similar to: Samba and AD via ldap.

I have been digging around for information on this in either online and published books, but I haven't yet found the answer. I am interested in AD connective through AD Kerberos/LDAP/SFU or AD Kerberos/LDAP/AD4Unix. I have a pure win2k3 environment, so there is no backwards support via PDC emulator. Published books document older NT-like environments. *cries* If there are any documents,

The nss_ldap has some performance problems and doesn't have any caching features that windbind does. What I was aways wondering is does IDMAP write UID/GID derived from SID to the extended schema in AD? Can winbindd use this extended schema, instead of using nss_ldap? -----Original Message----- From: samba-bounces+letz_samba=realmspace.com@lists.samba.org

Scenario: Samba-3.0.20b domain member server on SuSE 9.3 (w/ all available patches applied) providing kerberos authentication through a Windows 2000 domain with AD4Unix services installed. Problem(s): 1. Can only view users from one OU in Active Directory (default is: CN=Users, problem container is: OU=authenticated) 2. According to log.winbind and log.smbd authentication fails with error:

Hi, I am trying to decide if it is worth the time to test the Kerberos support in a port I am working on of Openssh 3.5p1. Does using Kerb5 with SSH1 solve the security problems inherent in protocol 1 and bring it up to par with the security level of SSH2 or are there other issues that Kerb5 authentication won't help for SSH1? Thanks, Greg Lambert --------------------------------- Do

Hi, there's a bug on bugzilla.samba.org that I'd like to comment on but it's not letting me. It's bug #242, titled "Retrieving UNIX UID/GID directly through Active Directory from schema extension" The person who posted the request talks about using AD4Unix, but I've installed Microsoft's Services for Unix and it made similar schema changes. Specifically, it

I have a SAMBA Server utilizing an LDAP backend for user authentication and it works great unless I use ClearCase. When ClearCase is used the compilation time for our code is slowed down to a crawl and the ClearCase application is rendered nearly useless. As a test fix my boss wants me to create a second SAMBA server to be used for only the ClearCase server. I don't know if this will work,

One of the benefits of living in Silicon Valley is the SVLUG Linux users group. You meet the most interesting people there :-). I met someone from Rational software who has the ability to contact the product manager for Clearcase. I told him about the number of Clearcase customers who would like Rational to support Clearcase running against a Samba fileserver (as they've asked the Samba Team

Hello there- I hope you do not mind this email, as I am trying to reach a talented ClearCase professional. I am a business development manager for a technical consulting form called ettain group, and hope you will peruse the description below. In the event that Jacksonville is not a market of interest to you, please feel free to make any suggestions of how I can locate talented ClearCase

We are having some problems in our company's test group that did not exist when our Clearcase 2003.06 server existed on a Solaris 8 machine. Now we are running on RHEL 5.2 with Clearcase 7.0.1.3 with Samba 3.0.28 (despite the fact that IBM has only blessed up to 3.0.24) and running into some file locking issues with some scripts our test group runs. I am hoping that someone might have some

Hey, I just subscribed to this list, so apologies in advance if this has been asked already (although I haven't found mention in the archives after a cursory search). I notice that there's no Kerb5 support in 2.3.0p1. Is anyone working on getting support in there for v1 and v2 connections, or is this something I'm going to have to do myself? Also, I've just

Hi all -- I recently temporarily deployed an upgraded Clearcase server (7.1.2.3) on 64 bit RHEL 5.6. With it I was using Redhat's release of Samba for that version of the OS -- 3.0.33. The system has 32 GB of memory and within 12 hours, it would be down into swap. Maximum active licenses used is 36 but a more typical load is 18-25 users having a Clearcase license at once. Clearcase

Hi - I have samba 2.0.6 running on solaris 2.5.1 I am trying to access it from an NT box with the username 'test.clearcase' My home section of smb.conf is defined as follows: [homes] read only = no comment = Unix home directories create mode = 0750 path = %H/pchome browseable = no writeable = yes If I do finger test.clearcase I get the answer: finger test.clearcase

This falls under the 'getting clearcase to work with samba' category. Does anybody know if the clearcase albd server actually uses samba to access files (or anything else) on the unix side? I am having 'discussions' with rational (the clearcase people). The nt user running clearcase to access some unix-side views connects to the unix side using a set of credentials that have

Hi - I'm getting timouts trying to access us1.samba.org or I'd look through the archives first. Anyone currently supporting any versions of Rational's ClearCase/samba/UNIX/NT? We are currently running samba v2.0.3 on both HP-UX 11.0 (vob server) and Solaris 2.5.1 (view server). Rational ClearCase v3.2.1 on the two UNIX and NT Workstation 4 (some SP3, some SP4) We currently support

Andrew, Thank you for your suggestions. The real problem is Rational Technical support. When you pay someone 100k+ they tend to look for any excuse to deem you "unsupported". If you don't have your default group set to the clearcase user group, then technical support will decide that thats where your problem is! I am sure you know how that goes... I have solved problems

Gerald, No worries. This patch is required if your using Rational ClearCase and you don't want everyone to have access to it. It's to fix a brokenness (IMO) within ClearCase, and maybe other programs. Our windows primary group has 10k+ users... I will shoot it off to Rational, so they can provide it to there customers. I was hoping it could be applied to the main tree so I could just

Hello! I'm building a samba fileserver that would share the same files for both linux and UNIX clients and ACLs should still work from windows. The UNIX clients don't have any users either, because all user information is taken from an AD. The setup is the following: Samba 3rc1 fileserver Win2k3 AD Server + Win2k clients and Linux clients Basically the win2k3 AD schema has been updated

I'm hoping this turns into another case of 'knowing it works makes it happen.' I am involved with a unix clearcase installation which now needs to work with nt. We have clearcase 3.2.1 running on both the unix and nt side. Because we have checkin/checkout triggers hooked to some unix-side stuff, we need the unix views to be accessible from nt. Does anyone have direct experience

Hello, i have a little problem here: Using Samba 2.2.2 with IBM ClearCase (2003) on a Sun Solaris 8 machine (2 cpus, 4G ram) (IBM does not support Samba 3.0 with Clearcase, maybe Samba 3.0 will fix the problem, but not able to test it yet). There are more than 100 smbd processes running in average. Load average of the maschine: under 1.0 in normal operation. But from time to time there are

Hello Samba, We tried to use samba-2.2.4-1 with Rational ClearCase and had a problem using WinBind. ClearCase requires the primary group id to be set to the clearcase users group. WinBind sets the primary group to something like DOMAIN_GROUP_RID_USERS. I am including the patch we made to samba-2.2.4 to get things working. I have added two new smb.conf options: winbind primary group //