similar to: Mommy, where do RIDs come from?

I'm having a weird problem which I think may be a bug, but I'm not sure, so I think I'll describe it and see if it rings a bell with anyone. Basically, the story is this: there's a file owned by a Unix user "lshaw" (i.e. me) and whose group ownership is "engineer". Now, I open this file on one Windows XP computer, then go try and open it again on another XP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Folks, I've uploaded the *final* 3.0.23c roll up patch to http://samba.org/~jerry/patches/patch-3.0.23b-3.0.23c-gwc-2.diffs.gz. I've already cut the 3.0.23c tarballs so unless there is a major problem, this will be the final change set. Please report *any* bugs that you find. I'd like to wrap this one up and do the public 3.0.23c

intro: i use a heavily customized arch-linux clone, so this is no newbie stuff. except root all linux users are auth'ed via winbind/w2kdc's. for windoze-user-convenience i have to use winbind use default domain == yes and installed ext3-acl support. acls are working ok, if managed via get/setfacl an also samba honours them correctly. for windoze-user-convenience acls should

When I set up my initial users for the Samba domain i did not realize that RIDs were supposed to be dynamic. I was creating the user as a posixAccount in LDAP, and then adding the Samba elements via a script that I wrote. Their RIDs are the same as their UID. For instance if I have a user with uidNumber 1036, her SID would be <domain-SID>-1036. This is fine except for idmapping for

My opinion is that security by RFC is not security, it's mommy medicine. Standards have had a terrible time keeping up with security realities. NITS's curves leak side channel information all over the place. I don't have details on what implementations are set to calculate the NIST curves in constant time, and that's not an easy feat to do anyway so I don't want to depend

Hi. Does the current stable release of samba (2.2.8a) honour the RID that is set in the LDAP directory, or does it always use algorithmic RID calculation from the Unix uid? I would like to migrate from an NT PDC to samba and copy the users' RIDs into the LDAP directory. Bye, Christoph

I found that after moving my samba server to different hardware (and diferent Linux installation), domain logons cannot find their Windows profiles and created new ones. This is caused by the different RID of the users. It seems these are calculated as 2*UID + 1000. And my UID's on new server do not match those on the old one. How to force SAMBA to provide different RIDs for the users? I do

Is there any SIMPLE way to maintain consistent mappings between windows RIDs and UNIX/LINUX UIDs/GIDs among multiple samba servers servers running winbindd? Will that problem be addressed in future samba releases? I've read about the "idmap backend" possible solution but is that the only current one? Help!!!

Hey all, I'm looking to merge multiple NT4 domains into a single infrastructure based on Samba3 and OpenLDAP on Linux of the Debian Sarge flavour (and, Bob willing, Samba4 before long). In order to allow some resources to be shared from a single Linux instance, I'm rather hoping that I can put every domain's information into a single LDAP DIT. The Samba PDCs will use only portions of

I have a bunch of Windows users using a Win2k server as a PDC. I want to move all the server functions to a Samba server without disturbing the users in any way. The client machines are all Win2k, using local profiles. Samba insists on algorithmicly generating the RID from the UID, so the Windows user, after migration, gets a new SID and loses contact with their local profile. In fact, they

Hi Guys, Just a quick one...I use ldap backend for samba users and unix(PAM+NSS) users. If I was creating a new user/group/computer manually do the RID and UID/GID have to match up somehow or something?? I mean I've been reading somewhere that that RID should be somethings like UID+2x1000 or something?? Algorithmicbase?? Whats this all about? Am I making any sense? Cheers, Rhys

Hello all, I have following situation: There are users that don't have the well-known RID 513, so groupmapping like Domain Users (S-1-5-21-<domain SID part>-513) -> users doesn't have any effect. There are users that have the primary group RID 545, 2001 and 1201. That's somehow messy. Is there any chance to get the Domain Users into the well-known primary group rid 513?

Samba version: 4.1.9 Using the idmap_rid backend Case: A Windows AD security group has a historical SID (sidHistory) whose RID matches the RID of a user in the "current domain" For example: (Note the different domain portions of the SID) Current SID of group G: S-1-5-21-1405700021-3363460546-1698178416-30661 Historical SID of group G:

I'm running into issues trying to configure a server to be a Samba PDC in a small network that contains only Win2k/XP workstations. This will be going into an environment where there are no Windows server. There is a pre-existing Samba server that will be replaced, but it'll be easier to recreate user accounts than attempt migration (there were no machine accounts). Due to

I'm trying to grasp pg. 154 of the "Official SAMBA-3" book by Terpstra and Vernooij and I'm just missing a critical networking concept. I understand that SIDs are the numerical identification of a user for the Windows world. I understand that UIDs are the equivalent for the *nix world. But what the @$@! is a Relative IDentifier (RID)?!? On page 153 the command to map a

. DOMAIN_ADMIN_PASSWD.sh echo ${PASSWD} | kinit ${ADMIN}@${DOMAIN} echo -n > /etc/ntfs-3g.usermap for DOMAIN_USER in $(wbinfo -u);do RPCLOOKUPID=$(rpcclient -P -c "lookupnames ${DOMAIN_USER}" ${DOMAIN}) if [ "${RPCLOOKUPID:0:7}" != "ERROR: " ] && [ "${RPCLOOKUPID:0:7}" != "Failed " ];then SID=$(echo ${RPCLOOKUPID}|awk '{print

debug1: X11 connection requested. debug2: fd 20 setting TCP_NODELAY debug2: fd 20 is O_NONBLOCK debug2: fd 20 is O_NONBLOCK debug1: channel 3: new [X11 connection from 127.0.0.1 port 47773] debug1: channel 3: open confirm rwindow 3000 rmax 35840 debug1: server_input_channel_req: channel 3 request exit-status reply 0 debug1: session_by_channel: unknown channel 3 debug1: dump: used 1 session 0

On Tue, 28 Mar 2017 16:48:24 +0100 Rowland Penny wrote: > > On Tue, 28 Mar 2017 11:23:23 -0400 > Mark Foley via samba <samba at lists.samba.org> wrote: > > > It seems like there is no endpoint to this problem! After changing > > user 'mark's password, the ldbsearch no longer works with the -k yes > > parameter: > > > > $ /usr/bin/ldbsearch

Hi , I open secure Session with X11 forwarding. when run any standard X applicattion like xterm xclock it come up without any error. I start my user X application it fails. On User application side it fails when "xtOpenDisplay" system call with localhost:10.0. On SSH server debug message are : > debug1: X11 connection requested. > debug2: fd 20 setting TCP_NODELAY >

I had to reboot my work machine today, and it came up in text mode (!). I did an init 5, but that had no effect (wrong command?). I killed the three gdm processes, and voila, X server mode. Where do I look to find out what is not right here? Thanks. -- Mark Hull-Richter, Linux Kernel Engineer DATAllegro (www.datallegro.com) 85 Enterprise, Second Floor, Aliso Viejo, CA 92656 949-680-3082 -