similar to: winbind: idmap_rid - no user mapping

A question for the best winbind SID-UID/GID mapping in our situation: I'm building a new infrastructure with Windows 2003SP1 ADS Domaincontrollers and some Debian Servers (File: Samba+NFS; Mail; Web; ....) and varios XP and Debian Clients. After reading Chapter 12. (Identity Mapping) in the Samba-HOWTO is IDMAP_RID in couple with winbind an easy way to solve the problem with syncr.

Environment: Win2003SP1 domain with Debian+Samba/Winbind 3.0.14a machine Win domain users: tester1 and tester2 all are members of groups: testgruppe, testgruppe1, testgruppe2 primary posix group of win-users: testgruppe smb.conf: [global] workgroup = realm = VW.VKW.TU-DRESDEN.DE security = ADS map to guest = Bad User passdb backend = tdbsam domain

Hello, I've got an error at compiling samba 3.0.14a on Debian3.1 pure64 (x86_64). my options are: ./configure --prefix=/ --enable-cups --with-ldap --with-ads --with-krb5 --with-smbmount --with-pam --with-pam_smbpass --with-syslog --with-quotas --with-sysquotas --with-libsmbclient --with-acl-support --with-winbind --with-included-popt error is: checking for ldap_initialize... yes

Hi, wbinfo -Y BUILTIN\group can work without idmap_rid in Samba-3.0.14a. But I'm experiencing wbinfo -Y with idmap_rid failed for SID to GID conversion of BUILTIN groups. Since idmap_rid only works in a single domain, and captures workgroup's domain sid as a real domain sid in rid_idmap_get_domains(), when running "wbinfo -Y BUILTIN/System Operators", the function

As discussed previously on this list, Samba RPMs for Fedora Core do not include idmap_rid support. This is also true for older RedHat distributions. SuSE on the other hand, seems to have been patching in idmap_rid support since 3.0.5 or so; and with trusted domain support, to boot. Harrumph. I've been able to rebuild samba srpms on FC2 and RedHat 8 by patching the samba distributed rpms,

Hi everyone, I'm trying to use idmap_rid with Samba 3.0.21c on AIX 5.3. So far, I've not been successful. I've followed the method from http://us5.samba.org/samba/ftp/Binary_Packages/AIX/README to compile Samba, but added "--with-static-modules=idmap_rid". Also, I used IBM's compiler and not gcc. The compilation fails as follows: [...] Compiling sam/idmap.c Compiling

hi, it?s me again :( i?m still not able to use idmap_rid in a trusted domain environment (samba v3.0.20b Sernet). well, to be clear: NSS is not working (id, getent passwd <user>, ...) so samba does not find the posix information for any user from a foreign domain it?s working in a single domain with ##################################### # WINBIND - Settings idmap backend =

Can anybody from our experts help please? I had some trouble with joining a Win2003SP1 (SFU Schema is also installed) domain in ADS mode - config files and error logs are listed at the end. the goal is: -joining a Win2003SP1 domain (with SFU Schema) in ADS-mode -authenticate with winbind / PADL against this ads-dc (also offline for notebooks with padl cache plugin) It would be great, if

The samba server is FC3 / samba 3.0.10 (Fedora package w/ idmap_rid compiled) The samba server shows up in the browse list, but when you select it from an XP machine windows spits up "\\ server is not accessable" yada yada "The user name could not be found" The following shows up twice in /var/log/samba/winbindd: [2005/02/01 14:00:27, 0]

Hello, Please forgive me if this has been discussed, I did not find any references when I searched. I'm trying to replace a W2K server with a samba member server in a single ADS domain. It seems that the Fedora rpms do not support idmap_rid so I am trying to compile from the Fedora SRPM. After following the docs for building and configuring idmap_rid I get no ADS users from `getent

Hello, I am trying (again) to get samba+winbind working, with the idmap_rid backend. I am using a freshly installed samba server and client machine, with samba-3.0.13. Most things seem to work, but when I try to get the uid's for the samba users, I run into problems. # net rpc join Password: ******** Joined domain IUATST4W. # net rpc testjoin Join to 'IUATST4W' is OK #

Hi, I've setup samba 3.4.7 to use idmap_rid as per the documentation: idmap backend = rid:DOMAIN=500-100000000 idmap gid = 500-100000000 imap uid = 500-100000000 It seems to work for groups: wbinfo --group-info="domain admins" domain admins:x:100512 PsGetSid v1.43 - Translates SIDs to names and vice versa Copyright (C) 1999-2006 Mark Russinovich Sysinternals -

Is it possible for the uid/gid numbers that are generated by the idmap_rid and idmap_hash to collide if there are a large number of users or groups? I cannot seem to find any documentation on the limitations of these plugins. Before using I want to make absolutely sure that there won't be any collisions. In doing some research about Likewise Open, I see it's hashing routine can have

Samba version is 3.0.10 on Gentoo linux. I am trying to use idmap_rid backend in a Windows AD environment, the Linux PC acting only as a domain member. I am using idmap_rid because I need UID/GID predictability. I can log in to console correctly, and it shows the right user and the "Domain Users" as the group. When I use default winbind TDB, I can browse the home directory from an XP

Hi, I'm trying to setup some servers with Samba and Winbind. One of the servers are both a Samba server and a NFS server so I want to have the same ID:s on the files that I export with NFS. All users are all in one AD domain. The problem is that the Samba/NFS server are running SLES 10 and the others are running FreeBSD 6.2 and they get different UID:s and GID:s. All the FreeBSD servers are

I have just struggled to implement a Samba Domain Server, and have some remaining issues. I have a Samba PDC using tdbsam, managing a domain called RHEA. I have (finally) configured a new Samba Domain Server (AUREUS) using winbind and idmap_rid. When I am logged in to RHEA as user GMCH I can access a TMP share on AUREUS (at last). Running 'getent passwd' I get (inter alia):

Hi everyone, I'm trying to use idmap_rid on an AIX 5.3 ML4 machine. Samba compiled successfully using the IBM compiler (vac.C) version 6. The only programs I supplied where db and libiconv. I followed the instructions, and put nsswitch/WINBIND in /usr/lib/security, and edited /usr/lib/security/methods.cfg. When I start "winbindd -i", it coredumps with a Signal 11: (dbx) where

I'm struggling with roaming profile permissions as I can not "see" the NT AUTHORITY\SYSTEM account. I have: -samba file server with acl 3.0.14a -authentication with winbind and idmap_rid against Windows 2003 ADS -using "default domain" in smb.conf for winbind The roaming profile directories are on the samba machine under the users home directory. As noted on several

I try to use idmap_rid with Samba/Winbind authentication for Windows on Active Directory. The authentication works fine but I'm unable to compile the idmap_rid module. Here is my configuration options: ./configure --prefix=/usr --sysconfdir=/etc/samba \ --localstatedir=/var/samba --with-ldap --with-ads \ --with-smbmount --with-pam --with-pam_smbpass \ --with-winbind

Resolved: I was not able to compile then make install and have work so I ended up using the FC3 packages and adding only the freshly compiled idmap_rid module. Thanks for the help. Brian Hoover MailLists wrote: > John, sorry I did not mean to reply directly, I hate MS-Outlook! > > John H Terpstra wrote: >> On Sunday 30 January 2005 09:17, MailLists wrote: >>> Hello,