similar to: Password History with Ldap

Hello list, i did a quite sucessfull net rpc vampire but one promblem remains. Everything is fine, but the user group memberships aren't restored. Only alle primary group member ships are restored. every user is in the primgrp (4126 Users). All Groups (2659) are restored including sids. but no membership is restored! I don't know why. here's my command: net rpc vampire -l -S nt4pdc

hello I've been reading the thread (http://marc.theaimsgroup.com/?t=113286376900001&r=1&w=2) and I have the same limitation with WINS in a PDC/BDC. That's why I have the following (experimental) setup: PDC ==> wins support = yes, passdb backend: master ldap BDC ==> wins support = yes, passdb backend: slave ldap I configured some of my XP clients to use both WINS servers

hi list, i'm using samba v3.0.14a when working with "admin users =" "inherit owner" does not work for me anymore the owner is set to "root" any ideas? will "inherit owner" solve this problem? thx in advance -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany

hi, weird thing: i thought when commenting out "delete user script" and "ldap delete dn" nobody is able to delete users from the domain. what happens: users are deleted, to be more specific their samba attributes are deleted but not their posix values. i won't let our admins delete users from our domain becaus we have another management to add/delete users to/from a

hi folks, i hope you can help me!!! i'm using samba v3.0.14a (sernet) on debian sarge. openldap v2 is my backend, smbldap-tools 0.8.4 (patched for our organization). when adding a user via usrmgr.exe to an existing domain group i get the following error: [in usrgmr] The following error occured changing the properies of the user xxx User does not belong to this group [in smbd.logs]

hi, it?s me again :( i?m still not able to use idmap_rid in a trusted domain environment (samba v3.0.20b Sernet). well, to be clear: NSS is not working (id, getent passwd <user>, ...) so samba does not find the posix information for any user from a foreign domain it?s working in a single domain with ##################################### # WINBIND - Settings idmap backend =

Hi, i've just migrated from nt4 to samba 3.0.10-1.4E.9 with tdbsam, running on Centos 4.4 The net rpc vampire went fairly smoothly. Now that samba is running as the PDC (nt4 machine has been laid to rest) i am having trouble renaming computers in the domain. If i try this from the windows workstation (XP Professional) i get access denied. I use "root" or administrator which is

hi list, just for my knowledge -> we have a working PDC / BDC infrastructure for our domain DOMA, where PDC trusts another PDC from DOMB (all samba v3). when PDC from DOMA goes down, is the trust still valid or do we have to setup the trust on *both* DCs from DOMA (net rpc trustdom establish DOMB ... )? is that possible at all? thx&greez -- Michael Gasch Max Planck Institute for

hi, i have a question about winbind, idmap_rid and trusted domains. at sambaxp jerry said it's possible to have idmap_rid working with trusted domains. this is what we would like to have here. smbd -b doesn't show this compile option on 3.0.14a rpm (SuSE). may be this is normal, but how do i ensure that this option is in my binary w/ testing too much :) or how can i compile it

hi list, is it possible with samba v3 and ldap backend to embedd a normal group like "normalgroup" in the group "Domain Administrators" to give members of the group "normalgroup" full administrative rights on workstations? i tried with "net groupmap addmem sid-of-normalgroup sid-of-domain-admins" and "net groupmap addmem sid-of-domain-admins

Hello fellows, Does anyone of you has found the hack to permit win xp home edition to join a domain controller. I found somewhere on the net a software that does this. But it cost 145 $ US, so like the upgrade... ( the only difference in that i will not give the money to Bill Gates) My problem is with the password modification. Every times someone does change his password, he has to go onto the

hi, i was able to successfully run vfs_shadow on a samba share with win xp shadow copy client. but i think it?s currently not implemented that one could export [homes] with this vfs object, because AFAIK each @GMT-snap has to resist directly under the samba share. but [homes] is a virtual share representing different shares (depending on users). has anybody hints about using vfs_shadow with

Hi folks, it's not really an issue for me but could you please comment this behaviour i described? may be i can then open a bug report. thx! -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution (IT) Deutscher Platz 6 D-04103 Leipzig Germany Phone: 49 (0)341 - 3550 137

Since we're on the subject of Samba over the WAN.... (BTW, I'm running three offices with a Samba 3.0.9 PDC and two Samba 3.0.9 BDCs over an FreeSwan based WAN and it works just fine. The WINS server is a must in my book though.) Last Thursday and Friday, one of the remove office's WAN lines went down. While the outages were significant, nothing major happened because of it. But,

hi, i just do some tests with a fresh compiled samba 3.0.23a. trying to authenticate against PAM with pam_winbind gives: Aug 1 09:59:21 humevo36 pam_winbind[27853]: pam_winbind: pam_sm_authenticate (flags: 0x0000) Aug 1 09:59:23 humevo36 pam_winbind[27853]: Verify user `gasch' Aug 1 09:59:23 humevo36 pam_winbind[27853]: enabling cached login flag Aug 1 09:59:23 humevo36

hi, i'm using machine 1 (SuSE 9.0 32Bit): rsync 2.6.2 (from SuSE RPM) machine 2 (SuSE 9.1 64Bit): rsync 2.6.2 (from SuSE RPM) my command looks like the following: /usr/bin/rsync -W --progress --rsync-path=/usr/local/bin/rsync -e ssh --delete --force -av /data/ machine2:/data/machine1/ after rsyncing both machines, some files differ ! i verified these differences with "diff",

We have a Linux user and group with the same name (username prox, group name prox) and a Samba share with "force user = prox" set. Since upgrading from Samba 3.0.21b to Samba 3.0.23a, that share no longer works. smbclient gives the following error when connecting to the share: tree connect failed: NT_STATUS_NO_SUCH_USER The Samba server logs the following error: [2006/08/07 09:38:26,

hi i've been sucessfully using samba 3.0.0 and win2k/xp clients in a domain if i try to add a win2k/xp workstation in a samba 3.0.1 controlled domain (with the same smb.conf as the 3.0.0 PDC), i always get "no mapping between account names and security ids was done" the same workstation can enter a 3.0.0 controlled domain with no problems ! machine accounts were also created so

hi list, we recently saw the following weird behaviour on samba v3.0.13 with MacOSX panther and tiger as clients --setup-- [share1] path = /data valid users = @admins force user = administrator inherit permissions = yes force create mode = 770 force directory mode = 2770 [share2] path = /data/folder valid users = @noadmins force user = administrator inherit permissions = yes force create mode

Hello, I got this problem: I want to mount a directory without providing a login/password [indicaf$]. I thought that "guest ok = yes" would be sufficient. But it not works. What option is the right one to open a share to everyone without a login box in windows ? Thanks. This is my smb.conf (samab v3.0.7): tccwebcom# more smb.conf # Samba config file created using SWAT # from