similar to: Samba SID/RID, UID/GID Best Practices?

We are using a windows server 2003 active directory as our single sign on server. I have been able to get our RHEL4U6 servers to authenticate with active directory. My concern is that the RID mapping to unix uid/gid range (15000-20000) is stored locally on each machine in a tdb database. So far all of the servers have produced the same mapping, but I do not think it is guarantied. I think the

Using Samba 3.0.1 as PDC with LDAP backend under SuSE 8.2. When I try to add a machine account at my windows NT workstation using user 'root' and password, - which I have added to ldap using: smbldap-useradd.pl -a root -u 0 I get message on NT 'The machine account for this computer either does not exist or is inaccessible'. The /var/log/messages show that the machine account was

Dear All, I've some question. When I create new users/groups in AD DC. It seem that I still need to add UID and GID in unix attribute. Possible my setup on rfc2370. So I would like to check if there is any other way to do this without configuring UID and GID? Thank you. Regards, Chan Min Wai

I have: linux 2.6.18-1.2200.fc5 samba-3.0.23c-1.fc5 W2000 AD with SFU 3.5 uid and gid in SFU linux configured to use AD with ldap client for mapping users, groups and authentication winbind not configured Everyting works fine except ACL in the linux filesystem: I receive this error when I want to add an user access to a file: [2006/10/18 09:38:28, 0]

Dear all I need some advise with respect to SID/UID/GID mapping. The server runs Samba 3.5.8 as a member of an AD (w2k8) domain. Our UNIX UIDs are taken from the 1000-60000 range with about 10000 allocated accounts. 99% of user IDs exist in AD with the same name. For that reason we rely on the "nss" idmap backend which is non-allocating. The problem comes with the group mappings.

Hi there! I'm experiencing the following weird problem: pokeball:# wbinfo -n VTB+jimenezju S-1-5-21-776561741-1450060922-1644491937-1249 1 pokeball:# wbinfo -Y S-1-5-21-776561741-1450060922-1644491937-1249 1 11771 pokeball:# wbinfo -Y S-1-5-21-776561741-1450060922-1644491937-1249 1 11772 pokeball:# wbinfo -S S-1-5-21-776561741-1450060922-1644491937-1249 1 10140 pokeball:# wbinfo -S

Sorry my fault, it NOT >(http://www.ratio-benelux.nl/sambaldap.tar.gz but it's > http://www.ratio-benelux.nl/sambaldap.rar.gz >-----Oorspronkelijk bericht----- >Van: Andreas Bauer [mailto:andreas_bauer@arcor.de] >Verzonden: maandag 12 september 2005 15:14 >Aan: 'Louis van Belle' >Onderwerp: Re: [Samba] 2. try: settings for control panel of >Windows

ok, I followed the directions on that wikipage, made a hot backup, copied the hot backup over to the new DC, renamed the hot backup (thus replacing the existing idmap.ldb) and ran "samba-tool ntacl sysvolreset" and it spat out the following after a minute or 2 of thinking... root at dc1 samba/private# samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime):

Hello My is environment: Ubuntu 8.04 LTS, Squid 2.6.18, Samba 3.0.28a For Squid I need the query of a global group from Active Directory 2003. This works beautifully, but unfortunately not always. There are global groups which works to transform and others where it does not work. Here are my entries for test: # wbinfo -n nobadurl S-1-5-21-986273330-1409306274-1541874228-9965 Domain Group

Using Samba 3.0.2pre1 under SuSE 8.2. I have seen several references now in this list noting that the browse for machine accounts in Samba 3 is broken, and 'People' should be used instead. I changed smb.conf to 'ldp machine suffix = ou=People' and I changed smbldap_conf.pm to '$computersou=(People). I then cleared ldap, ran smbldap-populate.pl, and changed the uid of

Hi. I have a problem with mapping SIDs to uids in Samba 2.2.6pre2. I am using Mandrake linux 8.2 with acls, and samba acting as PDC on my local net. My problem is what when I viewing permissions on my test WinXP box, it shows to me SIDs, but not a user or group, and of cource everyone... For example, I created user "test" on my linux box and added him to smbpasswd. Then, when I logon

Did a git-pull and built samba4, up and running with winbind. I have a file server, which will be access by windows. Say I have a user named "abcde" (uid = 1000), under group "abcde) (gid = 1000). When I created a user with samba-too (samba-tool newuser abcde xxxxx), it creates an account "abcde" with mapped uid 300018 under group user users. I am really wondering if

Apologies, despite that error, the permissions now look good on the sysvol folder. Is there anything I need to do moving forward to keep my DCs idmap.ldbs in sync? or is this a one time thing? On Fri, Dec 15, 2017 at 1:16 PM, Taylor Hammerling <thammerling at tcsbasys.com > wrote: > ok, I followed the directions on that wikipage, made a hot backup, copied > the hot backup over to

Greetings, For a number of samba iterations I've been using Samba with winbind to keep AD users's UNIX UIDs and GIDs the same across several systems. I don't run the Active Directory set-up and those that do are NOT going to make any alterations to make my life easier. So i have always used idmap_rid to keep consistent UID/GID numbers across all my UNIX machines. This has

On Fri, 15 Dec 2017 11:09:38 -0600 Taylor Hammerling via samba <samba at lists.samba.org> wrote: > This isn't necessarily an issue (I don't think) but more so a > curiosity. > > How are UIDs mapped to SIDs and then SIDs mapped to names in Samba4 > across multiple DCs? > > I set up my DCs using Louis' how tos ( >

On Fri, 15 Dec 2017 13:16:51 -0600 Taylor Hammerling <thammerling at tcsbasys.com> wrote: > ok, I followed the directions on that wikipage, made a hot backup, > copied the hot backup over to the new DC, renamed the hot backup > (thus replacing the existing idmap.ldb) and ran "samba-tool ntacl > sysvolreset" and it spat out the following after a minute or 2 of >

Interesting... How do I go about getting them/keeping them in sync? On Fri, Dec 15, 2017 at 11:47 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Dec 2017 11:09:38 -0600 > Taylor Hammerling via samba <samba at lists.samba.org> wrote: > > > This isn't necessarily an issue (I don't think) but more so a > > curiosity. > >

Hello everybody. I'm trying to create a local group with this command and I get this error: net sam createlocalgroup peocio [2007/06/28 11:03:16, 0] passdb/pdb_interface.c:pdb_new_rid(1066) Trying to allocate a RID when algorithmic RIDs are active [2007/06/28 11:03:16, 0] groupdb/mapping.c:pdb_default_create_alias(468) Could not allocate a RID -- wasted a gid :-( Am I missing anything?

On Tue, 2003-06-17 at 09:45, Nick Stephens wrote: > Greetings! > > I have grabbed the latest samba3 cvs source, and successfully compiled it, > got it talking to my NT server, joined the domain, etc.. life is good. > But, now I have a question kinda related to functionality, i believe... > > A quick synopsis of my goal is as follows: > > i currently have a sendmail

Danke! On Fri, Dec 15, 2017 at 1:03 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Dec 2017 11:56:25 -0600 > Taylor Hammerling <thammerling at tcsbasys.com> wrote: > > > Interesting... How do I go about getting them/keeping them in sync? > > > > see here: > > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_ >