similar to: Problem with Everyone SID (S-1-1-0)

Please help. I've been searching for days, trying nearly everything I can find that seems relevant, but I can't get this working. I am able to create users, login to Windows systems joined to the SAMBA domain as those users, but filesystem ACLs on Windows Domain Member Servers do not work which I suspect is due to my IDMAP OU is empty. wbinfo -u returns "Error looking up domain

Hi, I'm currently using v3.0.24 in production and all works well. I'm testing 3.0.25 to see if I'm going to have any problems with it if I have to upgrade. I have a problem with the "force group" setting if it is set to a local Unix group. This same setting works fine in 3.0.24 but I'm denied access to the same share in 3.0.25. If I comment off the "force

Hi all, When moving between Samba 3.0.X revisions, I have been able to copy the secrets.tdb file and the trust relationships with foreign domains remain established. However, this does not appear to work when moving directly from 3.0.X to the 3.3.X branch. Is there a tool available that allows us to migrate - or can tdbdump (or similar) be used to dump out data from the 3.0.X format and then be

Hello everyone! We've got a Samba domain that trusts another Samba domain and a Windows Server 2008 domain. We recently upgraded both Samba DCs from 3.0.x to 3.4.3 After that, whenever a user logs on a workstation in the trusting domain with an account from one of the trusted domains, he gets this message: Your Password expires today. Do you want to change it? Of course, the password

Hello, Recently I've had a chance to test samba 3.0.23c on debian etch (unstable) with LDAP as PDC. I found two problems, however I'd like to describe the second one: 1) I added users to LDAP so I could connect and I was able to authorize myself in samba via LDAP 2) I added my computer to LDAP but didn't check the SambaSID for my machine - in fact it was different than sambaSID

Greetings! I've got a Debian server running Samba that has a rather odd problem I was hoping someone out there could help with. Whenever a particular user is referenced, either in in smbd or pdbedit, a segfault or security context stack overflow is generated. Here is what I have tried to fix the problem: Used tdbbackup on all the *.tdb files I could find and replaced the current ones

Hi there, I have another problem on WinXP SP2 with samba.3.0.20a. Somehow, in a random situation, once user logged onto the workstations, they were prompted with the winlogon.exe Fatal error + blue screen to death then self-reboot. When I checked out the log from windows, it said there's problem on msgina.dll from WinXP SP2. However, another user can successfully logon to the same workstation

Hi folks, I'm using Samba 3beta running on RH 8.0 and I'd like to authentificate against a Microsoft AD. This all works very well, except to the fact that not ALL AD Users are mapped to my Unixbox! When starting getent passwd, my UnixBox shows just my User from passwd and some of the AD User - not all!! Looking through my User with the command wbinfo -u all AD users are shown correctly!

hi i'm working with samba3.0rc2 no probs but i have i question concerning id-mapping i authenticate all users with ldap, works but i always need a samba user in ldap, with sid sid S-1-5-21-1042031166-387543594-2118856591-501 if i don't have it, i get an error during logon with winxp, that the domain controller could not be found or i have a non-existent account, which is not correct

Hi folks, I'm using Samba 3beta running on RH 8.0 and I'd like to authentificate against a Microsoft AD. This all works very well, except that not all AD User are mapped to my Unixbox! When starting getent passwd, my UnixBox shoiws just my User from passwd and some of the AD User - not all!! Looking through my User with the command wbinfo -u all AD user are shown correctly! Anybody

Hi * I encounter severe problems with changing ACL settings in Samba 3.0.2a after migrating users from NT PDC to LDAP-SAM. I did not find anything about this in the mailing list yet. However, I have no idea (if) what I am doing wrong here. Although I can hardly believe that I am the first one to trigger that bug, it looks like a problem with the sid_to_gid routine. So please take a look at that:

Hi, on a customer system samba/winbindd is used for windows and unix authentication. I just tuned searches of the ldap backend to speedup by factor 20-200 and slapd now doesn't seem to be the bottleneck anymore. Don't know how well the windows authentication now works, since this is presently done by the heartbeat failover server. However, simply starting 'mc' as root makes

Hi, I'm specifically have a problem with idmap entries not being created in my LDAP backend for trusted domain logons - Local accounts appear to be fine. I have installed the Sernet enterprise packages from: http://ftp.sernet.de/pub/samba/experimental/rhel/5/i386/ I'm preparing the server as follows: 1. smbpasswd -w '<password>' 2. net rpc trustdom establish SANDBOX

CentOS 3.5 samba3-3.0.20a-24 Security ADS I can't get windows group permissions on shares to work except for 'domain users'. The windows group I am trying to use is Unix.Samba. This group does not exist on the linux box. It resolves correctly using getent group and when I chgrp files to unix.samba, ls shows the group ownership as Unix.Samba. getent group shows this group with the

Hi, i am trying to map the domain administrator to root using the smbusers file in order to be able to set file permissions from windows. Unfortunately, while the map itself seem to succeed, the logins fails. If i remove the relevant line in smbusers, login succeed but i lack superuser privileges. Here is log.smbd while trying to map administrator to root [2008/07/09 12:50:42, 4]

On Fri, 29 Mar 2019 09:30:13 -0400 "Thomas, David via samba" <samba at lists.samba.org> wrote: > I have a Centos 7.6 server with samba 4.8.3  configured as a member > of an AD domain using "ads' security and the "nss" idmap backend. > > Clients are unable to access the shares on the server - they > repeatedly get asked for their credentials. >

I was wondering if anyone knows if there are any plans to fix Bug #1139 (reproduced below) in version 3.0.3. I haven't tried 3.0.3pre1 yet, but from what I read of the changes it doesn't look like this bug has been addressed. Is there some other work around? This bug is quite annoying as some of our users/administrators would like to use Windows to modify ACLs and we recently

I have a Centos 7.6 server with samba 4.8.3  configured as a member of an AD domain using "ads' security and the "nss" idmap backend. Clients are unable to access the shares on the server - they repeatedly get asked for their credentials. The smbd log shows the user authenticating and a mapping from the user's SID to their unix uid is found. However, it seems that

Ok, this one is driving me nuts. I am using smbk5pwd to sync samba, ldap, and heimdal kerberos passwords. I have the overlay working if called from the ldappasswd command. However, if I set "ldap passwd sync = only", I get no joy from Samba. It does a series of searches, but doesn't send any kind of password update request to the server. If I use ldap passwd sync = yes, then

We've updated from 3.0.24 to 3.0.25 and we've noticed some minor problems such as some clients had to reboot in order to mount the share. And the log is now showing this warning all the time: WARNING: Winbindd not running, mapping ids with legacy code [2007/05/17 08:57:37, 2] passdb/lookup_sid.c:sid_to_gid(1435) We are thinking to revert to the previous version 3.0.24 which works