similar to: Samba can't find unix accounts for user mapping

Hi, i've a samba server (3.0.23d) as a domain member (not a PDC/BDC). My problem is that if I'm using user mapping with the option 'username map = user.map' the samba server doesn't see that I'm a member of several domain groups and the nested groups doesn't work. If I deactivate the user mapping then nested groups works fine but I've a different UID on the unix

Hi, i've installed Samba 3.0.23d on Solaris 10 (SPARC) with MIT Kerberos 1.5.1, openLDAP 2.3.30 and openSSL 0.9.8d. I have 2 Windows Server 2003 SP1 Domain Controller and about 20 Windows XP SP2 clients. My problem is that i can't get a kerberos ticket to join the domain. If i try to get a ticket with 'kinit Administrator@PONTOS.LOCAL' i get always the error kinit(v5): KDC

What do the messages below mean? I lost all network connectivity and started receiving these messages after changing username map from root = DELSOLW2K\Administrator to root = @"DELSOLW2K\Domain Admins". The system is Debian Sarge with Simo's latest debs and security = ADS. Using host libthread_db library "/lib/tls/libthread_db.so.1". `system-supplied DSO at

Hi all, ? i'm working on solaris 10 with compiling samba version 3.6.3. My box is client?of LDAP on solaris server Server Samba is domain member of AD Windows 2008R2 Kerberos is configured to link to AD Windows 2008R2. ? I'm not use windbind in my configuration. ? I've got this messages ? [2012/04/27 13:39:10.550408,? 3] auth/user_krb5.c:50(get_user_from_kerberos_info) ? Kerberos

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 (OK, my first message got mangled because of the attachments, so I'm reposting) I've got a samba 3 box that's part of an AD domain. It works correctly for most users; but there was a problem where certain users couldn't connect. We'd get a log message that looks like this: Username SAMPLE.COM\pcuser is invalid on this system

Hello List, below our smb.conf and loglevel 5 output of a failed authentication. We want to get the Unix User details from MS-SFU using the new idmap_ad Backend. If the Windows User is mapped to local name it's all fine. But if we want to use our SFU Users it fails. We believe getpwnam() on AIX is faulty. "id username" and login works for all users local and AD! Any ideas how to

Hi all, This is my first message here, so pardon me if I break some etiquette. I have a Linux (Debian 4, kernel 2.6.18-4-686) SaMBa (3.0.24) server whose shares I want to mount on a Distributed File System running from a Windows Server 2003 R2. The share itself is accessible without problems as long as I try to get to it directly (\\smb\share), but if I try to browse through the DFS I get the

Hello, a few people asked about this problem here, but up to now I have not seen a solution. System: fresh installed Debian Woody with backported packages from backports.org, nothing else, only samba3 running. System ist intended as replacement for our old windows-fileserver. Situation: after installation and configuration all worked well, accessing shares works without password-checking.

Greetings, I'm using Samba (3.0.2) on debian sarge as a file server for W2K clients. I'm having problems with one user in particular. The user can connect to a share, but has no write access. On the Unix side of the world, he has full write access. Attached are the relevant portions of the log file and my smb.conf file. Other details: The domain controller is W2K ADS. I have several

system is redhat 9 on a dell power edge 2450 running latest krb5 and openldap rpm It worked perfectly on 3.0.4 but arcserve wouldn't back up so I upgraded to 306 and everything installed correctly but now when you try and connect to the server it pops the user login box up. I can run net ads user -U Administrator and log in with my admin password and it lists all my user accounts. I can add

Hi, We have a Windows 2000 domain controller using active directory. I would like to authenticate users against it, but it's not working. I've been trying for 2 weeks without much luck. Any (and I do mean ANY) help would be greatly appreciated. My linux box: Linux cptapp01 2.6.10-5-386 #1 Tue Apr 5 12:12:40 UTC 2005 i686 GNU/Linux (Ubuntu) My samba: Version 3.0.20 My smb.conf: [global]

Dear All: I made a change to my Samba configuration to enable Solaris ACLs in my Installation of Samba 3.0.11. After then, I lost the ability to permit domain users to browse the shares. The server is running Solaris 8 2/04, and Samba is bound against MIT Kerberos 1.4 and OpenLDAP 2.2.23. It authenticates to two Windows 2000 DCs. I had obtained a Kerberos ticket from the Domain Controllers,

Hi, Our Samba Servers are getting slower and slower. Even opening the context menu on some files take 5 seconds. My log file is filled up with messages like: nsaction 909 of length 1454 [2005/10/31 12:58:04, 3] smbd/process.c:switch_message(886) switch message SMBsesssetupX (pid 24227) conn 0x0 [2005/10/31 12:58:04, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) -

Hi I successfully joined the AD as member server, smbclient \\\\hostname\\homes -U username works, but on a windows 2000 client connecting to the homes share using \\hostname failes with [2003/11/13 16:39:46, 1] smbd/sesssetup.c:reply_spnego_kerberos(172) Failed to verify incoming ticket! [2003/11/13 16:39:46, 1] smbd/sesssetup.c:reply_spnego_kerberos(172) Failed to verify incoming ticket!

I'm running samba 3.0.24 (the latest package that seems to be available for Ubuntu 7). I have a Windows 2003 AD with the R2/RFC2307 schema loaded. I would prefer to use the 3.0.24 package if possible unless there is an ubuntu package for 3.0.25. Any suggestions would be appreciated. Wbinfo -u and -g appear to work great. Net ads testjoin comes back successful. In log.winbindd-idmap I get

Hi all- In migrating from 3.0.2 to 3.0.8 on a box that's an ADS domain member, I had a relic line in smb.conf like this: winbind separator char = - With 3.0.2, users connecting wouldn't have a domain and separator char component, so spnego kerberos replies to the 2003 domain controller would be fine. In 3.0.8, users connections would have the domain and separator char for spnego

=20 \\128.252.123.123\sharename <file:///\\128.252.123.123\sharename>=20 =20 And it works as expected - my clients are in the same domain, no password is asked for, etc. =20 Using any form of the hostname in the URI, either \\hostname\sharename <file:///\\hostname\sharename> or \\hostname.domain.name\sharename <file:///\\hostname.domain.name\sharename> in the URI will

Hi, I'm trying to test Samba 3.0.0 beta 1, and so far, one problem I have spent the last couple hours trying to solve, is a problem I am having joining the domain with an NT4 workstation. The samba server is a PDC, and when I try to join the workstation to the samba controlled domain using the root account (which worked on Samba 2.2.8 just fine), I get a message on the NT workstation that it

Hi I've talked about this in other messages but have a feeling it might have got lost amongst the other symptoms we were discussing. I had a Redhat 9 server on which I'd installed Samba 3.5.6 (built from source). I had it authenticating successfully against a windows 2008 active directory server. I then upgraded the Redhat server to RHEL5.3, on which I installed Samba 3.5.7 (and

Here is my situation: I have an AIX 4.3.3 machine, that I have compiled open-ldap, kerberos5 (1.3..6), and Samba 3.0.20. Here is my smb.conf file: [global] realm = REGION.DOMAIN.COM security = ADS password server = randomdc.region.domain.com workgroup = REGION client use spnego = yes ;winbind separator = \ [homes] comment = Home Directories read only = no create mode = 0750