similar to: -DIdmap_rid_support_trusted_domains

hi, it?s me again :( i?m still not able to use idmap_rid in a trusted domain environment (samba v3.0.20b Sernet). well, to be clear: NSS is not working (id, getent passwd <user>, ...) so samba does not find the posix information for any user from a foreign domain it?s working in a single domain with ##################################### # WINBIND - Settings idmap backend =

I am trying to get out Linux boxes to authenticate against our AD domain. We have that part working just fine using Kerberos and winbind. The problem is when we use NFS on multiple machines. As you could guess, the UIDs and GIDs are not consistent across all of the machines. From what I have been reading on the internet, this seems to be common problem, but all the solutions that I have found

hi, i just do some tests with a fresh compiled samba 3.0.23a. trying to authenticate against PAM with pam_winbind gives: Aug 1 09:59:21 humevo36 pam_winbind[27853]: pam_winbind: pam_sm_authenticate (flags: 0x0000) Aug 1 09:59:23 humevo36 pam_winbind[27853]: Verify user `gasch' Aug 1 09:59:23 humevo36 pam_winbind[27853]: enabling cached login flag Aug 1 09:59:23 humevo36

I'm running Samba 3.0.11. Compiled with: ./configure '--with-ads' '--with-pam' '--with-winbind' '--with-smbmount' '--with-shared-modules=idmap_rid' It configured, make and make installed fine. I configured the idmap_rid using the following directives in the smb.conf. ; IDMap Stuff idmap backend = idmap_rid:<DOMAINNAME>=500-100000000

The samba server is FC3 / samba 3.0.10 (Fedora package w/ idmap_rid compiled) The samba server shows up in the browse list, but when you select it from an XP machine windows spits up "\\ server is not accessable" yada yada "The user name could not be found" The following shows up twice in /var/log/samba/winbindd: [2005/02/01 14:00:27, 0]

Hello, I've some trouble with winbind and the idmap_rid feature in an ADS environment. (Opteron with Debian 3.1pure64, official Samba/Winbind packet 3.0.14a) Without "idmap backend = idmap_rid:...." in the smb.conf a "getent passwd" works fine. Then I delete the /var/lib/samba/*.tdb-files, activate idmap_rid in smb.conf (see below) and join the ADS-Domain once more -

I use winbind+AD for single sign-on to many Linux machines, and the Linux hosts automount home directories on one Linux file server. I am faced with a need to synchronize the *.tdb files on the file server with all the Linux machines for consistent UID-to-loginID mapping. Has this been tried by sharing the /var/lib/samba/ over nfs with the other servers? Are there any pitfalls? Has this been

hi list, just for my knowledge -> we have a working PDC / BDC infrastructure for our domain DOMA, where PDC trusts another PDC from DOMB (all samba v3). when PDC from DOMA goes down, is the trust still valid or do we have to setup the trust on *both* DCs from DOMA (net rpc trustdom establish DOMB ... )? is that possible at all? thx&greez -- Michael Gasch Max Planck Institute for

Hi, wbinfo -Y BUILTIN\group can work without idmap_rid in Samba-3.0.14a. But I'm experiencing wbinfo -Y with idmap_rid failed for SID to GID conversion of BUILTIN groups. Since idmap_rid only works in a single domain, and captures workgroup's domain sid as a real domain sid in rid_idmap_get_domains(), when running "wbinfo -Y BUILTIN/System Operators", the function

Samba version is 3.0.10 on Gentoo linux. I am trying to use idmap_rid backend in a Windows AD environment, the Linux PC acting only as a domain member. I am using idmap_rid because I need UID/GID predictability. I can log in to console correctly, and it shows the right user and the "Domain Users" as the group. When I use default winbind TDB, I can browse the home directory from an XP

Hi List I'm experiencing a strange behaviour on my samba server the group "Domain Users" (and other builtin groups from my AD servers) appear to have a duplicated SID here is the output of mail# > net groupmap list System Operators (S-1-5-32-549) -> -1 Domain Guests (S-1-5-21-531635747-2076120898-3807014553-514) -> -1 Replicators (S-1-5-32-552) -> -1 Domain Users

Hi All, I installed samba 3.0.22 and join it to Win2003 AD domain. Users from my domain can access the samba shares successfully. My problem is that users from trusted domains can not access to my samba shares Wbinfo -m - show all the trusted domains Wbinfo -u - show all the users include the trusted domains users. Any Idea? My smb.conf global parameters: # Global parameters

I have two different systems (on different networks) showing this behavior. Both are running Ubuntu Dapper/606.1 LTS with samba version 3.0.22 and windows 2003 sp1 servers (not R2). AD integration is done via winbind, with nss using winbind. At some point in time (which is unknown to me), the samba server stopped seeing new users, groups, machines which are added to AD. scenario: I add a new

Hello list, i did a quite sucessfull net rpc vampire but one promblem remains. Everything is fine, but the user group memberships aren't restored. Only alle primary group member ships are restored. every user is in the primgrp (4126 Users). All Groups (2659) are restored including sids. but no membership is restored! I don't know why. here's my command: net rpc vampire -l -S nt4pdc

/* Cc: samba list */ Vincent Marty wrote: > Hi Ogi ! > Did you find a solution to the problem you described in a post in > linux.samba in dec 2004 ? > I get the same messages from Fedora Core 3 when accessing to a iMax > under Mac Os 10.3. Hi! Since I started to use Debian kernel 2.6.10 (in unstable), the problem disappeared. Fedora Core 3 uses 2.6.10 too so I don't know

hi, i read about samba4wins, which is really a great work from the team! do you know, if this will work with samba v3.0.14a? i ask because a german news service writes that it?s only possible with 3.0.21 (http://www.heise.de/newsticker/meldung/69132), but i can?t find this information in the notes on http://ftp.sernet.de/pub/samba4WINS/samba4wins-1.0.0-16/ thx for helping me! -- Michael

hi list, i'm using samba v3.0.14a when working with "admin users =" "inherit owner" does not work for me anymore the owner is set to "root" any ideas? will "inherit owner" solve this problem? thx in advance -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany

Server OS: Linux / Fedora Core 6 Samba version: 3.0.24, 3.0.23 (binary packages for FC6) Samba configuration: All defaults Client OS: Windows XP SP2, Windows 2000 SP4 In recent versions of Samba (including 3.0.24), attempting to rename a file to a new name that differs only in case appears to have no effect: X:\tmp>echo . > FILE.txt X:\tmp>dir 02/05/2007 08:21p 4

hi, weird thing: i thought when commenting out "delete user script" and "ldap delete dn" nobody is able to delete users from the domain. what happens: users are deleted, to be more specific their samba attributes are deleted but not their posix values. i won't let our admins delete users from our domain becaus we have another management to add/delete users to/from a

Hello, Please forgive me if this has been discussed, I did not find any references when I searched. I'm trying to replace a W2K server with a samba member server in a single ADS domain. It seems that the Fedora rpms do not support idmap_rid so I am trying to compile from the Fedora SRPM. After following the docs for building and configuring idmap_rid I get no ADS users from `getent