similar to: Samba + LDAP NSS resolving

I noticed that when I create users with smbldap-useradd, the default group is "Domain Users". Is this the best user/group default setup for Samba/LDAP? I'm more familar with the unix user/group setup like max/students or max/faculty. Does the user group have to be "Domain Users" when using Samba? Thanks, Yasee smbldap-useradd -m -a username (where the username is

I've configured a LDAP/Samba server. I've got password syncing working partly: -- windows client - users can change their password and pam_smbpass.so will change the ldap password. -- LDAP server - user logs on to LDAP server, the ldap password can be changed and pam_smbpass.so will change the samba password. Here is the problem. On the linux client, the user can change his password

Follow up to original post. If I created local groups and users in /etc/passwd & /etc/groups I get farther along. For instance, if I have a Samba PDC with LDAP basically like I listed in my post. If I browse from a w2k pro box to the samba server without the workstation having joined the domain, I can authenticate to the samba server with a user who is not in /etc/passwd but is in LDAP. So

Again, another confusing issue in two how-to's I'm trying to resolve. In the SBE (samba-3 by example) Pg 161 in the PDF states. (It's actually page 200 of the PDF, but 161 of the numbered document pages.) "The name service caching daemon (nscd) is a primary cause of difficulties with name resolution, particularly where winbind is used." But the Authconfig in the IDEALX

John H Terpstra wrote: > On Tuesday 10 May 2005 01:33, Geoff Scott wrote: >> Hi all, >> >> The new NT migration chapter of Samba guide seems to indicate in the >> migration Log Validation (section 9.3.1.1) that users get added to >> all >> the same groups that they were in under the NT4 domain. However I am >> not seeing this despite having had a

Hello I've installed Fedora Core 3 (Test 3, kernel 2.6.8x), with Samba 3.0.8 and OpenLDAP 2.2.13 . I've smb.conf, slapd.conf, ldap.conf, /etc/pam.d/system-auth, nsswith.conf almost same as described on Idealx site. I've very strange thing. If I add user ( for this operation I use smbldap-tools), I can log on by this user at my unix host (for example by ssh), I can logon by this user

Not sure if this is where I should ask about this, but if I try to run any of the smbldap-* scripts, I get the following kind of output: oink:/usr/local/sbin # ./smbldap-populate Using builtin directory structure erreur LDAP: Can't contact master ldap server (IO::Socket::INET: Bad protocol 'tcp') at /usr/local/sbin//smbldap_tools.pm line 153. I feel like this must be from a typo

Hi all, another French guy learning, don't bash me too hard... ;-) In fact, I'm in need of a confirmation : I'm on the way to create a Samba3+LDAP (new schemas) PDC server (no migration from NT4 nor 2K, only from an old Samba 2.0 with security=user using /etc/passwd, ie. no encrypt password). This Samba3 should be hosted on a FreeBSD 4.8 (ie. pam_ldap can work, I tested it today, but

Well I finally managed to get my machines added to my ldap/samba domain. The problem was that I had defined an ou each for Computers and Users. ie dc=base,dc=org | ------ ou = Users | ------ ou = Computers Now the problem was that the nss_ldap library was searching in Users only, and apparently the samba server needs to be able to resolve the Computers tree aswell to add the

Hi All, It seems like Samba 3 does require the PDC to use LDAP for nss when using ldapsam. I reconfigured Solaris 9 to use nss_ldap and 'getent group' now shows the posixGroups created by the 'net rpc vampire' operation. I then cleaned up the LDAP database and ran vampire again. Each group is created successfully with incrementing gidNumber 10000 onward. 'net groupmap

Greetings Experts! Sorry for my poor english, but I?m inside of a terrible nightmare!!! I?m using Samba+LDAP has about 2 months ago without problems, but in the last 4 hours, the system is absolutelly unstable. I couldn?t upgrade or patched anything. The problem simply has appeared. Principally system characteristics: - Sun Fire V880 running Solaris 9 - openldap-2.2.23 - nss_ldap-232 -

OK I'm confused. Can machines be in ou=Computers,dc=somewhere,dc=net ? Every thing works fine if I configure so that machine accounts are created under ou=Users. If configured for machines to be in ou=Computers, I can't add a new machine. Error returned is "The user name could not be found." This is from the w2k machine itself. The release notes for 3.0.11 seem to say adding

Hello We have a OpenLDAP-2.2.23 + Samba 3.0.14a and the system is logging a lot (one to each minute, more or less) of errors like this: server smbd[10799]: [ID 510469 daemon.error] nss_ldap: could not get LDAP result - Can't contact LDAP server Well, I would like to ask to samba specialists if is possible that the problem is this slapd.conf option: idletimeout 30 I?m using it because

Hi everyone, last week I took a look at a samba3 PDC server with some performance issues. The samba3 PDC has an ldap backend and has nss_ldap configured properly. It has also interdomain trust so it has nss_winbind configured too, so in /etc/nsswitch.conf there is : passwd: compat ldap winbind group: compat ldap winbind This setup has some performance issues on the nss_ldap part of the

Hello List, i am trying to understand the LDAP-backend i just set up. Maybe someone can help me a little understanding the whole magic. In smb.conf i have my smbldap-tools scripts: # use the smbldap-tools scripts add user script = /usr/sbin//smbldap-useradd -m "%u" delete user script = /usr/sbin//smbldap-userdel "%u" add machine script = /usr/sbin//smbldap-useradd -w

Hi, this has nothing directly to do with samba, but there might be some people who try to use samba with (Open)LDAP on OpenSUSE 11.1 like me. Between 10.2 and 11.1 the nss_ldap configuration has changed a bit. The file which configures the access to ldap is now /etc/nss-ldap.conf and seems to have the identical layout as the former /etc/ldap.conf. Also needed is the "nslcd"

Hi all, Is anyone using C7 in production with LDAP and kerberos? Currently all of my machines run C5 or C6 with nss-pam-ldapd or nss_ldap, with kerberos and pam_krb5 for authentication. Before I fire up a test VM (is it even worth it?) I wanted to check feedback from the community. Cheers! Dan

Hello, I am seriously considering switching over my authentication system from the standard passwd/smbpasswd, to a LDAP-based system, that can authenticate *BOTH* UNIX and Windows systems and users. Here's a couple questions that I have, and I would greatly appreciate some answers. ;-) Will the schema file used by Samba also support UNIX users attempting to authenticate? In other words, can

> -----Original Message----- > From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On > Behalf Of Gordon Messmer > Sent: den 21 januari 2015 05:47 > To: CentOS mailing list > Subject: Re: [CentOS] Is anyone using C7 in production yet? (sssd, nss-pam- > ldapd, kerberos, etc) > > On 01/20/2015 05:26 PM, Dan Irwin wrote: > > Before I fire up a

Hi all, I have followed the instructions at http://samba.mirror.ac.uk/samba/docs/man/passdb.html in an attempt to set up a Samba v3.0.2 (supplied by Redhat as part of RHEL v3.0) PDC. I have got as far as trying to get a windows 2k box to join this new domain that I have created, however this fails with the error "Logon failure: unknown user name or password". Samba itself logs