similar to: help please with winbind...

Found it! (Thanks to Louis van Belle and Rowland Penny for their guidance). The wiki page for https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server *really* needs a note about this to be added. It will save a lot of frustration and wasted time for others coming behind. The reason I say this is that a default Windows Server 2008 R2 install, *does not provide* the necessary tools

Happy Holidays for those of you celebrating holidays this time of year :-) I am having difficulty with a newly joined Samba server, version 3.0.28-1 on CENT OS 5.1. Winbind doesn't seem to be picking up changes to group membership. For instance, the example commands below show a discrepancy between wbinfo and getent group (dom\user1 does, in fact, belong to dom\group, aka 10016) #

On 11/02/2020 15:19, Marcio Demetrio Bacci wrote: > Hi Rowland > > My two DC are Samba 4 on Debian. I? haven't Windows DC. > > >Hi Marcio, the ACLs should be copied, so I think it is likely to be > a?permissions problem, does the user who is running robocopy have > the?SeDiskOperatorPrivilege on the computer you are copying to ? > > I'm running robocopy with

My RedHat 8.0 workstation doesn't want to play nice with Winbind. The rest of our Samba servers (on RedHat 7.3) are working fine, and I am familiar with setting up Winbind. Samba: 2.2.7a (RPM from Samba.org. RedHat's RPMs do same thing.) Kernel 2.4.20 NT 4 domain I'd copied the pam and smb.conf from a working box in testing. Getent passwd and group works, BUT getent group

I have the following configuration: SuSE Linux Enterprise 11, X86_64 Packages installed with SLES11 or updated from SLES update repo: Samba 3.2.7-11.20.1 MIT Kerberos 5 1.6.3-133.33.1 OpenLDAP 2.4.12-7.18.1 Cyrus SASL 2.1.22-182.20.1 Have one server set up joined to AD (Win2K3 R2) domain as a member server, based primarily on scottlowe's blog instructions. Trying to get a 2nd SLES11

ok, edited etc all uidNumber now > 10000 except that "root", I was unsure now (?) gidNumber: # ldbsearch -H /var/lib/samba/private/sam.ldb cn=Domain\ Users | grep 'gidNumber' gidNumber: 10001 - smb.conf on member: idmap config * : backend = tdb idmap config * : range = 2000-2999 idmap config ARBEITSGRUPPE:backend = ad idmap config

On Sun, 1 Jan 2017 17:05:44 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > ok, edited etc > > all uidNumber now > 10000 > > except that "root", I was unsure now (?) If you have a user called 'root', then it is easy, remove it, 'root' shouldn't exist in AD, it is a Unix only user and you need to

On 13/01/15 01:07, BISI wrote: > Found it! (Thanks to Louis van Belle and Rowland Penny for their > guidance). > > The wiki page for > https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server > *really* needs a note about this to be added. It will save a lot of > frustration and wasted time for others coming behind. > > The reason I say this is that a

Hi all, I'm really hoping someone can help me with this, I am at my wits end trying to figure this out. I have a centos 3.x system, fully updated. Samba 3.0.9-1 installed and configured. net ads join'd to my brand new win2k3 AD server. Up to yesterday everything was working fine. Now, I can chown users but not groups ( which is a huge deal ), and I lose the ability to do users

Hello everyone, I've got samba 3.0.10 compiled --with-pam and --with-winbind , have put libnss_winbind.so into /usr/lib and created the appropriate links, and have edited /etc/nsswitch.conf to have group and password point to files then winbind. I joined my domain successfully. I'm running on a Solaris 9 system with the 9_Recommended patch cluster installed. Relevant smb.conf lines:

Hi, My ultimate goal is to use this samba installation as a member server without having to maintain NT user accounts on the samba box. I have installed samba-3.0.1 in three Red Hat 9.0 machines installation went through fine. My configuration options for Samba were the following: ./configure --with-winbind --with-winbind-auth-challenge --with-pam --with-acl-support --with-ldapsam

Hello everybody, I have set up authentication for a Linux Host using MS SFU. Works fine: "getent passwd" show my users, they can login..." On the same host I want to set up Samba 3.0.9 as a domain member. The question: Can I use the AD Controller as "idmap_backend" _directly_ , skipping the use of winbind ? The problem with using winbind is that users will show up

Hi there, I have tested it too and have no crashes anymore. ("ll /opt/samba/var/locks/sysvol/" & "wbinfo --uid-info 3000000") Many thanks from me too. Mit freundlichen Gr??en ? Thomas Nolte -- Nolte Infosysteme,? Im Sikfeld 8, 38304 Wolfenbuettel Tel 05331-946210, Fax 05331-946211, Handy 0170-5508198 Computer, Netzwerk, Kommunikation www.nisx.de -----Urspr?ngliche

On 27/05/16 17:44, Data Control Systems - Mike Elkevizth wrote: > Hi, > > I have a somewhat complicated Samba AD DC setup with four remote site AD > DCs (connected via VPN). These DCs also act as file servers (yes, I read > the warning in the documentation, but we don't have the resources to add > separate file servers at each site and we would like each server to be a DC

Hi all! Im using samba 3.0.23c from debian backports and I finding some problems, this host has worked flawlessly since a a few months ago. But now stopped to work properly. My versions are: ii winbind 3.0.23c-1~bpo.1 service to resolve user and group information from Windows N ii samba 3.0.23c-1~bpo.1 a LanManager-like file and printer server for

Winbindd is having trouble finding the Domain Admins group in my domain. It appears to be searching for the group but does not show what domain it's looking into - then it tries the local PC (ANC-Gentoo): log.winbind: [2004/01/07 13:20:43, 3] nsswitch/winbindd_group.c:winbindd_getgrnam(237) [23792]: getgrnam Domain Admins [2004/01/07 13:20:43, 5] nsswitch/winbindd_acct.c:wb_getgrnam(522)

Hai, Did you assign any UID/GID to users/groups in the AD.. i think not. If No, please do so first else you wont see any output. how : https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC My advice use the windows ADUC to set the GID/UID If Yes.. Ok.. thats strange,.. post your (sanitized) smb.conf Greetz, Louis >-----Oorspronkelijk bericht----- >Van: d3r3kshaw at

hi, today i experience a very crazy behaviour: 1) yesterday my winbindd crashed (s. log.crash) (status: "dead") 2) restarted winbind and saw that some files have no owner (just the uidNumber) 3) getent passwd, wbinfo -u shows me all users (authenticating agains Windows PDC) 4) i'm using nsswitch (passwd: files winbind, group: files winbind) e.g. (getent passwd) .... (snip)

hi there... i have a problem with winbind... i can't get the getent group working.... on the machine (where samba + winbind are running) wbinfo -u (works) wbinfo -g (works) getent passwd (works) getent group (doesn't work) -> running winbind with "-i -d 2" i get ------------------------------------------------------------------ could not lookup membership for group rid

Hello, I'm struggling with permissions management in samba 3.0.2, ads member mode, on SuSE 9. I have essentially two questions: 1) What is the precendence of the various permissions (Filesystem, share, ACL, smb.conf, user vs. group in each) that Samba observes, and how do they effect each other? 2) Should I be able to set share-level permissions on a samba share from a Win2k machine by