similar to: [HELP] Samba 3.0.23a pam_winbind says password expired

Hello all, I have a pretty large DC and am using winbind for our linux workstations and im having a preculiar issue. Not all accounts but some...including mine are recieving the pam error to change password. example... ... WARNING: Your password has expired. You must change your password now and login again! Changing password for user msellers. Changing password for msellers (current) NT

Hi, I just upgraded from Mandriva 2009.0 (Samba 3.2.3) to Mandriva 2009.1 (Samba 3.3.2), keeping all the same config files I had before. I use pam_winbind to authenticate users against MS Active Directory. Everything was working perfectly prior to the upgrade, and now everything seems to be fine except for one thing: no user can have access due to the following errors (taken from auth.log): May

hi, i read about samba4wins, which is really a great work from the team! do you know, if this will work with samba v3.0.14a? i ask because a german news service writes that it?s only possible with 3.0.21 (http://www.heise.de/newsticker/meldung/69132), but i can?t find this information in the notes on http://ftp.sernet.de/pub/samba4WINS/samba4wins-1.0.0-16/ thx for helping me! -- Michael

hi list, i'm using samba v3.0.14a when working with "admin users =" "inherit owner" does not work for me anymore the owner is set to "root" any ideas? will "inherit owner" solve this problem? thx in advance -- Michael Gasch Max Planck Institute for Evolutionary Anthropology Department of Human Evolution Deutscher Platz 6 D-04103 Leipzig Germany

hi, weird thing: i thought when commenting out "delete user script" and "ldap delete dn" nobody is able to delete users from the domain. what happens: users are deleted, to be more specific their samba attributes are deleted but not their posix values. i won't let our admins delete users from our domain becaus we have another management to add/delete users to/from a

I confirm that Malte M?ller says. If you want to set multiple group acces, you must use ACL. the valid user parameter in smb.conf force the right of directory but the unix right is only for group user. ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467

hi list, just for my knowledge -> we have a working PDC / BDC infrastructure for our domain DOMA, where PDC trusts another PDC from DOMB (all samba v3). when PDC from DOMA goes down, is the trust still valid or do we have to setup the trust on *both* DCs from DOMA (net rpc trustdom establish DOMB ... )? is that possible at all? thx&greez -- Michael Gasch Max Planck Institute for

hi folks, i hope you can help me!!! i'm using samba v3.0.14a (sernet) on debian sarge. openldap v2 is my backend, smbldap-tools 0.8.4 (patched for our organization). when adding a user via usrmgr.exe to an existing domain group i get the following error: [in usrgmr] The following error occured changing the properies of the user xxx User does not belong to this group [in smbd.logs]

Hi All, I installed samba 3.0.22 and join it to Win2003 AD domain. Users from my domain can access the samba shares successfully. My problem is that users from trusted domains can not access to my samba shares Wbinfo -m - show all the trusted domains Wbinfo -u - show all the users include the trusted domains users. Any Idea? My smb.conf global parameters: # Global parameters

hi, i have a question about winbind, idmap_rid and trusted domains. at sambaxp jerry said it's possible to have idmap_rid working with trusted domains. this is what we would like to have here. smbd -b doesn't show this compile option on 3.0.14a rpm (SuSE). may be this is normal, but how do i ensure that this option is in my binary w/ testing too much :) or how can i compile it

hi, i'm using machine 1 (SuSE 9.0 32Bit): rsync 2.6.2 (from SuSE RPM) machine 2 (SuSE 9.1 64Bit): rsync 2.6.2 (from SuSE RPM) my command looks like the following: /usr/bin/rsync -W --progress --rsync-path=/usr/local/bin/rsync -e ssh --delete --force -av /data/ machine2:/data/machine1/ after rsyncing both machines, some files differ ! i verified these differences with "diff",

hi i've been sucessfully using samba 3.0.0 and win2k/xp clients in a domain if i try to add a win2k/xp workstation in a samba 3.0.1 controlled domain (with the same smb.conf as the 3.0.0 PDC), i always get "no mapping between account names and security ids was done" the same workstation can enter a 3.0.0 controlled domain with no problems ! machine accounts were also created so

hi after successfully migrating users and groups from NT to Samba v3 i'm looking for a way to transfer some 1TB data from our old NT PDC to the newer one - Samba just copying the data doesn't work, because we have to ensure data consictency (and we can't switch the NT PDC off on a weekend to copy it, because it would take too long [some old MAC shares included and the PDC just

hi as the subject already tells you: is it better (and "cleaner") to build samba v3 always as RPM and install it or - in case of an update of samba - simply overwrite the existing version with "configure && make && make install" ? normally there aren't too many changes in the paths of the install-scripts, so that all (old) samba files are correctly

hi list, is it possible with samba v3 and ldap backend to embedd a normal group like "normalgroup" in the group "Domain Administrators" to give members of the group "normalgroup" full administrative rights on workstations? i tried with "net groupmap addmem sid-of-normalgroup sid-of-domain-admins" and "net groupmap addmem sid-of-domain-admins

hi, i was able to successfully run vfs_shadow on a samba share with win xp shadow copy client. but i think it?s currently not implemented that one could export [homes] with this vfs object, because AFAIK each @GMT-snap has to resist directly under the samba share. but [homes] is a virtual share representing different shares (depending on users). has anybody hints about using vfs_shadow with

but that's no help for me :/ andrew, john, .... no help out there :D ??? greez Leonardo Boselli wrote: Re: [Samba] SAMBA Groups and Permissions Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit sorry, but that's no help for me :/ andrew, john, .... no help out there :D ??? greez Leonardo Boselli wrote: > Il 4 Dec 2003 alle

hi, it?s me again :( i?m still not able to use idmap_rid in a trusted domain environment (samba v3.0.20b Sernet). well, to be clear: NSS is not working (id, getent passwd <user>, ...) so samba does not find the posix information for any user from a foreign domain it?s working in a single domain with ##################################### # WINBIND - Settings idmap backend =

hi, i just have some questions about specific (uncommon) compile options and aio-settings in smb.conf: Asynchronous IO Support ======================= "Experimental support for async IO has been added to smbd for certain platforms. To enable this new feature, Samba must be compiled to include the --with-aio-support configure option. In addition, the "aio read size" and

hi list, we recently saw the following weird behaviour on samba v3.0.13 with MacOSX panther and tiger as clients --setup-- [share1] path = /data valid users = @admins force user = administrator inherit permissions = yes force create mode = 770 force directory mode = 2770 [share2] path = /data/folder valid users = @noadmins force user = administrator inherit permissions = yes force create mode