similar to: group mapping

Hello I try to run SAMBA with security = ads on AIX 5.3 with SAMBA 3.0.23d. "net ads join" was successful and the machine is now visible in the Domain with the netbios name. When I try to access the shares on the machine the log.smbd files says: (...) [2007/05/10 08:58:16, 1] smbd/sesssetup.c:reply_spnego_kerberos(310) Username MYDOMAIN/MYUSERNAME is invalid on this system

Does someone know how to do this group mapping in samba? why does "net groupmap x y" has no effect? If I map a domain group to a local group, then the members of the domain group should be treated as members of the local group, or not? On 6/1/07, Urs Golla <urs.golla@gmail.com> wrote: > Usage: > net time to view or set time information > net lookup

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello James, do you see your users and groups with "wbinfo -u" and "wbinfo -g"? Did you install "heimdal-clients" to test with "kinit" to get a Kerberos-Ticket? Did you put "winbind" behind "passwd" and "group" in /etc/nsswitch.conf? Idmapping starting with 500: idmap config

On 31/12/14 15:42, James wrote: > Hello Stefan, > > I learned the hard way about .local. I understand going forward. > > I do have an issue with the member server. Following along with the > wiki I get stuck at 'Testing the Winbind user/group mapping'. Wbinfo > works as expected but not > > #*id DomainUser* > > #*getent passwd* > > #*getent

On 31/12/14 17:23, James wrote: > Rowland, > > I set a user with a uid and domain users group with a gid but I'm > still unable to view them using 'id'. I do notice a few strange > observations. If I go to another user to attempt to assign a uid. I > get the default value of 10000. I would expect 2001 given I set the > first user with uid 2000. Groups

On 31/12/14 17:55, James wrote: > Hi Rowland, > > I did. Unfortunately something is still amiss. I do receive a > response from 'getent group domain users'(users:x:100). > > On 12/31/2014 12:26 PM, Rowland Penny wrote: >> On 31/12/14 17:23, James wrote: >>> Rowland, >>> >>> I set a user with a uid and domain users group with a gid

Hi, I bet this question was asked several times, but I'm honestly not able to find a solution. My samba4.1 (running on FreeBSD10) is part of a larger network/AD where I only have very restricted rights. Our network consists of a "toplevel" AD-Domain (top.foo.bar) and several "subdomains" (in my case: sub1.top.foo.bar), which have their own domaincontrollers (MS Windows

Hi Rowland, I did. Unfortunately something is still amiss. I do receive a response from 'getent group domain users'(users:x:100). On 12/31/2014 12:26 PM, Rowland Penny wrote: > On 31/12/14 17:23, James wrote: >> Rowland, >> >> I set a user with a uid and domain users group with a gid but I'm >> still unable to view them using 'id'. I do

On 31/12/14 18:28, James wrote: > Hi Rowland, > > passwd: compat winbind > group: compat winbind > > 'getent passwd tuser' results in a blank terminal line. > > > On 12/31/2014 1:12 PM, Rowland Penny wrote: >> On 31/12/14 17:55, James wrote: >>> Hi Rowland, >>> >>> I did. Unfortunately something is

Rowland, I set a user with a uid and domain users group with a gid but I'm still unable to view them using 'id'. I do notice a few strange observations. If I go to another user to attempt to assign a uid. I get the default value of 10000. I would expect 2001 given I set the first user with uid 2000. Groups however appear to increment. On 12/31/2014 10:52 AM, Rowland Penny

hi, i would like to allow access to specific samba shares, where the windows domain user is NOT authenticated against the share with it's username, but with a membership of a given windows-group. example: windows-domain user "test01" --> which is a member of windows domain group "smb_test01" --> which gets mapped to the unix-group "smb01" --> which is

Hai, Did you assign any UID/GID to users/groups in the AD.. i think not. If No, please do so first else you wont see any output. how : https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC My advice use the windows ADUC to set the GID/UID If Yes.. Ok.. thats strange,.. post your (sanitized) smb.conf Greetz, Louis >-----Oorspronkelijk bericht----- >Van: d3r3kshaw at

Hello Stefan, I learned the hard way about .local. I understand going forward. I do have an issue with the member server. Following along with the wiki I get stuck at 'Testing the Winbind user/group mapping'. Wbinfo works as expected but not #*id DomainUser* #*getent passwd* #*getent group* #*chown DomainUser:DomainGroup file* #*chgrp DomainGroup file* etc. I receive

Hi all, I need help. I read the following documentation on the Samba website : 4.3.1. How do I configure an account as a domain administrator? This has changed in the latest version of the HEAD branch. The "domain admin users" and "domain admin group" parameters have gone away. See the smb.conf man page for information on * domain group map * domain user map * local group

Hi Rowland, passwd: compat winbind group: compat winbind 'getent passwd tuser' results in a blank terminal line. On 12/31/2014 1:12 PM, Rowland Penny wrote: > On 31/12/14 17:55, James wrote: >> Hi Rowland, >> >> I did. Unfortunately something is still amiss. I do receive a >> response from 'getent group domain

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, after I joined an new machine into my domain, "getent group" is not showing any domaingroup. The domainusers are listet with "getent passwd" as expected. In nsswitch.conf winbind is used with "passwd" and "group". Wbinfo -g shows all groups. "net rpc testjoin" gives the right result. I can get

Found it! (Thanks to Louis van Belle and Rowland Penny for their guidance). The wiki page for https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server *really* needs a note about this to be added. It will save a lot of frustration and wasted time for others coming behind. The reason I say this is that a default Windows Server 2008 R2 install, *does not provide* the necessary tools

On 31/12/14 19:07, James wrote: > Rowland, > > I decided to start over with a fresh install and attempted again. > Only change I made was to start my mappings at 10000. I gave 'Domain > Users' group gid 10000 and 'tuser' has uid 10001. Still didn't work btw. > > dn: CN=Test User,CN=Users,DC=domain,DC=local > objectClass: top > objectClass:

---- Original message ---- >Date: Mon, 14 May 2007 10:34:32 +0200 >From: "Urs Golla" <urs.golla@gmail.com> >Subject: Re: R: [Samba] Fwd: SAMBA on AIX --> nsswitch.conf? >To: "Gianluca Culot" <gianlucaculot@dmsware.com> >Cc: samba@lists.samba.org > >nsswitch.conf does not exist on AIX! It works after changing >/etc/security/user and

Hi I need a share with read-only access for some developers (to read logfiles). the logfiles are owned by the application user and group and have 700 permissions. I have set up the share like this: path = /applicationx/logs read only = Yes valid users = "MYDOMAIN+DEVELOPER1" force user = applicationx It does work very well, but somehow it does not look