCC). The users' possess this group as their secondary group (NOT primary). And the share folder would have its gid bit set, so all the writes to the folder

I have a problem with one samba 3.0.24 pdc using ldap with nss etc, sharing works fine, but ownership and the security tab seems crippled, and usrmgr.exe complains about "the specified local group does not exist" (of course without saying which group) so I dived in to check I found filters like this one below in the ldap log - is that to support nested groups? There are no groups with

Hi, i'm using samba 3.0.14a with an openldap 2.2.24 as the userdata backend. From time to time i get the following entry in the messages logfile: Sep 15 12:44:37 myserver slapd[8112]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18) Sep 15 12:44:37 atlas last message repeated 2 times Anyone knows what the "sambaSIDList" attribute is for? I can't find this

Dear List, while debugging the problem that users cant change file acls from windows clients, I found out that Samba (ver- sion 3.0.13 on debian sarge) tries to look up the SID (of the user who should be added to the acl) as a sambaGroupMapping in the LDAP. Does anybody can tell me: - why samba tries to match a SID of a user as a GroupMapping? This will never work as a user can never be a

Hello, My PDC is working but I have some errors on my log, I'm searching since some days but I cannot find why. In log.smbd I have [2006/08/22 16:30:22, 0] lib/util_sock.c:get_peer_addr(1229) getpeername failed. Error was Noeud final de transport n'est pas connect?? And In log.MachineName I have [2006/08/22 19:17:33, 0] auth/auth_util.c:create_local_nt_token(899)

Hi I have a little problem with my ldap authorization of samba against Novel LDAP server. This is the log output from the Novel Ldap server: ---------------------------------------------------------------------------------------------------- New TCP connection 0xcb1e3980, monitor = 0x1bf, index = 2 (0xcb1e3980:0x0001:0x60) DoBind on connection 0xcb1e3980 (0xcb1e3980:0x0001:0x60) DoBind: name =

Hi, I'm trying to use the sambaUserWorkstations option to allow users to log on certain computers only. This option looks great... In fact it looks now a lot better than the 'ldap filter' one than was deprecated with samba 3.0.20... The fact is, if the sambaUserWorkstations option works well with machine names, it doesn't seem to work when specifying groups of machines.

Hi Clients cannot connect to the Samba server (Version 3.0.25b OpenBSD/amd64), first attempt gives Access denied, second attempt gives The network name request is no longer available. Can someone please help in finding out what is wrong? I've been going through the logs and configuration the past week, but can't seem to find out what's the issue. Any pointers would be appreciated.

Hi, I have managed to configure Samba+LDAP+smbldap-tools. Everything works fine, except one strange problem is appearing. When I connect with Windows tool UserManagerForDomains or I want to create a share on a Wndows box I can see the users but no groups. With UserManagerForDomains is see following: Users: All the users Groups: none, just description of Replicators Group and the

Hi, I'm having an issue trying to make a Windows machine sambaserveroin a Samba domain. Samba is running with LDAP backend (OpenLDAP). When I try to join the domain, Windows says that the machine account does not exist. The machine account, however, is successfully created in the LDAP directory after the join fails. When I try to join again, Windows says that the account already exists.

Dear samba users, I have very strange problem. I have Samba PDC up and running, but only thing is missing. I cannot see any Domain Groups at all. Here is my config: Debian Squeeze: ii samba 2:3.5.6~dfsg-3squeeze8 SMB/CIFS file, print, and login server for Unix ii samba-common 2:3.5.6~dfsg-3squeeze8 common files used by both the Samba

I'm trying to set up my LDAP in preparation to configure my Samba PDC. In the Official Samba-3 HOWTO and Reference Guide it give instructions on howto setup slapd.conf (section 10.4.4.3) After modifying the file it instructs to run /sbin/splapindex -f /splapd.conf When I run this I get the following error: /etc/openldap/schema/samba.schema: line 423: AttributeType not found:

I've been trying for the past week to get Samba and LDAP to work together as a PDC on my Gentoo box and allow some XP boxes to get in. I've read and followed the how-to's (emerged and unmergred more then a few times) My LDAP accounts all seem to work when I do the ssh test into them. Changing the domain in XP fails with the "network path not found error" even after all

I'm using Samba 3.0.14a as a PDC with an LDAP backend. I am having trouble using the Windows "User Manager for Domains" tool. As an example, I shall be looking at the "Domain Users" group. Whenever I try modifying anybody's group membership, I get the error message: "The following error occurred changing the properties of the global group Domain Users: The

Hi, I have a question about sambaGroupType attribute on a Samba 3.2 PDC with LDAP backend (and nss_ldap + nss_winbind). What should be the value for Administrators builtin group ? If i use smbldap-populate from smbldap-tools, the value of sambaGroupType is 5 (and the LDAP entry for this group is a posixGroup and a sambaGroupMapping). I've also noticed that "wbinfo -g" doesn't

Hi Everybody, maybe we are just too stupid, but for me it seems that there is some problem with holding passwords completely sync between *NIX-world and WIN-world when I use LDAP & Samba. If a user changes a password under Windows, with "passwd chat" the *NIX-Password (attribute: userPassword) can be changend very well besides the both Samba-LDAP-attributes lmPassword and

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks, I also have the problem that the notepad pops up (with desktop.ini opened), everytime I logon. I know the workaround that was mentioned a thousand times before: hide files = /desktop.ini/ntuser.ini/NTUSER.*/ I put the file to the [profile]-share, to the [global]-share, but it won't work! An extract of my smb.conf: [profiles]

Hello, this is a little bit off-topic, because it is rather LDAP related. I need to store an additional string in every 'posixGroup/sambaGroupMapping' object in the LDAP backend. (This string is used to hold an key to an external database.) For user accounts I can use the 'employeeNumber' attribute which is provided by 'inetOrgPerson'. Any ideas what I could use for group

Hello guys! I'm using samba 3.2.4 (binaries from samba.org) on SLES9+sp3. I am building a PDC with LDAP support (i am attaching my config files), I'm also using ldapsam:trusted and ldapsam:editposix. Although I am setting the account lock after 3 failed tries in usrmgr, and verified that the parameters are actually set in the LDAP, no locking occurs. I started thinking that it was my

Hi there, finally all seems to be working. Samba 3 as PDC with LDAP Backend. Even ACLs are possible with the command line tool setfacl. These ACLs work fine in Samba and are displayed correctly in the Windows filemanager in the security-tab. But one thing remains unsolved: why can't I set those ACLs directly from my Windows client machine? If I try to modify the ACL I always get a message