similar to: Can anyone get winbind to update group membership?

Hi, I'm trying to give my users access to a folder contained within a Samba share, e.g. $ ls share drwxrwsr-x 14 fsuser DOMAIN\OldGroup 432 2005-12-07 15:35 . drwxr-xr-x 6 root root 128 2005-11-17 12:33 .. drwxrwsr-x 3 fsuser DOMAIN\OldGroup 136 2005-11-22 16:56 Archive drwxrwsr-x 2 fsuser DOMAIN\NewGroup 48 2005-12-07 15:35 test Note that the

On Tue, Jun 30, 2020 at 11:24 AM Rowland penny via samba <samba at lists.samba.org> wrote: > > On 30/06/2020 09:50, Anders ?stling wrote: > > >> You have 'workgroup = HPLTS' and 'idmap config dg11', again, they must match > > As I wrote in the previous reply, that was a mistake from the initial > > deployment. However, I have a copy of the VM and

I would like some clarification on Winbind's capabilities. I have winbind up and fully functional. I can use wbinfo -g, wbinfo -u, etc.. I would like to use winbind to correlate sids to uid on filesystems mounted with smbfs or cifs. In reading further I see lots of information about doing this on EXT3 (or Linux filesystems that support ACL). Perhaps, I had misunderstood the purpose of

hello I've been reading the thread (http://marc.theaimsgroup.com/?t=113286376900001&r=1&w=2) and I have the same limitation with WINS in a PDC/BDC. That's why I have the following (experimental) setup: PDC ==> wins support = yes, passdb backend: master ldap BDC ==> wins support = yes, passdb backend: slave ldap I configured some of my XP clients to use both WINS servers

Hello everyone - Update: Many thanks to Matt Miller for the tip on usermod options. That worked very well! I did not know those options existed and would never have thought to look for them. After making and testing backups, I started with my main workstation. Rebooted in runmode=3, then ran the usermod -u and -g options. I did this in two runs. I first had to uninstall docker since it

On 23/07/2020 19:31, Jason Keltz via samba wrote: > Hi Rowland, > > I'm running smbd on the? DC.? I want to be able to do things like > adding a user, dns entry, etc. from my workstation without logging > into the DC. > > I can't get samba-tool to work with Kerberos, or ldaps, etc. As I said, I cannot get ldaps to work (yet), but: rowland at devstation:~$ sudo

On Tue, Jun 30, 2020 at 11:57 AM Rowland penny via samba <samba at lists.samba.org> wrote: > > On 30/06/2020 10:34, Anders ?stling wrote: > > On Tue, Jun 30, 2020 at 11:24 AM Rowland penny via samba > > <samba at lists.samba.org> wrote: > >> On 30/06/2020 09:50, Anders ?stling wrote: > >> > >>>> You have 'workgroup = HPLTS' and

Hi, I've got a SuSE 9.0 running Samba 3.0.1 and Netatalk 1.6.3 Samba is a member server of a win2k domain, I'm using winbind to authnticate my users. Well, with the Windows users, everything is ok. But not with the Mac users I'd like to setup Netatalk to authenticate my Macs against the win2k domain as with Windows. Is this possible? I've sarched the web all around and

I have a problem where I can't browse to a samba share from Windows (Server 2008); instead I get the error: The group name could not be found The winbind log contains the message: could not convert gid 507 to sid Suspecting a permissions problem, I went and looked at the files and the group ownership has been set to BUILTIN\guests, which is not what I want. So I try to chgrp them to the

Hello, I have two Samba Domains and each trust each other (PDCs run 3.0.22). Also I have a samba member server (3.0.24) that runs winbind. When I use wbinfo I can see the user and groups of both domains. I also can chown/chgrp files with users of the domain the server is member of. But I can`t chown/chgrp with accounts of the trusted domain. chown doesn`t work at all. chgrp works, but then only

Hi everybody, I'm having a problem with winbind creating 2 entries for some of my users that really wrecking my head ;-/ . My situation is as follows : I have a typical Samba (3.0.14a)/LDAP setup. I have a trusted domain (another Samba/LDAP setup) and use winbind to map the users from the foreign domain, with the UID to SID mappings stored in LDAP . This works very well. The relevant part

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, after I joined an new machine into my domain, "getent group" is not showing any domaingroup. The domainusers are listet with "getent passwd" as expected. In nsswitch.conf winbind is used with "passwd" and "group". Wbinfo -g shows all groups. "net rpc testjoin" gives the right result. I can get

On 02/05/2020 19:28, Jelle de Jong via samba wrote: > root at s4ad01:~# samba-tool user show jdoe There is no apparent reason why the groups do not work with chgrp, the only reason I can think of is that the group was created and when you tried to 'chgrp' the file, winbind read from its cache and it wasn't in the cache. Try running 'net cache flush' and then try

Hello fellows, Does anyone of you has found the hack to permit win xp home edition to join a domain controller. I found somewhere on the net a software that does this. But it cost 145 $ US, so like the upgrade... ( the only difference in that i will not give the money to Bill Gates) My problem is with the password modification. Every times someone does change his password, he has to go onto the

Top posting. Is this in freenas jail, perhaps? If so, I'd take a long hard look at the underlying environment. Semi off-topic. FreeNAS on FreeBSD has a whole set of really weird issues, IMO. For example; I was trying to get rsync or rdiff-backup to run [not in a jail, but just in the base context] and performance was really terrible and it would bomb for larger file syncs to a remote Linux

Hello, I am running Suse Linux 9.3 an Samba 3.0.20pre. I want to set up a folder where the user can only store files and copy them to an other folder. The User should not be able to delete modify or open the stored messages. Any ideas how I can realize this? Thanks! Greez

I just got a 8Gb flash drive and went to copy a bunch of files onto it. I wanted to perserve everything, so I just took my archiving rsync command and altered it to go to localhost:/media/RALLY2/ (name of flash drive). I am getting errors with changing the group owner. Huh? So I try to just use mkdir to create a directory on the flash drive. The directory has a group of root ??? So I try

On 2/16/19 12:14 PM, Bill Gee wrote: > ...After the usermod programs ran, I then did a "find -uid=500" with an exec option to change ownership. Repeat for changing GID. It found a few dozen files that were not in my home directory. > > On the server I ran the two "find" commands against the entire file system. It took about half an hour to run. No surprise there as

I have just installed a samba 4.7.4 from source. All right! wbinfo -u  and wbinfo -g return the list of users and groups from the domain But I can not use they in the DC filesystem. For instance: # touch ttt # chgrp 'domain admins' ttt chgrp: invalid group: ‘domain admins’ That should I do to ?

Hello, I've some trouble with winbind and the idmap_rid feature in an ADS environment. (Opteron with Debian 3.1pure64, official Samba/Winbind packet 3.0.14a) Without "idmap backend = idmap_rid:...." in the smb.conf a "getent passwd" works fine. Then I delete the /var/lib/samba/*.tdb-files, activate idmap_rid in smb.conf (see below) and join the ADS-Domain once more -