similar to: backup LDAP

I've read that Samba can be a WINS server or a WINS client, but not both. However, wouldn't Samba, when acting as a WINS server also be a WINS client in the sense that it will examine its own WINS database for NETBIOS name resolution? It just wouldn't make sense if it didn't. Maybe the reference I read is more for the purpose of exposing the mutual exclusivity of the "WINS

Hi all ! In the samba-Howto, i was looking on informations on how to set up both a samba PDC and a samba BDC controller with ldap backend. I can read: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Do not install a Samba PDC on a OpenLDAP slave server... Possible PDC/BDC plus LDAP configurations include: . PDC -> LDAP master server, BDC -> LDAP slave server.

I'm trying to write a perl program to get user information my boss wants using Net::LDAP in perl. I'm doing fairly well, but when I try to get the objectSid from the user list, it comes in packed or encrypted in some fashion. Since dumping the users using the command "net ads search '(&(objectClass=person)(objectCategory=person))'" gets me an unscrambled

Samba 3 By Example Chapter 6. Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server passdb backend = ldapsam:ldap://master.abmas.biz \ ldapsam:ldap://slave.abmas.biz Cheers, Adrian Sender. >From: Golden Butler <golden@cnt.org> To: Samba Mailing List ><samba@lists.samba.org> Subject: [Samba] Failover LDAP? Sent: Friday, 26 >May 2006

Hello everybody, I have set up authentication for a Linux Host using MS SFU. Works fine: "getent passwd" show my users, they can login..." On the same host I want to set up Samba 3.0.9 as a domain member. The question: Can I use the AD Controller as "idmap_backend" _directly_ , skipping the use of winbind ? The problem with using winbind is that users will show up

Dear Samba members, I am wondering if on joining a realm (with security=ADS), samba 3.x server gets automatically registered with MS Dynamic DNS server. My test with Samba 3.0.14a on linux did not reveal any such capability. But may be because I did not use the correct option? I would appreciate any help. Thanks in advance, -Arup Biswas

I need to allow [read] access to a Samba server using both IP filtering & UserIDs . For a given list of IP subnets, any user should have access. Outside these 'trusted' subnets, I need to do User authentication. I can handle the User authentication OK in several ways. However, I don't see any way to do the 'short circuit' allow for some IPs, then use User authentication

Hi All, I would like to know if this is possible and if possible what is the complexity. Consider a CIFS client, SAMBA Server1 and Samba Server2. Say a session is established between a CIFS client and SAMBA server1. Is it possible for the SAMBA server1 to transfer/redirect/reestablish the connection to SAMBA server2 without the CIFS client knowing about this? The session between the CIFS

hi, until now (about 1 year ago) i was working only with samba3+ldap PDC, but in near future my company enlarge his network with 6 new branchs spreaded all oever the country and i must build a scalable network with Samba-3 PDCs and BDCs, implement LDAP replication and multiple LDAP backends, all this over some VPNs(ipsec) . so, can tell me anyone how work the relationship beetwen a samba3-ldap

I am updateding my LDAP presentation (ftp://kalamazoolinux.org/pub/pdf/ldapv3.pdf) to include a section on the Samba 2.2.x LDAP backend. But I can't find any definititive documentation on the "time" attributes: pwdLastChange, pwdMustChange. Either how the time is encoded or exactly what they mean. I've seen post saying they are hexidecimal (although they don't look it)

I've fetched and compiled the latest from cvs --with-ldapsam, and didn't appear to have any problem. testparm complains thusly: ERROR: both 'wins support = true' and 'wins server = <server>' cannot be set in the smb.conf file. nmbd will abort with this setting. ...even though there is no "wins server" entry in the smb.conf, but it then reports everything

Is the rid of a user required to be 2*uid+1000 in HEAD when using an ldap backend? Is it still necessary that users also exist in /etc/passwd? I'd like to replace NIS and win NT domain auth with ldap, and want to keep the current unix uid's and the NT rid's, so the migration is transparent to the end users. -david

Hi, I'm trying to use samba with ldap because I've several server with samba and it would be impossible to add the users to every server. I'm using samba from debian unstable andfollowing the smb-ldap-3-howto but I'm having this error: Sep 12 12:26:08 tele nmbd[24587]: [2002/09/12 12:26:08, 1] nmbd/nmbd_processlogon.c:process_logon_packet(100) Sep 12 12:26:08 tele nmbd[24587]:

I'm using Samba marked 2.999+3.0cvs20020723 from Debian `sid'. In smb.conf, I've got: passdb backend = ldapsam:ldaps://master.ldap.server ldapsam:ldaps://backup.ldap.server tdbsam All works fine when both ldap servers are up, or when at least the first is up. When the first is down, though, samba tries to connect to it, doesn't manage to, and gives up instead of trying the

Specifically what I am asking is, if I have a computer named ralph$ who is uidNumber 678 in ou=Computers and I have a user who is uidNumber 678 in ou=People, will this cause problems? Must the different sets of uidNumbers be disjoint acrossed different ou's?

hi there i have recently moved all users to LDAP and incorporated the Samba schema i have allocated servers read only access to the data except for what is required ie lmpass ... ntpass .. what disturbs me is that smbpasswd demands write access to uid,rid,primarygroup,cn,displayname i would rather it did not do this i fully understand why samba requires write access to other attr's in fact in

Having a bit of trouble understanding, or getting, "ldap passwd sync" working. I assume, setting it to Yes, would make it issue a change password command to the ldap server, just like pam does, ldappasswd does, or any other ldap program. Right? What does only do? -- Jerry Haltom <jhaltom@feedbackplusinc.com> Feedback Plus, Inc.

Hello, I'm still trying to get this straightened out. I have the following system: System description RedHat 8.0 LDAP 2.1.23 Samba 3.0 I have basically 2 BDC that I want users to have home directories on. These also run LDAP backend as slave servers. Do all machines using the domain need to have machine accounts on the PDC or do some that use the BDC for home directories need to have

Hi! How can I maintain users old NT RIDs while migrating to Samba PDC when they start from 1000. The RID to UID conversion algorithm is RID = 2 * UID + 1000 so the user with RID of 1000 would be root (0 * 2 + 1000 = 1000) on Unix. Maintaining the old RIDs is essential for migrating on-the-fly, because re-adding hundreds of computers to domain and losing local user profiles is not an option. Any

I've worked with Samba 3 in an Active Directory environment. Now it's time to learn Openldap and eventually migrate an existing Active Directory domain. Looking for a good How To or Guide for Openldap, Samba 3, and Debian Woody. The State of Alaska is evaluating File & Print Server standards as they are moving our IT into an Entrprise wide system (consolidating all departmental IT).