similar to: Preemptive answer on idmap error

Summary of problem: members of Active Directory groups cannot access Samba shares that their group membership should allow. I recently joined our Linux servers to our Windows 2003 domain using Samba/Winbind. The research and implementation were time-consuming, but the results made it all worthwhile. Unfortunately I am running into a problem relating to group membership on the domain as it

I have read many opinions on what character to use for the winbind separator. Many people urge changing the default to '+'. According to testparm: 'winbind separator = +' might cause problems with group membership. The man page for smb.conf says this on the subject: "Please note that setting [winbind separator] to + causes problems with group membership at least

Happy Holidays for those of you celebrating holidays this time of year :-) I am having difficulty with a newly joined Samba server, version 3.0.28-1 on CENT OS 5.1. Winbind doesn't seem to be picking up changes to group membership. For instance, the example commands below show a discrepancy between wbinfo and getent group (dom\user1 does, in fact, belong to dom\group, aka 10016) #

Hi, Is there any way to support either stack branching or heap-allocated stack frames in llvm? What I am after is non-preemptive threading support (as in Modsim, but I have also written a small library in asm to allow this in C), where a function can "suspend" itself and resume execution later. I was excited to find llvm as I thought it would be an excellent back end for a language

Hello all, I have a functional samba/windind file server (SLES 10) thats a member server of an Active Directory domain. I'm able to successfully resolve user and group accounts from AD. The problem I'm having is samba isn't creating home directories automatically when I try to map to a AD user share from Win XP. What I am able to do is, when I ssh into the machine with an AD user,

On 21/05/15 16:31, Elias Pereira wrote: > I copied all the database files of samba3 as is mentioned in the wiki - The > classicupgrade process > <https://wiki.samba.org/index.php/Samba_Classic_Upgrade_(NT4-style_domain_to_AD)#The_classicupgrade_process> > > But if the winbindd_idmap.tdb file is in the folder, the errors occur. See > below: > > Importing idmap database

On 21/05/15 17:28, Elias Pereira wrote: > You're right, man! Sorry! My mistake! > > I put that file because I read in somewhere about the persistent and > temporary files regarding .tdb files. The winbindd_idamp.tbm was on that > list, and I think that's why I left it in the folder. :D > > Another doubt. For the provisioning starts, I had to comment out the line >

On 21/05/15 18:22, Elias Pereira wrote: > Ok. I uncomment that line and put: > > passdb backend = ldapsam:ldap://127.0.0.1 Is ldap running on the computer you are trying to run the classicupgrade on ? It needs to connect to the ldap server, so if the ldap server is running on another computer, you need to use either the FQDN of that computer or its ipaddress. Rowland > >

Greetings, I'm trying to pre-populate a Samba winbindd idmap database with some fixed entries. But the output from "net idmap dump" does not match up to the input to a "net idmap restore" command. Here's an example sequence. ------------- # # wc -l /tmp/usermapper.tmp 1218 /tmp/usermapper.tmp # head -3 /tmp/usermapper.tmp UID 100001

On 21/05/15 18:46, Elias Pereira wrote: >> Is ldap running on the computer you are trying to run the classicupgrade >> on? > > Yes. Then why can the upgrade not contact the ldap server ? Was ldap running on another computer before ? Can you post the smb.conf from the old PDC ? the one you are trying to upgrade from. Rowland > I need to modify other files too? > > On

Greetings, (re-phrased posting) In order to get CIFS and NFS interoperability in an EMC Celerra environment I'm trying to pre-populate a Samba winbindd idmap database (/var/lib/samba/winbindd_idmap.tdb) with some fixed entries. My thought was that a "net idmap restore" from a manually generated file should match the output from a subsequent "net idmap dump". But it does

Hi server: Ubuntu 12.04 samba4 DC running winbindd client: Ubuntu 12.04 samba 3.6.6 client smb.conf: realm = polop.site workgroup = POLOP security = ADS wide links = Yes unix extensions = No template shell = /bin/bash winbind enum users = Yes winbind enum groups = Yes idmap uid = 300000-400000 idmap gid = 20000-30000 The client is joined to AD and users can login. But, for example, a user does

I have setup a Samba 3.4.7 on Fedora Core 11 Linux (this is the samba version installed with "yum update.") This is a domain member server. The PDC is a Samba 3.4.9 on Solaris 10. Winbind is running I am trying to get idmap allocation working. The unix accounts for the samba accounts are in LDAP, so they are actually consistent across all samba machines. The man

Here is the solution to a problem that I recently had. (I almost emailed this list asking for help, but then a co-worker clued me into the solution.) Server: a new Cent OS 5.1 install with Samba 3.0.28 that is joined to a Win 2003 domain. Client: Win XP Pro SP3, member of same domain A user was attempting to save an Excel file which had 644 perms and was owned by her. As soon as she

You're right, man! Sorry! My mistake! I put that file because I read in somewhere about the persistent and temporary files regarding .tdb files. The winbindd_idamp.tbm was on that list, and I think that's why I left it in the folder. :D Another doubt. For the provisioning starts, I had to comment out the line referring to the ldap backend in the smb.conf of samba3. # passdb backend =

Hi! I have a setup with several Linux machines running samba-3.0.22-10.1.17 (from SuSE 10 OSS), authenticating against an AD. Since one of the machines is exporting an NFS share mounted by the rest of the machines, I need SID <-> uid/gid mapping to be shared between all Linux machines, which led me into using an OpenLDAP server as idmap backend. My smb.conf is found at the end of this mail.

I copied all the database files of samba3 as is mentioned in the wiki - The classicupgrade process <https://wiki.samba.org/index.php/Samba_Classic_Upgrade_(NT4-style_domain_to_AD)#The_classicupgrade_process> But if the winbindd_idmap.tdb file is in the folder, the errors occur. See below: Importing idmap database > ERROR(assert): uncaught exception > File

I'm running Samba 3.0.2a on Solaris 9. My shop also runs Active Directory on W2K (SP4). In an attempt to build a single sign-on solution, I thought I'd get Samba to allow Windows 2000 users to telnet/rlogin/ftp to my UNIX boxes without requiring those users to have a UNIX account. The Samba dox claim this is possible, because winbindd will map the AD account SID to a UNIX userid, and will

A silly as this sounds, I''m not sure how to set the route for the home_path and home_url helpers. Google has nothing on this. Where do I define what those paths should resolve to? -- Posted via http://www.ruby-forum.com/. -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to

Greetings! I have a samba 3.6.18 acts as a domain member. I'm using a samba nss and creating local groups for a domain users. Here part of my nsswitch.conf: group: files winbind passwd: files winbind The problem is that the tdb unix GID mappings returns different ID from time to time for the same SIDs. Suppose we have a local group "samba_svn1", created with "NET SAM