similar to: Possible problem w/ 'idmap restore' under 3.0.25rc3

In an effort to improve my lot, I'm trying to move to a ldap backend for idmap synchronization when I deploy the new 3.0.25 version on my systems. In preparation for this, I've set up some test systems -- where I'm having some problems that I think others may be encountering (according to a few comments I've seen recently). In a nutshell, I believe I have set up my ldap

Hi, we are running into a problem that winbindd sometimes caches negative entries into its tdb database. We are still investigating the reason for that. However, another question, when winbindd caches an entry into its tdb database, is there any timeout for those tdb entries? While walking through the code I don't see any relation between winbindd_cache.c and idmap_tdb.c. Is winbindd_cache.c

I am wondering whether anyone might also be seeing the problems I am currently encountering -- and maybe even someone knows of a solution that I cannot seem to find. First, to whet your appetite, the problem: I have an otherwise functional samba+winbind system, that I am primarily using winbind to instantiate users & groups from a Win2K3-based ADS, to allow clients ssh/scp/sftp access to

================================================================= "I like the dreams of the future better than the history of the past." Thomas Jefferson ================================================================= Release Announcements ===================== This is the latest bugfix release of the Samba 3.3 series. Major enhancements in Samba 3.3.5

================================================================= "I like the dreams of the future better than the history of the past." Thomas Jefferson ================================================================= Release Announcements ===================== This is the latest bugfix release of the Samba 3.3 series. Major enhancements in Samba 3.3.5

Hi anyone know this error: Mar 20 12:01:06 gw winbindd[14756]: [2009/03/20 12:01:06, 0] sam/idmap_tdb.c:db_allocate_id(106) Mar 20 12:01:06 gw winbindd[14756]: idmap Fatal Error: UID range full!! (max: 20000) Mar 20 12:01:06 gw winbindd[14756]: [2009/03/20 12:01:06, 0] sam/idmap_tdb.c:db_allocate_id(106) Mar 20 12:01:06 gw winbindd[14756]: idmap Fatal Error: UID range full!! (max: 20000)

My company would like to start capturing printing costs. Is there a way to configure the printing interface to prompt users for a billing code? -- David Sonenberg, CCNA, GCIH Manager, Information Technology Stroz Friedberg, LLC 15 Maiden Lane 15th Floor New York, NY 10038 Tel 212.981.6527 Fax 212.981.6545 This message is for the named person's use only. It may contain confidential,

Everyone, With many thank to Jerry, my cross domain authentication is now working. This leads to a new problem. I cannot get samba to authenticate a remote domain user in a Universal group to authenticate properly. Here are the details: USTR-LINUX-1:~ # wbinfo --name-to-sid=NA\\USTR-LINUX-1-REDHAT-READ S-1-5-21-725345543-2052111302-527237240-349134 Domain Group (2) USTR-LINUX-1:~ # wbinfo

Hi! I'm trying to convert my tdb-based idmap mapping to a LDAP-based one. This generally works as intended, with one exception - the highest uidNumber/gidNumber in use is not transferred, and this causes duplicate use of the same uid/gidNumber. Here's what I'm doing: 1) net idmap dump /var/cache/samba/winbindd_idmap.tdb > idmap.dump 2) Set idmap backend in smb.conf to

================================================================ "Your background and environment is with you for life. No question about that." Sean Connery ================================================================ Release Announcements ===================== This is a maintenance release of the Samba 3.2 series. Major enhancements in 3.2.12 include: o

================================================================ "Your background and environment is with you for life. No question about that." Sean Connery ================================================================ Release Announcements ===================== This is a maintenance release of the Samba 3.2 series. Major enhancements in 3.2.12 include: o

Last week we installed Samba 3.0.20b on one of our servers, worked fine and does it's job well. But today the load was rising due two smbd processes taking up all cputime. While looking for hints on what was going on the logfiles show two types of errors (I don't know at this time if it has anything to do with the load spike): lib/util_sock.c:write_data(554) write_data: write failure in

Hi all, I've configured a system to authenticate with an AD 2k3 domain (all domain controllers have SP1) using winbind. I have joined the server to the domain as well. I created some shares to work with AD groups. Here's a quick snippet of a share from my smb.conf file: [test] comment = test share for winbind testing path = /u01/test write list =

Hi, I compiled Samba 3.0.23d on a CentOS 4.4 machine. Then I configured /etc/krb5.conf for my domain. Was able to successfully run kinit and join my Windows 2003 domain with a net ads join. Net ads user and net ads group returns the users and the groups of the domain. So far so good. I'm kinda stuck on the next step. I would like to grant access to the share defined in smb.conf to anybody

Hi, I tried to configure the new idmap interface. Currently without much success. I have two samba domains, trusting each other. Each PDC using it's own LDAP server. I tried idmap domains = DOM1, DOM2 idmap config DOM1:default = yes idmap config DOM1:backend = ldap idmap config DOM1:ldap_base_dn = ou=Idmap,dc=dom1,dc=mydomain,dc=de idmap config

Folks, Our campus AD team has decided that they ... >Need to disable LM/NTLMv1 authentication support to provide greater >security and be consistent with the CITES authentication roadmap. Noble thoughts, but there hasn't been much thought of the ramifications for other, interoperable systems like Samba. I can see that modern Samba versions support NTLMv1 and NTLMv2 methods.

Hi I'm running CentOS 6.2 with samba-3.5.10-114 , and LikewiseOpen 6.1 . How do I fix these errors ? Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]: [2012/03/16 20:25:43.639871, 0] winbindd/idmap_tdb.c:287(idmap_tdb_open_db) Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]: Upgrade of IDMAP_VERSION from -1 to 2 is not possible with incomplete configuration Mar 16 20:25:43 nzhmlfpr05 winbindd[2556]:

On Fri, Sep 15, 2006 at 05:35:06PM -0400, Matt Herzog wrote: > Hello again. > > I'm hoping there is some way I can restrict ssh login through the AD to my > Linux servers. I only have one group of users on the domain that needs ssh access. > > So far I see lots of ways to add or map or join Linux to Windows groups but > I would rather be able to say: "Permission

I can't make it work although both sign&seal and restrictanonymous are set to 0. My setup is: w2k sp2 as PDC, w2k sp3 as client, samba 3.0a21 joined into the PDC domain as an ADS member. The scenario is, from the w2k sp3 client, connect to a share hosted by samba, create a file, then use property->security->add tab to add an ACE, then the browsing user/group windows appears

Hi! Does anyone know how many ACLs can be stored on file system (xfs) using acl_xattr module and in file file_ntacls.tdb? Best regards /Adrian Berlin -- You Rock! Your E-Mail Should Too! Signup Now at Rock.com and get 250MB of Storage! http://webmail.rock.com/signup/