similar to: Active directory, winbind, and distribution groups (as opposed to security groups)

How many entries ? TDB Database is limited 250 users. -- Rodolphe ---------- Message transf?r? ---------- From: "Hoogstraten, Ton" <Ton.Hoogstraten@ingram.nl> To: <samba@lists.samba.org> Date: Sun, 3 Jun 2007 16:08:06 +0200 Subject: [Samba] Samba/Winbind slow with Active Directory Hi all, I'm looking for answers regarding a problem I'm having with Samba. Since a

Is then new idmap_ad module capable of getting uid/gid info from a Windows 2003 AD pre-R2 with RFC2307 Unix Identity Mapping Extensions applied? Also, is the correct syntax for specifying the schema_mode as follows: idmap config dom.example.com:schema_mode = rfc2307 (I am not confident that I am reading the idmap_ad manpage and the new idmap document correctly.) Thanks for the help, Murthy

Hi! I'm trying to convert my tdb-based idmap mapping to a LDAP-based one. This generally works as intended, with one exception - the highest uidNumber/gidNumber in use is not transferred, and this causes duplicate use of the same uid/gidNumber. Here's what I'm doing: 1) net idmap dump /var/cache/samba/winbindd_idmap.tdb > idmap.dump 2) Set idmap backend in smb.conf to

Hi all, I have noticed that if you create a share to path lets say \\dir1\dir2\dir3 And a user lets say u1 has full control on dir3 BUT no control at all on dir2 then user u1 cannot access the share. Is it right? We have a situation with clients who typically do the following: Create a share to the root of the file system and give only to administrator full control on for the root path

As some of you may know, I'm trying to set up Samba BDC on a disk- and fan-less tiny mipsel_CPU router running OpenWRT distribution. I already managed to compile Samba 3.0.21a and OpenLDAP 2.3.18 for it, and they seem to work fine. The problem is, this tiny distribution for routers doesn't seem to have anything like Name Service Switch (NSS), and relies solely on /etc/passwd and

A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 255 bytes Desc: OpenPGP digital signature Url : http://lists.samba.org/archive/samba/attachments/20060525/a6a8d41f/signature.bin

I would like to have winbind map all of my AD users to their full user@REALM form on the Linux domain members. I'd like lookups to be properly canonical. Is this possible? 'getent passwd user' should return: user@REALM.NET:*:1786588783:1786588745:Mr Man:/home/whatever:/bin/bash I'm finding my options are to either have the local names be plain, unprefixed, or prefixed, but

>> Lets say there exists a Windows domain environment I would like >> to log on to from a Linux workstation using plain Windows domain >> accounts (no local account on any Linux workstation). Do I need a >> Samba server configured as a domain member _and_ do I have to >> configure all the workstations for winbind? >you need winbind and PAM. >You need to

Please provide me with an example on how to use this tool to change a uid of a user to what I want the uid to be. I am confused on what it thinks are keys. It has a keys command: key 11 bytes: UID 119989 key 44 bytes: S-1-5-21-54348060-1989963526-242692186-2277 key 44 bytes: S-1-5-21-54348060-1989963526-242692186-8749 key 45 bytes: S-1-5-21-54348060-1989963526-242692186-24986 But if I go

Hi, I am setting up a samba server where i intend to store audio files. Since they require quite a lot of disk space i thought of compressing them in the flac audio format. The thing is that flac is not supported in many programs we use here. So here are my questions: 1.) Is it possible to configure samba to display .flac files as .wav? 2.) Is it possible to convert the .flac files to wav on the

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Volker, Assume I have a member server named LINUX joined to a domain name AD. Now assume I have a local user named foo in my passdb and a user named foo in the domain as well. I'm modifying winbindd_util.c:parse_domain_user() to do a lookup_name() to try to figure out which domain to prepend to the username rather than just assuming its a domain

Hi, Please Help! My normal users are able to gain access to all home directories even though the group owner is Domain Admins. I have set the permissions to 770 while testing and the group to Domain Admin on all directories. I have a Server2003 AD Domain with a clustered RHEL5 samba server for the home directory. I am using samba 3.0.23 with Winbind and LDAP idmap backend. This server is

Folks, Maybe it's me, or my systems, but I've found that idmap restore simply doesn't work under samba-3.0.25rc3. When I try to import the idmap.dump file I create from one of my older systems into a fresh 3.0.25rc3 installation, I get a huge stream of errors along the line of "could not set mapping of (UID|GID) to sid xxxxx". This happened whether I was using

Hi, I tried to configure the new idmap interface. Currently without much success. I have two samba domains, trusting each other. Each PDC using it's own LDAP server. I tried idmap domains = DOM1, DOM2 idmap config DOM1:default = yes idmap config DOM1:backend = ldap idmap config DOM1:ldap_base_dn = ou=Idmap,dc=dom1,dc=mydomain,dc=de idmap config

Dear users, I have uploaded the new 3.0.25a packages compiled for sarge. At the same time I have removed older 2.2.x and 3.0.x packages for Woody. Support for back porting packages to Woody was already discontinued, but older packages were still provided. As these packages were not updated after the recent security issues, I decided to remove them to avoid pushing people to use outdated and

I've recently rebuilt a samba server and noticed this problem keeps coming up with groups. If I use a user in smb.conf valid users = me It works and I'm able to access the shared drive. There are no messages in the log file. However if I use group valid users = @admin I can't access the drive and I get a lot of errors in my messages file. Here is some of the errors.

Hi, we are running into a problem that winbindd sometimes caches negative entries into its tdb database. We are still investigating the reason for that. However, another question, when winbindd caches an entry into its tdb database, is there any timeout for those tdb entries? While walking through the code I don't see any relation between winbindd_cache.c and idmap_tdb.c. Is winbindd_cache.c

Hi: I have Samba3.0.14a-Debian installed on a Debian (unstable) system After setting smb.conf to act as a domain logon I connected to the Samba server from a Windows XP client using my personal login and password. Samba was set to export HOMES as a share with this configuration: [homes] comment = User Homes path = /home/%u read only = No create mask = 0754

Hi, are there any known problems with Debian's Samba version 3.0.14a-3sarge1 ? I read about client/server connection problems. Are there any reasons, why not to use 3.0.14a-3sarge1 version or should I go to Version 3.0.22-0bpo1 from backports.org? Thanks, Marcus

Hi, I just upgraded from: samba-3.0.23d-1 to: samba-3.0.25b-3 After starting samba, I could no longer connect to any share, I get this error: NT_STATUS_OBJECT_PATH_NOT_FOUND I builded both samba rpm using the packaging/RHEL/makerpms.sh script on Centos 4.5 Is there any big change in 3.0.25? I readed all releases notes and didn't found any cause for this error. Thanks Oliver Here is the