similar to: mapping SID - UID, GID with SFU 3.5

Hi again, This is a follow up to a previous e-mail, but no luck so I have done some more digging. I don't understand why it is so difficult to map between a existing user on a Windows Server (SID) and an existing user on a Unix/Solaris (UID) user, since all information is available? unix# /usr/local/samba/bin/wbinfo -n andrew S-1-5-21-1984182827-583073959-8547516-2056 User (1) unix# tail

I have had a few replies and it looks that I am on a no win solution. I either set up LDAP and delete local UID on our UNIX boxes and let samba convert SID to UID, or just leave thinks as they are. I still don't under stand why it is so difficult to do what I want when all the information seems to be at hand. 1) User changes security of a file on a samba share to allow DCSNT\andrew access.

Hi Ian, Thanks for the fast answer. How can I find out whether this is the NT domains SID? The interesting is that i can see all files/Dirs without problems in the Filebrowser of Arcserve. Thx Stefan -----Urspr?ngliche Nachricht----- Von: Ian Clancy [mailto:clancyian@cel.ie] Gesendet: Freitag, 6. Mai 2005 16:41 An: Stefan Sabolowitsch; samba@lists.samba.org Betreff: Re: [Samba]

Hi all, I'm trying to get a Samba server (which is a member of a Samba controlled domain) to store WinXP Pro user's profiles. The XP user is authenticating against a 2003 Active Directory server, which then tells it to store it's profile on my Samba server. The 'profiles' share exists and is writeable and under some circumstances we can get profiles to be stored there,

I'm running Samba 2.2.4 using security = DOMAIN and username map. I was able to join the Samba server to the NT domain. I can also access the Samba share from my W2K machine. I log on to my W2K machine using my domain account. I'm having problem adding permission (grant access to another user) to the file and folder I created. I get the following error: create_canon_ace_lists:

I have a samba server on linux with a LDAP DC, On a client server, I was do net join -S DOMSERV -Uadmin%PASSWORD and that's work The server member of DOMSERV have a share XFS filesystem. When I set manualy the acl (setfacl -m g:group:rwx the_file) It's ok, the other domain member see the ACL But when I set the acl with a Windows Workstation, that's don't work

I did search and found other folks with this issue but I didn't see a solution to my specific issue: I am running Samba 3.4.7 on ubuntu 10.04 LTS server configured to authenticate to active directory via Kerberos and LDAP for use with clients from OS X and Windows (no linux clients) On the advice of my local active directory team Winbind has been uninstalled and everything works nicely except

Hello, Lots of messages in smbd log file on a Samba file server, which is member of a Samba AD : [2018/07/24 10:30:00.822403, 0] ../source3/smbd/posix_acls.c:2080(create_canon_ace_lists)

On Tue, 24 Jul 2018 11:25:33 +0200 Henry Jensen via samba <samba at lists.samba.org> wrote: > Hello, > > Lots of messages in smbd log file on a Samba file server, which is > member of a Samba AD : > > [2018/07/24 10:30:00.822403, > 0] ../source3/smbd/posix_acls.c:2080(create_canon_ace_lists) > create_canon_ace_lists: unable to map SID >

Hello, i just searched the archive, but had no luck with my problem. Perhaps somebody could help me please.. We use Linux with ACL Kernel 2.4.17. EXT3 File-System... My samba 2.2.8a server shows different output in the Security Tab of Files or Directorys.. If i create a new file in linux and set the permissions with setfacl -m to DOMAIN*GROUP testfile i see in the securty settings the following

I think I've looked over every post that has acl or sid or winbind in it. I don't think this has been discussed quite this way. The symptom is similar to other posts but the environment is a bit different. We can do perms through samba, and we can see acls that have been set using setfacl, but we can't change the acls (e.g., add a user). We get: [2002/11/15 17:02:17, 0]

Hello all, we have joind Samba 3.0.9 to an AD-Domain which is running AD. All is working fine, acces to shares is granted, files are created, deleted. When we start off with assigning ACL's though, they just get ignored, and the User vanishes from the access list in the share manager. Server is Windows 2003, Client is XP Pro. Here is the error we get: Jun 30 13:56:05 w01abnfs07 smbd[17006]:

I have winbind v3.0.26a running on ubuntu server v7.10 (gutsy). I intend to get user & group info from MsActiveDirectory. However, when I type: getent passwd somerandomuser I get the uid and gid for the user, as recorded in the msad schema by virtue of sfu, but the homedir and loginshell that are returned are like what "winbind nss info = template" would return by default:

Hi, I'm trying to get winbindd to obtain uid and gid info from M$ AD (Windows 2003 Server SP1). I'm getting the home directory and default shell info from AD. I assume I have something wrong in my smb.conf, but cannot figure out what it is: testparm Load smb config files from /usr/local/samba//lib/smb.conf Loaded services file OK. Server role: ROLE_DOMAIN_MEMBER Press enter to see a

Hi, I've got those crash entries in my logs and there is multiple smbd process eating a lot of cpu/mem. I'm using samba 3.0.4, rpmsource from samba.org rebuilt with posix acls support. Samba is linked with an openldap-2.0.27. All of this on redhat ES 3 :/ Any hint to fix this problem? [2004/06/17 17:57:39, 0] smbd/posix_acls.c:create_canon_ace_lists(1482) create_canon_ace_lists:

Hello, I looked at my log file this morning and I see a lot of stuff about ACLs that I don't understand and this notice: INTERNAL ERROR: Signal 11 in pid 23985 (3.0.9-1.3E.3) I suspect that it was caused when a user tried to change permissions on the contents of a directory or delete it (I'm trying to find that out now). The directory seemingly no longer exists, so the user may have

There was a thread in the past, i know, but i have not found any solution: I have a domain member server Samba 3.0.23c and an AD witch manage the users. Always a user tries to add permissions for an other user I got the error in log.smb create_canon_ace_lists: unable to map SID S-1-5-21-3120594657-2306910035-793260449-1128 to uid or gid. Which means that the Windows SID is not able to map to

Hi all, I have installed Samba 3.0.7 on HP-UX and I have configured to work with "security = ADS" with a Windows 2000 Domain Controller and kerberized connection. It works fine, I have joined the domain and I can use the share defined, but the log contains: [2005/07/28 09:46:32, 1] smbd/service.c:make_connection_snum(648) 10.11.50.51 (10.11.50.51) connect to service SHARE initially

Hi I have PDC on samba 3.0.10 with LDAP (OpenDirectory on MacOSX). I need configure fileserver(both NFS and SMB) in domain(samba 3.0.25a on Solaris) Server get NSS information from LDAP(OpenDirectory) and winbind get UIDs from NSS: idmap backend = nss Users authentication works fine. Users can use shares. I can view ACLs, but can't set it. log: > [2007/08/28 16:47:44, 0]

Trying to add users using security tab i WinXP doesn't work for us, no users are added. Existing ACLs are possible to change and delete. This behavior has been identified with both Solaris 2.6, Linux 2.4.9-31 with XFS, Samba 2.2.5 and 2.2.8. I'm attaching global part of out smb.conf and a snippet from the log. Our users are in an NT domain and in NIS. Regards, Johannes smb.conf: