similar to: CentOS 4.2 + idmap_rid

I am trying to get out Linux boxes to authenticate against our AD domain. We have that part working just fine using Kerberos and winbind. The problem is when we use NFS on multiple machines. As you could guess, the UIDs and GIDs are not consistent across all of the machines. From what I have been reading on the internet, this seems to be common problem, but all the solutions that I have found

Sigh, Someday i will get samba to work on aix. Now I rebuild samba because I discovered that you needed to request it to build idmap_rid.so or it will not make it. After the rebuild I moved over the smb.conf again and net ads joined again. When I try to start samba, however, it panics with this information: smb_register_idmap: Successfully added idmap backend 'tdb' [2006/02/07

Hi everyone, I'm trying to use idmap_rid on an AIX 5.3 ML4 machine. Samba compiled successfully using the IBM compiler (vac.C) version 6. The only programs I supplied where db and libiconv. I followed the instructions, and put nsswitch/WINBIND in /usr/lib/security, and edited /usr/lib/security/methods.cfg. When I start "winbindd -i", it coredumps with a Signal 11: (dbx) where

Resolved: I was not able to compile then make install and have work so I ended up using the FC3 packages and adding only the freshly compiled idmap_rid module. Thanks for the help. Brian Hoover MailLists wrote: > John, sorry I did not mean to reply directly, I hate MS-Outlook! > > John H Terpstra wrote: >> On Sunday 30 January 2005 09:17, MailLists wrote: >>> Hello,

Hello, Please forgive me if this has been discussed, I did not find any references when I searched. I'm trying to replace a W2K server with a samba member server in a single ADS domain. It seems that the Fedora rpms do not support idmap_rid so I am trying to compile from the Fedora SRPM. After following the docs for building and configuring idmap_rid I get no ADS users from `getent

All, After two days of googling, reading, swearing and cursing, I am finally admitting I cannot solve this one. I have three production FreeBSD servers running various network utilities (DHCP, bacula, zabix, syslog, rsync). These have been running fine for several years. As a primary Windows domain (accounting firm. Not much choice), I like to centralize all logins into AD which is currently

I try to use idmap_rid with Samba/Winbind authentication for Windows on Active Directory. The authentication works fine but I'm unable to compile the idmap_rid module. Here is my configuration options: ./configure --prefix=/usr --sysconfdir=/etc/samba \ --localstatedir=/var/samba --with-ldap --with-ads \ --with-smbmount --with-pam --with-pam_smbpass \ --with-winbind

As discussed previously on this list, Samba RPMs for Fedora Core do not include idmap_rid support. This is also true for older RedHat distributions. SuSE on the other hand, seems to have been patching in idmap_rid support since 3.0.5 or so; and with trusted domain support, to boot. Harrumph. I've been able to rebuild samba srpms on FC2 and RedHat 8 by patching the samba distributed rpms,

Hi everyone, I'm trying to use idmap_rid with Samba 3.0.21c on AIX 5.3. So far, I've not been successful. I've followed the method from http://us5.samba.org/samba/ftp/Binary_Packages/AIX/README to compile Samba, but added "--with-static-modules=idmap_rid". Also, I used IBM's compiler and not gcc. The compilation fails as follows: [...] Compiling sam/idmap.c Compiling

Hello, I've some trouble with winbind and the idmap_rid feature in an ADS environment. (Opteron with Debian 3.1pure64, official Samba/Winbind packet 3.0.14a) Without "idmap backend = idmap_rid:...." in the smb.conf a "getent passwd" works fine. Then I delete the /var/lib/samba/*.tdb-files, activate idmap_rid in smb.conf (see below) and join the ADS-Domain once more -

Hi - I have a problem that is driving me round the bend. I have installed Suse 9.3 (64-bit) and compiled Samba 3.0.14a from source. The server is going to be part of an ADS network so I have Kerberos working fine and I have joined the domain ('net ads testjoin' works fine). I have compiled and loaded the idmap_rid module and that seems to be working fine too. wbinfo -u gives me all the

Hello, I am trying (again) to get samba+winbind working, with the idmap_rid backend. I am using a freshly installed samba server and client machine, with samba-3.0.13. Most things seem to work, but when I try to get the uid's for the samba users, I run into problems. # net rpc join Password: ******** Joined domain IUATST4W. # net rpc testjoin Join to 'IUATST4W' is OK #

Hi, wbinfo -Y BUILTIN\group can work without idmap_rid in Samba-3.0.14a. But I'm experiencing wbinfo -Y with idmap_rid failed for SID to GID conversion of BUILTIN groups. Since idmap_rid only works in a single domain, and captures workgroup's domain sid as a real domain sid in rid_idmap_get_domains(), when running "wbinfo -Y BUILTIN/System Operators", the function

Greetings, I have a number of samba servers that will need to become Active Directory (AD) member servers. The testing I've done so far with default mapping has worked just fine. I configured a server to be an AD member server, joined it to AD but was unable to access it from a client PC - I get prompted for authentication on the client which shouldn't be happening. The log file

hi, it?s me again :( i?m still not able to use idmap_rid in a trusted domain environment (samba v3.0.20b Sernet). well, to be clear: NSS is not working (id, getent passwd <user>, ...) so samba does not find the posix information for any user from a foreign domain it?s working in a single domain with ##################################### # WINBIND - Settings idmap backend =

The samba server is FC3 / samba 3.0.10 (Fedora package w/ idmap_rid compiled) The samba server shows up in the browse list, but when you select it from an XP machine windows spits up "\\ server is not accessable" yada yada "The user name could not be found" The following shows up twice in /var/log/samba/winbindd: [2005/02/01 14:00:27, 0]

Question: How can I stop users from being prompted for a password? Is secrets.tdb needed? Do you think my problems are caused by having a different workgroup to realm? Problems: I've gone over samba-by-example 7.3.4.1 on setting up idmap_rid with winbind quite a few times now. I also checked what JHT has said in chapter 12. All of it seems correct. However I get loads of this before the

I have Linux machine with Samba 3.5.11 working great. I was using passdb backend = tdbsam So when I tried to setup a second Linux machine I failed..since UID/GID's were different when I copied fiels from server 1 to server 2. Would you recommend me to use IDMAP_RID with Winbind? BTW, I don't have domain trusts (which is required to be "off" when using rid). It's a

because the same samba fileserver will also have the home directories for linux users! According to the smb.conf man pages, the value auto will corretcly apply case insensitivity for windows users, and case sensitive for the linux users. Of course I don't know what will happen if a linux user creates two files with the same name and different case, and then logs in from a windows

In a ADS(Adv Serv 2003) setup with a few linux members, I'd like to achieve consistent UIDs for domain users across these linux machines, and idmap_rid seems to be exactly what I'm looking for. However, I cannot get winbind to create uids or gids from SIDs at all. Any hints? --Erik S. Johansen ares samba # smbd -V Version 3.0.10 ares samba # pwd /var/cache/samba ares samba # rm *.tdb