similar to: Non-algorithmic RIDs

Right now, I have all of my Samba stuff under ou=corp,dc=mycompany,dc=com. I have it this way because there used to also be ou=furn,dc=mycompany,dc=com with a different domain. Now that I only have one domain, I would like to move everything to dc=mycompany,dc=com. So I copy all of the subentries of ou=corp (ou=computers, ou=people, ou=grooups, and the sambaDomainName entries) to

LS. After upgrading from samba 3.0.7 to samba-3.0.9 it appears that algorithmic rid base is now checked to be larger then 1000 . Because of this I get the follwoing error when trying to log in: [2004/11/19 18:26:50, 2] lib/smbldap.c:smbldap_search_domain_info(1374) Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=<DOMAIN>))] [2004/11/19 18:26:50, 2]

I am using Samba PDC with OpenLDAP2 and smbldap-tools. As part of my logon.bat, I call a script called ifmember.exe. This script can list out the groups a user is a member of. It is reporting that my root user is a member of the group 'engr.' I don't know if this is a bug with ifmember.exe or if it's an issue in Samba or in LDAP. Here is some relevant data:

Hi all, I have set up a printer in cups and I can see it with lpstat -a, and I can print to it. I put what I thought was the appropriate stuff in smb.conf, and yet no printer shows up to the NT client I'm testing with, or in smbclient -L output. Any ideas at all? Here is the relevant info: ### smb.conf excerpts ### [global] ... printing = cups printcap name = cups printcap cache

I have a bunch of Windows users using a Win2k server as a PDC. I want to move all the server functions to a Samba server without disturbing the users in any way. The client machines are all Win2k, using local profiles. Samba insists on algorithmicly generating the RID from the UID, so the Windows user, after migration, gets a new SID and loses contact with their local profile. In fact, they

Hi, I recently did a complete upgrade and reinstall of one of our Samba servers. No problem, I backed up all the data, the Samba configuration files, and the secrets.tdb. Just compiled 3.0.8 on the new server (which has the same hostname), copied the smb.conf to /usr/local/samba/lib and copied th secrets.tdb to /usr/local/samba/private. Started Samba, did 'net getlocalsid' and it

I've got a WinXP machine that was configured for local profiles. I have now joined that machine to the domain, but when I try to log in as a user, it tries to use a roaming profile. Fine, that's what I want anyway. But it doesn't do the smart thing and copy the user's local profile to roaming -- it gives an error instead. OK, no problem, I will change the type. I log in as

Hi. Does the current stable release of samba (2.2.8a) honour the RID that is set in the LDAP directory, or does it always use algorithmic RID calculation from the Unix uid? I would like to migrate from an NT PDC to samba and copy the users' RIDs into the LDAP directory. Bye, Christoph

I'm trying to grasp pg. 154 of the "Official SAMBA-3" book by Terpstra and Vernooij and I'm just missing a critical networking concept. I understand that SIDs are the numerical identification of a user for the Windows world. I understand that UIDs are the equivalent for the *nix world. But what the @$@! is a Relative IDentifier (RID)?!? On page 153 the command to map a

Our Samba server was recently the recipient of a major upgrade. I thought all the kinks were worked out, but apparently not. I think this is the first time I've tried to join a machine account to the domain since the upgrade. I've tried using smbldap-tools and also just using smbpasswd (I have my users in LDAP). I'll also say that 'net join' works just fine from my Samba

Hi all, I have been having the weirdest network browsing problems on my network the past week. Come to find out the wins.dat file got corrupted. Removing that file fixed everything. Because our systems typically have uptimes measured in months rather than days, and it is difficult for me to restart Samba except as a scheduled task (which I'm afraid to do because there are users who

OK, I just took my first non-root user live on my Samba 3.0.7 system. Printing is via cups, with drivers stored in the print$ share. This user is a local power user. She can add printers, or root can add them. Root can also print from them. If this user tries to print anything (a test page even) she gets a non-verbose error that looks like a permissions error. She can view the queues

I found that after moving my samba server to different hardware (and diferent Linux installation), domain logons cannot find their Windows profiles and created new ones. This is caused by the different RID of the users. It seems these are calculated as 2*UID + 1000. And my UID's on new server do not match those on the old one. How to force SAMBA to provide different RIDs for the users? I do

While trying to solve my printer problem, I have come up with another question that Google is not helping me with. What happens to a print job after Samba submits it to Cups? Is it 'finished' even though Cups is still printing it? Is that why my users aren't seeing their print jobs, because Cups has already snatched them and Samba assumes they are done? I would much rather if

Has anybody done such a thing as this? I'm looking to make this transition as smooth as possible. I have the new fileserver up and running, and I'm using rsync to keep the Novell data current on the Samba server. Any words of advice on transferring the users and groups and permissions over to the new server in the least painful way possible? I have some idea that Novell uses LDAP

Hello, I have spent the afternoon learning how to configure my routers to allow directed-broadcast with an access list, so that I can allow two different domains on different subnets to trust each other. Now I can do a broadcast ping from either subnet to the other, and I can also do smbclient -L <remote_pdc> and get the shares, from one side. From the other side I cannot. Let me

Hi, I've just moved a second Samba domain to LDAP -- it works great! However, the first domain is now dead in the water. It refuses to autenticate, and from the logs it looks like it's not find the SambaDomainName entry in the LDAP tree. Here is a diagram of how my LDAP tree is set up. dc=mycompany,dc=com |___ ou=computers |___ ou=people |___ ou=groups |___ sambaDomain=domain1 |___

Hi all, I have been fishing through the archives and have not found a lot of posts about this that were not 'golden oldies.' Do you guys use anything other than brute force to deploy software and updates to your client PCs? I would be interested to know what you are using, whether you use it for initial OS install, software deployment/upgrades, or other things, and roughly how much

Hello, Having a problem with trust accounts failing after creation. The following is the system that I'm running Samba on: Fedora Core 2 (compiled from source) Samba 3.0.11 OpenLDAP 2.2.23 BerkeleyDB 4.3.27 Windows 2000 client machine I have a script to add machine trust accounts to LDAP. The first part adds a posix Account and attributes to LDAP, the second uses smbpasswd to add the Samba

Can someone verify that testparm in 3.0.7 always reports the [printers] share as browseable = no ? I think this is a bug in 3.0.7. It might be affecting smbclient listing of printer shares too. Misty