similar to: Pam [default=bad success=ok user_unknown=ignore], Winbind

I have a linux box, Samba 3.0.23a, that is joined to a W2K3 domain. I cannot connect to the "MP3s" share (all legal!) on this system - I can connect to home directories and printers. When I try to connect to MP3s as any user on the domain, I get an Access is denied message, or it prompts me for the username and password again. I am using Winbind (if that matters), so none of these

I'm continuously getting this message - it fills all of my logs... How can I fix this, or stop winbind from logging to syslog? Thanks! Nolan Jul 1 21:10:09 mgprisvr winbindd[2395]: [2006/07/01 21:10:09, 0] lib/util_sid.c:string_to_sid(285) Jul 1 21:10:09 mgprisvr winbindd[2395]: string_to_sid: Sid S-0-0 is not in a valid format. Jul 1 21:10:10 mgprisvr winbindd[2395]: [2006/07/01

Hello! I posted before, figured I'd try again and provide more information in the original post. I'm running samba-3.0.22-1.fc5, joined to a W2K3 domain. All features appear to work - I've been running it this way for a month. This message appears not to actually affect anything, and it occurs every 30 seconds or so. I'll be happy to post my configs, if necessary. This set

Still having problems with my Samba configuration, even after upgrade to the latest FC5 samba package. Getting "Access Denied" errors when trying to connect with a member of the group "Domain Users" to the MP3s share. The W2K3 server shows that authentication was successful. I can't find any errors in the logs at all, and winbind appears to be working (I can su to the

Hi all! First off, I'd like to thank you for the help you've previously given me. I'd like to state a few of the problems I am now experiencing, and you all can provide insight. I've read all the documentation I can find and have surfed the archives for this newsgroup, but to no avail. Any help would be greatly appreciated! (I am using SAMBA 2.2.7) Issue 1: If I don't

I'm having issues with a couple of areas of Samba Setup. I can see (from my Win 8.1 workstation) the shares for the server for my test share \\p30\download<file:///\\p30\download> and \\p30\bietz<file:///\\p30\bietz> my home folder. I don't have permissions to access the folders and/or can't create or delete files. I had an upgraded Active Directory domain from Windows

I am a SAMBA newbie, although I have spent many days perusing the newgroups and web for information before I posted my problem. I appreciate any time you put into helping me out. Here's my situation: I can log on to the domain with my WinXP non-SP1 machine, works just fine, no problems at all. However, if I try to use either of my SP1 machines, here is what I get: Windows cannot connect

Hello! I've read various information on the web, including the HOWTO on how to configure Printers, but I am struggling with making my printers publicly printable. My samba server is joined to a W2K3 domain. How do I configure it to be printable by anyone, even a user/system not part of the domain? Here is my current config: [printers] comment = All Printers path =

Hello, I am having a small issue with LDAP, and I hope someone here might be able to provide a few tips. I am unable to authenticate as user 'testuser' on server 'storage' and the following errors appear in /var/log/messages on server 'storage' Sep 19 16:56:17 storage sshd(pam_unix)[3124]: check pass; user unknown Sep 19 16:56:17 storage sshd(pam_unix)[3124]:

And why do I want to get rid of id mapping? Because starting my tests this morning, checking id of the same user on 3 DC I get 3 different UIDs for the same user. That's why we would prefer to rely on uidNumber. 2016-04-21 12:40 GMT+02:00 mathias dufresne <infractory at gmail.com>: > All DC are running same Samba version : 4.4.2. All DC are hosted on same > Centos 7. > >

Hi, I have installed samba 3.5.4 on Centos 6 and have set it up to authenticate to a Windows 2008 Domain Controller. When I do a "su - some-domain-user", the home directory gets created. However, I want the home directory to be created when a user accesses the samba shares(no shell access). Following are the relevant configurations. What are the PAM changes I need to make? Help is much

I think what I need is a prebuilt package. I currently use Samba 2.2.12 running on SCO OpenServer 5.0.6 but I am in the process of upgrading to 5.0.7. Can't move to SCO version 6 because our application isn't guaranteed to work on it. Regards Dave -----Original Message----- From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] On Behalf Of Mauricio Tavares

On 10/11/15 13:42, mathias dufresne wrote: > Thank you for this quick answer Louis. > > On DC: > > On DC I had to add one line to have winbind retrieving uidNumber AD field > rather than having Winbind chosing some random UID for my users. > This line is: > > idmap_ldb:use rfc2307 = yes > > as explained in https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD

Okay - I've got samba working as a PDC with and ldap backend. I want to have some users not be in ldap (like the built in stuff like cyrus, mail, lp etc) I can get that to work with the pam_ldap and pam_unix but pam_smbpass doesn't seem to return user_unknown as i expect for users who are not in the ldap database does this make sense? --- pam_smb_passwd.c 12 Feb 2002 15:56:19

2015-11-11 7:52 GMT+01:00 Michael Adam <obnox at samba.org>: > On 2015-11-10 at 13:57 +0000, Rowland Penny wrote: > > On 10/11/15 13:42, mathias dufresne wrote: > > >Thank you for this quick answer Louis. > > > > > >On DC: > > > > > >On DC I had to add one line to have winbind retrieving uidNumber AD > field > > >rather than

I think, the reason is some files acls, which contain uid or gid, absent in the domain. How to make so that winbindd in this case every time didn't connect with controller, but only periodically update data, using parameters winbind cache time and idmap negative cache time? I think so because in logs I see these strings: ...host has no idea of uid ... ...Connected to LDAP server...

Hello! It seems my struggle with Samba isn't quite over. My latest problem is exactly what you see above, followed by an attempt to core dump. This occurs upon authentication to the system. My system is part of a W2K3 domain. I looked at the Samba HOWTO, but apparently I have a system (FC5), that doesn't allow core dumps when the PID changes, since no core dumps are being created.

All DC are running same Samba version : 4.4.2. All DC are hosted on same Centos 7. On broken server(s): wbinfo -i mdufresne failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for user mdufresne On working servers: wbinfo -i mdufresne AD.DOMAIN\mdufresne:*:12104:100:Mathias Dufresne (TEMP):/home/AD.DGFIP/mdufresne:/bin/false The smb.conf is:

Hi, all! When I launch (again and again) smbcacls "//myfileserver/share" "" -U user -W domain or smbclient "//myfileserver/share" -U user -W domain -c "ls", in tcpdump output at myfileserver I see multiple calls to controller via ldap, therefore these commands are executed slowly. When I run getent groups at myfileserver, all worked fine, and tcpdump

Thank you for this quick answer Louis. On DC: On DC I had to add one line to have winbind retrieving uidNumber AD field rather than having Winbind chosing some random UID for my users. This line is: idmap_ldb:use rfc2307 = yes as explained in https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD That's a start. Unfortunately winbind is still giving my users GID number set to 100,