similar to: groupmapping impossible?

---- Original message ---- >Date: Mon, 14 May 2007 10:34:32 +0200 >From: "Urs Golla" <urs.golla@gmail.com> >Subject: Re: R: [Samba] Fwd: SAMBA on AIX --> nsswitch.conf? >To: "Gianluca Culot" <gianlucaculot@dmsware.com> >Cc: samba@lists.samba.org > >nsswitch.conf does not exist on AIX! It works after changing >/etc/security/user and

If I run a normal ldapsearch it gives me the gidnumber and uidnumber attributes. It looks like the AD is set up properly. ---------- Forwarded message ---------- From: Urs Golla <urs.golla@gmail.com> Date: Oct 4, 2007 9:47 AM Subject: could not read attribute 'gidNumber' To: samba@lists.samba.org Hi I am using samba 3.0.23c on RHEL5 with security = ads. If I use "idmap

Hi I am still trying to run SAMBA on AIX with "security = ads" and I have a few questions: - on AIX is no such file as /etc/nsswitch.conf --> Do I have to add the configuration somewhere else? - I allways get this "User xy is invalid on this system" if try to map a share from Windows. What does this mean? Is the user invalid on the Domain? on AIX? on SAMBA? Is the User

Hi We have a problem with the one way trusts between the DEV and PROD domains (Windows 2003). Microsoft told me to use NTLM instead of kerberos. Is there a way to force samba to use NTLM (or NTLMv2) instead of kerberos? Regards Urs

Hello, I need to upgrade Samba 2.2.2 to a stable Samba version compatible with AIX5.1 . Need to know the samba version I need to download and apply. Tito

Hi I am trying to upgrade to samba 3.2 with the experimental package for rhel5 64 bit from sernet. it tells me i have to install libtalloc.so.1()(64bit) first. where do i get this? "yum provides libtalloc.so.1" does not find anything. thanks urs

Every few weeks users are not able to logon anymore until i restart the winbind daemon. The message in winbind.log is NT_STATUS_NO_LOGON_SERVERS. after that PAM (system-auth --> pam_succeed_if.so) is not able to resolve the active directory groups anymore. The quick fix is to create a new situation in our monitoring tool to restart the daemon if this message appears in the log. Is this a known

Hello I try to run SAMBA with security = ads on AIX 5.3 with SAMBA 3.0.23d. "net ads join" was successful and the machine is now visible in the Domain with the netbios name. When I try to access the shares on the machine the log.smbd files says: (...) [2007/05/10 08:58:16, 1] smbd/sesssetup.c:reply_spnego_kerberos(310) Username MYDOMAIN/MYUSERNAME is invalid on this system

Hi I need a share with read-only access for some developers (to read logfiles). the logfiles are owned by the application user and group and have 700 permissions. I have set up the share like this: path = /applicationx/logs read only = Yes valid users = "MYDOMAIN+DEVELOPER1" force user = applicationx It does work very well, but somehow it does not look

Hi I use winbind with ADS security for authentication. If I write "ls -la ~username" in bash or ksh and press TAB or escape to resolve the HOMEDIR the shell hangs until I cancel with Ctrl+C. After that I have to restart winbind! If I press enter after "ls -la ~username" it works. I use samba3-winbind-3.0.28-35 on RHEL4U6 (32bit). Any idea? regards urs

Hi I got a problem with groupmapping. It doesn't work correct: Wilma2:/home/root # net groupmap list | grep 512 Domain Admins (S-1-5-21-3371203057-3264423045-2392767973-512) -> domadm ldapsearch -x cn=domadm: # domadm, groups, wms-hn.de dn: cn=domadm,ou=groups,dc=my-domain objectClass: posixGroup objectClass: sambaGroupMapping cn: domadm gidNumber: 65669 memberUid: tilo sambaSID:

Hi ! When I create a user with samba-ldap tools, the userRid is calculated if the -x option is set. The userGroupRid is calculated too. But is the groumapping is enabled, the SambaPrimaryGroupSID not correspond with SambaSID of groupmapping Example : Groupe "Domain Users" : gidNumber 100 displayName Domain Users objectClass sambaGroupMapping sambaSID

Hello, After upgrading our samba DC from 3.0.10 to 3.0.11, we have been experiencing problems with groupmapping. In 3.0.10, we had to explicitly map our Unix groups (local or NIS) to NT groups with a 'net groupmap add' command. However, in 3.0.11, all our Unix groups are mapped automagically. Although they do not show up with a 'net groupmap list' on the DC, our clients can

I was wondering if anyone has come across an error in their winbindd log: could not lookup membership for group rid S-1-5-21-3506869558-4124343851-970148941-2025 in domain BOGUS (error: NT_STATUS_NO_SUCH_GROUP) I have all the mappings done correctly: domainadmin (S-1-5-21-3506869558-4124343851-970148941-512) -> domainadmin domainusers (S-1-5-21-3506869558-4124343851-970148941-513) ->

Hello Samba people ! Thanks to the great docs available, I was able to setup samba as a PDC in a few hours. Everything works as I wish, except one thing. As security is not really a matter in my case, I would like every domain user to be able to install programs on every domain machine. As I understood, this can be achieved by adding every domain user in the "Domain Admins" group. Am I

i stumble into the following prob.. got 302 - mysql3 - rh9 i have aprox 1200 users, and 1190 are domain users.. i got like 5 users, who should be mapped into domain user mapped into domain admin ??? in the /etc/passwd and /etc/group files, the are mapped in to domain user group, and NOT in the domain admin group.. (so this would be fine..) in the mysql-db, the group sid- is set to the same sid

I'm trying to iron out all the problems on my PDC. It's setup with a LDAP backend that's replicated to an ldap slave/BDC. Here's the problem: # smbldap-groupshow 'domain admins' dn: cn=Domain Admins,ou=People,dc=strozllc,dc=com objectClass: posixGroup,sambaGroupMapping gidNumber: 512 cn: Domain Admins memberUid: Administrator,root,astanley description: Netbios Domain

Hi, I'm newbie with Samba. I'm using Samba-3.0 directly installed with Fedora core. I've made a PDC linux server with Samba-3.0, openldap-2.1.22 with pam_ldap everything seems to be good but not with net groupmap. when using command: "net groupmap list" I have the following error : [2003/12/15 17:52:15, 0] passdb/pdb_ldap.c:ldapsam_setsamgrent(2048) ldapsam_setsamgrent:

Hello List, In my logfile I found: Sep 11 18:40:58 gateway smbd[92133]: [2006/09/11 18:40:58, 0] auth/auth_util.c:create_builtin_administrators(785) Sep 11 18:40:58 gateway smbd[92133]: create_builtin_administrators: Failed to create Administrators Sep 11 18:40:58 gateway smbd[92133]: [2006/09/11 18:40:58, 0] auth/auth_util.c:create_builtin_users(751) Sep 11 18:40:58 gateway smbd[92133]:

Hi, The functions prepanel.default.bwplot() and lpretty() are not running in Deepayan's barley example concerning vertical bars with the lattice function barchart(). Why, is there a restricted use for the package lattice-Internal? Urs Simmen mailto:usimmen at dtc.ch