similar to: Samba does not work with new AD groups

Everyone, With many thank to Jerry, my cross domain authentication is now working. This leads to a new problem. I cannot get samba to authenticate a remote domain user in a Universal group to authenticate properly. Here are the details: USTR-LINUX-1:~ # wbinfo --name-to-sid=NA\\USTR-LINUX-1-REDHAT-READ S-1-5-21-725345543-2052111302-527237240-349134 Domain Group (2) USTR-LINUX-1:~ # wbinfo

Hello, I have samba set up using winbind so that I can ssh into the box with my DOMAIN\mylogin. That's great...kind of. How do I control which users can login to the box? As it stands now, all users in DOMAIN can log in, which is not desireable. Do I need to map domain groups to unix groups? Do I need to map domain users to the box some how? Even if I do that, how do I then set it up

Ok, so there is not a problem with SElinux and Samba. But it is a pain to set up so it will work right. I finally figured out how to set up SE and Samba so you can be able to write and delete files. I found in one of that man pages "man samba_selinux", you can just disable SE for samba. I am sure there are other ways also but this is what I have found so far. I tried to just

Hi, I have a samba server sharing some stuff. Now i want to enable access to some share only to SOME users on the domain. this is the smb.conf : [global] netbios name = DATASVR server string = DATASVR socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384 idmap uid = 10000-20000 idmap gid = 10000-20000 winbind enum users = yes

Folks, Maybe it's me, or my systems, but I've found that idmap restore simply doesn't work under samba-3.0.25rc3. When I try to import the idmap.dump file I create from one of my older systems into a fresh 3.0.25rc3 installation, I get a huge stream of errors along the line of "could not set mapping of (UID|GID) to sid xxxxx". This happened whether I was using

On Fri, Sep 15, 2006 at 05:35:06PM -0400, Matt Herzog wrote: > Hello again. > > I'm hoping there is some way I can restrict ssh login through the AD to my > Linux servers. I only have one group of users on the domain that needs ssh access. > > So far I see lots of ways to add or map or join Linux to Windows groups but > I would rather be able to say: "Permission

Hi All My system is Freebsd 5.4 and Samba 3.0.21a. I am using ADS for system security. In my smb.conf, I create a share like that. [Test2] comment = Test path = /usr/tmp/ valid users = @"Domain Admins",@"Domain\myaccount" The domain administrator can access the share folder, but I can't. It keeps asking me the username and password. The samba is

I have been unable to find what version of Samba is running on a particular HP/UX server. The information is not included in the ../samba/lib/smb.conf where I am used to finding it. Also, I can not tell what port they have configured on this box any tips? John R. James, Jr. Unix Engineer PTSRICT Team Acxiom, Corporation (501) 342-0455

Hello, I've come across a fairly unique situation and after much searching have not found a solution. I thought I would see if anyone here has had any experience with this before. I have a location with two ADS domains with a two-way trust configured. -For this example I will call them corp.company.com and bst.company.com. -I have a FreeBSD client running Samba version three -I want to

It's been a long journey, bear with me. we have multiple domains, that have interdomain trusts in separate forests. I can successfully authenticate via "wbinfo -A A\\userA" and "wbinfo -A B\\userB"; same with -K. The host is joined do AD "A". UserA can authenticate successfully and get a shell. However I desire B\\UserB to also be able to login as well.

I have users from Domain A trying to browse a domain member samba server in Domain B. Domain A and Domain B are both Windows 2k domains. Domain B has a one way trust to A. A users can browse Domain B Windows server with no problem so I no the trust is fine. Samba version is 3.0.21b on RH Linux ES 3. The winbindd log is giving me the following error: [2006/02/16 08:28:50, 0]

Hi folks, After some more trial and error, I was able to get a bit further in the game with the permission issues I had (previous message was titled 'Samba permissions...) Now I'm able to get onto the system, browse and read/copy/delete files off of the shares. What I can't do is put stuff on because I get a locking error. The setup is as follows: Server 1 -->

Hi, I use CentOS4 (RHEL4) and it seems that I was using /var/lib/samba for storing the .tdb files. Then I compilled the fedora .src.rpm from samba.org and it points now to /var/cache/samba I will build tonight the .rpm from the .tar.gz and see which directory samba choose for the .tdb files in CentOS4. Anyone can confirm this list of distro/.tdb directory: Fedora: /var/cache/samba CentOS4:

Hello, Can somebody of the Samba team explain me the difference of Fedora packages or Enterprise packages ( <http://enterprisesamba.com/> http://enterprisesamba.com/) of Samba on Red Hat Enterprise Linux 4? I tried to find any information about this subject, but googleing doesn't help me. The standard Samba package (3.0.10EL) of RHEL4 doesn't communicate with a W2k3 server

thanks for suggestion, in other words you use only ACLs for users denying all for groups, unfortunately we had many group such as domain users, secretary, finance, etc belonging to users for which we need to apply at least 770 in order to gain a simplified permission management using groups the actual dirty workaround I applied was to track new files/dir by tailing with follow ( tail -f ) a

Thank you, but this did nothing. Users from group 'g02' can access folder '01'. But this folder has ACL set up only for group 'g01' > You could investigate using 'access based share enum = yes' > > and setting the permissions from Windows, see here: > > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > > You will

Please reply directly to me. Seeing the message below. Is it possible to determine exactly which file is corrupted? I was thinking the OBJECT/RANGE info may be pointing to it but I don''t know how to equate that to a file. # zpool status -v pool: u01 state: ONLINE status: One or more devices has experienced an error resulting in data corruption. Applications may be

Hi Vincent, have you found a solution that makes "force directory mode = 2770" able to apply to new created folders ? I have a similar problem: if I set by hand (eg. chmod 2770) the folder A and then I try to create an X element into that folder through samba I get the result needed ( group of X become overriden from parent folder A ) but the problem is that the new element X not

I want to replicate between two Solaris hosts. The source is Solaris 2.6 and the target is Solaris 2.8. Using rsh, the basic program seems fine (not running in daemon mode), but I have a problem. The directory tree is about 150,000 files, with about 5 gb of data. I tar'd the directory and moved it to the other side, but when I run an rsync against that directory, it still wants to move

... though I tried, read and typed the last 4 hours; still no clue. Please, can anyone give a clear idea on how this works: Get the content of c0d1s1 to c0d0s7 ? c0d1s1 is pool home and active; c0d0s7 is not active. I have followed the suggestion on http://www.opensolaris.org/os/community/zfs/demos/zfs_demo.pdf % sudo zfs snapshot home at backup % zfs list NAME USED AVAIL REFER