similar to: Problem with Samba-3.0.25rc3 & idmap_ldap (winbind dumps core)

I am wondering whether anyone might also be seeing the problems I am currently encountering -- and maybe even someone knows of a solution that I cannot seem to find. First, to whet your appetite, the problem: I have an otherwise functional samba+winbind system, that I am primarily using winbind to instantiate users & groups from a Win2K3-based ADS, to allow clients ssh/scp/sftp access to

I'm hoping someone can help me with the following. I currently have 2 Samba fileservers version 3.0.23d joined to our corporate Active Directory. Clients currently are Windows XP. I'm asked to prepare to migrate XP to Windows 7. From testing it looks like Samba 3.0.23d is not compatible with Windows 7. Therefor I started testing with the latest RHEL5 version 3.0.33-3.1e.el5 on RHEL5.

Folks, Maybe it's me, or my systems, but I've found that idmap restore simply doesn't work under samba-3.0.25rc3. When I try to import the idmap.dump file I create from one of my older systems into a fresh 3.0.25rc3 installation, I get a huge stream of errors along the line of "could not set mapping of (UID|GID) to sid xxxxx". This happened whether I was using

This one is probably going off into the esoteric side of things, but Samba/winbind doesn't seem to be working quite as expected in one particular area -- domain local groups having members from other trusted domains. I've searched extensively (google and elsewhere...), and have found little/no mention of this particular problem: "domain local group" members from other

I'm testing out a new Samba setup to hopefully replace my aging Win2k domain. I've got some of it working: - My PDC (shadow) seems to be working on the CASA domain with an LDAP backend. - nss_ldap and pam_ldap are working on shadow - I can run wbinfo -u and get the user info from LDAP on shadow. - I can run wbinfo -a username%password and authenticate a user on shadow. I can run

Hi Samba Users, I forgot to send this mail to the samba ML, too. The question is whether anyone is using the idmap alloc config options for idmap_ldap. I would like to remove them for Samba 3.6. Details below. Thanks - Michael ----- Forwarded message from Michael Adam <obnox at samba.org> ----- Date: Wed, 10 Nov 2010 11:19:56 +0100 From: Michael Adam <obnox at samba.org> To:

Hi, I'm trying to setup a samba domain controler trusting a NT4 domain. and want to use Idmap information already stored in an LDAP location. smb.conf snippets are below. I'm not getting this to work. What I see, reading log.winbindd-idmap at log level 10 is that search for Idmap entries seems to use the "ldap suffix" parameter instead of the idmap config

Hello, I setting up a new PDC for a new domain using samba 3.2.0 I use LDAP as passwd/idmap backend. I started from scratch just creating the OU for the users/groups/machines/idmaps in the ldap directory, + a user used to bind to ldap. So from there I started winbind and ran net sam provision, which worked great. Now I plan this domain will have a one way trust with one other domain, and as I

Hi list, I can't make idmap talk to my LDAP server. And I haven't found an updated howto. Some entries from log.windbindd-imap: [2012/04/13 20:05:40.500475, 5] winbindd/idmap.c:153(smb_register_idmap) Successfully added idmap backend 'ldap' [2012/04/13 20:05:40.501112, 5] winbindd/idmap.c:153(smb_register_idmap) Successfully added idmap backend 'tdb' [2012/04/13

Hello everyone, We've been running Samba for years, and with the exception of IDMAP, we've been very happy. Well, now we have a real need to keep this information in a shared DB, so I'm trying to set up the idmap_ldap plugin. I *think* I have lookups working correctly-- at least, I can see that Samba is contacting the LDAP directory. But since there's nothing actually

Hi all, I'm running Samba 3.0.28 on CentOS 5.1 as a PDC. I'm having problems with winbind taking a long to initialize or reconnect to the domain. For example, starting winbind and then checking the trust secret takes ~30 seconds: # time /usr/local/samba/bin/wbinfo -t checking the trust secret via RPC calls succeeded real 0m34.055s user 0m0.008s sys 0m0.019s In the logs

BODY { font-family:Arial, Helvetica, sans-serif;font-size:12px; }Hi, I've seen many people complain about this error message by Googling around, but I've never found a satisfactory explanation as to the cause and resolution. I'm hoping someone on the list will be able to point me in the right direction? I'm attempting to get a RHEL 5.5 client configured to use winbind auth

My samba machine authenticates logins from our AD domain and stores SID->UID mappings with idmap_ldap. Every couple of days winbind crashes, though not regularly. It's not linked to new users logging into our machine, though it might be new users being added to the domain (I don't control the domain). The core dump seems to indicate an LDAP problem. I found some similar

I'm receiving the errors listed below. It also seems unable to map the root user uid 0 with this filter. That's not that big of a deal. Wbinfo -u and -g return output but getent passwd does not. This is Ubuntu 7 using debian packages. [2007/06/28 13:27:59, 5] lib/username.c:Get_Pwnam_alloc(131) Finding user DOMAIN\chapman [2007/06/28 13:27:59, 5]

Well I am glad that there has been alot of input on this topic, alot of people are having different opinions but that is because we are not focusing with the problem at hand. The documentation provides full details on how to get samba + ldap working from scratch; but there seems to be a gap between chapter 5 & 6; Once again I will say I love this book; by far the best technical reference

Dear Samba & Users. I have spent some time going over the documentation, however I still no not fully understand what the cause is. I am focusing on Samba 3 by Example chapter 5 & 6 specifically Chapter 5 smbpasswd -w 123456 [root@node1 data]# smbpasswd -w 123456 Setting stored password for "cn=Manager,dc=ddesign,dc=com" in secrets.tdb Chapter 6 indicates in the smb.conf to

I can't make it work although both sign&seal and restrictanonymous are set to 0. My setup is: w2k sp2 as PDC, w2k sp3 as client, samba 3.0a21 joined into the PDC domain as an ADS member. The scenario is, from the w2k sp3 client, connect to a share hosted by samba, create a file, then use property->security->add tab to add an ACE, then the browsing user/group windows appears

Hi, This morning I had an issue with winbind where it lost all its uid's, I tried restarting samba and winbind but still no joy :-( The only way to fix it was to change the following : idmap config WEBHOSTING : schema_mode = rfc2307 idmap config WEBHOSTING : backend = ad idmap config WEBHOSTING : range = 500 - 300000000 to :

This is the second attempt at sending this. Apologies for any duplicates. I've got Winbind up and running to authenticate our users against our AD and to save kerberos tickets. I have used the "winbind refresh tickets = yes" setting expecting this to renew these kerberos tickets before they expire. This does not appear to work. Gnome will pop up a dialog box saying that the

Hello fellow Samba Users and Developers ... Recently I have been struggling to clearly understand the current documentation for IDMAP. There seems to be the old way of doing things and the new way of doing things...and the documentation is not very clear as to which way is appropriate for which release of Samba. At least not clear to those of use who don't read source code ;-) I am