similar to: ad module, unix/user domain/group oddity, can't use winbind trusted domains only

As discussed previously on this list, Samba RPMs for Fedora Core do not include idmap_rid support. This is also true for older RedHat distributions. SuSE on the other hand, seems to have been patching in idmap_rid support since 3.0.5 or so; and with trusted domain support, to boot. Harrumph. I've been able to rebuild samba srpms on FC2 and RedHat 8 by patching the samba distributed rpms,

Software list: FreeBSD 5.3 Samba 3.0.14a nss_ldap-1.204_5 openldap-client-2.2.19 openldap-server-2.2.23 p5-perl-ldap-0.32.02 pam_ldap-1.7.6 smbldap-tools-0.8.8 samba was configured with the following options. LDAP, Cups, Winbind, utmp, popt, acl, quotas, msdfs, syslog, without_ADS I have also tried winbind_nss which I believe is a FreeBSD wrapper around the linux implentation of winbindd, but

Has anyone tried the PADL identity server? It looks like it provides Active Dircectory, LDAP, and Kerberos. I'd love to here about people's experience with it. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

Follow up to original post. If I created local groups and users in /etc/passwd & /etc/groups I get farther along. For instance, if I have a Samba PDC with LDAP basically like I listed in my post. If I browse from a w2k pro box to the samba server without the workstation having joined the domain, I can authenticate to the samba server with a user who is not in /etc/passwd but is in LDAP. So

bgColor="snow" bgColor="lavender" width="97%" bgColor="snow" ?<FONT style="FONT-SIZE: 2px" size=1>&#173;&#xAD;</FONT>&#x442;&omicron;<FONT style="FONT-SIZE: 2px" size=1>&#xAD;&#xAD;</FONT>&#32;<FONT style="FONT-SIZE: 1px"

bgColor="oldlace"<BR><DIV>&nbsp;</DIV> <BR><BR>width="92%" bgColor="lemonchiffon" <BR><DIV><FONT style="FONT-SIZE: 2px" size=1>&#173;</FONT></DIV> <BR><DIV><FONT style="FONT-SIZE: 1px" size=1>&#xAD;&#xAD;</FONT></DIV>

bgColor="ghostwhite" width="98%" bgColor="honeydew" bgColor="ghostwhite" - &Beta;a??&#x61;<FONT style="FONT-SIZE: 3px" size=1>&#xAD;</FONT>?<FONT style="FONT-SIZE: 1px" color=#fefcfc size=1>&#28;</FONT>&#x20;&#1080;&#x43D;<FONT style="FONT-SIZE: 1px"

samba-tool group addmembers domaingroup 'SAMDOM\user1' ERROR(exception): Failed to add members "SAMDOM\user1" to group "domaingroup" - Unable to find "SAMDOM\user1". Operation cancelled. samba-tool group addmembers 'SAMDOM\domaingroup' 'SAMDOM\user1' ERROR(exception): Failed to add members "SAMDOM\user1" to group

What can I look at to understand why chown keeps saying user does not exist. wbinfo -u/-g returns the user information klist -v shows kerberos is working net ads join works fine wbinfo -t shows secret is fine aix does not have getent so I can't run getent passwd -- is there something equivalent on aix? /usr/lib/security/methods.cfg has: WINBIND: program =

<DIV><FONT style="FONT-SIZE: 1px" size=1>&#173;&#173;</FONT></DIV><BR><BR><BR> <BR><DIV><FONT style="FONT-SIZE: 1px" size=1>&#173;&#xAD;&#xAD;</FONT></DIV><BR><DIV><FONT style="FONT-SIZE: 1px" size=1>&#173;&#173;&#xAD;</FONT></DIV>

On Mon, 29 May 2017 23:01:43 +0200 (CEST) Sébastien QUESSON via samba <samba at lists.samba.org> wrote: > samba-tool group addmembers domaingroup 'SAMDOM\user1' > ERROR(exception): Failed to add members "SAMDOM\user1" to group > "domaingroup" - Unable to find "SAMDOM\user1". Operation cancelled. > > samba-tool group addmembers

A question for the best winbind SID-UID/GID mapping in our situation: I'm building a new infrastructure with Windows 2003SP1 ADS Domaincontrollers and some Debian Servers (File: Samba+NFS; Mail; Web; ....) and varios XP and Debian Clients. After reading Chapter 12. (Identity Mapping) in the Samba-HOWTO is IDMAP_RID in couple with winbind an easy way to solve the problem with syncr.

Hi All, I extended my AD schema (SFU 3.5) and migrated the users and groups from my NIS domain. The groups migrated from the NIS have the same GID like on the NIS. I added linux machines to my AD domain using windbind, and define on the smb.conf "idmap gid = 10000-20000". I logged in using my AD user account, and when I'm doing "id", I see that all the AD groups

I am stuck with Samba -Active Directory communication. Trying to bring my SUSE 10.0 to speak with AD Domain. net rpc testjoin - brings a unable to find suitable server message net join - kerberos_kinit_password preauthentication failed and ads_connect preauthentication failed wbinfo -u works fine wbinfo -t works fine getent passwd/group works too smb is running nmb is running winbindd is

Hi all, >From the manpage of rsync, I can see the following descriptions: --inplace The option implies --partial (since an interrupted transfer does not delete the file) So I do the following testings on the `--inplace' and `--partial' for resuming a file with the following steps: 1- rsync ftp.cn.debian.org::debian/dists/wheezy/main/binary-amd64/

Hi, We are using freeRADIUS 1.1.6. + samba 3.0.1 + krb5-1.3.2 talk to active-directory(win2k3). Followed by: http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO Now it can work. But there are multiple domains in active-directory. Can samba or krb5 support mutiple domains? How to configure krb5.conf and smb.conf can let it support multiple domains?

Hi all, I need help. I read the following documentation on the Samba website : 4.3.1. How do I configure an account as a domain administrator? This has changed in the latest version of the HEAD branch. The "domain admin users" and "domain admin group" parameters have gone away. See the smb.conf man page for information on * domain group map * domain user map * local group

bgColor="cornsilk"<BR> <BR>width="95%" bgColor="darkgreen" <DIV><FONT style="FONT-SIZE: 2px" size=1>&#xAD;</FONT></DIV><DIV><FONT style="FONT-SIZE: 3px" size=1>&#xAD;</FONT></DIV> bgColor="cornsilk"<BR><BR> -------------- next part --------------

We are building smbclient 4.3.3 for Intel, which was working fine. We got a toolchain update, which added the lttng-ust libraries(previously missing in our toolchain), but not lttng/tracef.h and now we get an error in the config.log: Checking for lttng-ust pkg-config --errors-to-stdout --print-errors --cflags --libs lttng-ust Package lttng-ust was not found in the pkg-config search path. Perhaps

I've also noticed that my SIP phones (snom [12]00) seem to deregister themselves after some time, and not be able to re-register until Asterisk is restarted. This problem only manifested with the latest CVS. -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com