similar to: Samba+LDAP with real-time share permissions

Hi! I'm trying to convert my tdb-based idmap mapping to a LDAP-based one. This generally works as intended, with one exception - the highest uidNumber/gidNumber in use is not transferred, and this causes duplicate use of the same uid/gidNumber. Here's what I'm doing: 1) net idmap dump /var/cache/samba/winbindd_idmap.tdb > idmap.dump 2) Set idmap backend in smb.conf to

As some of you may know, I'm trying to set up Samba BDC on a disk- and fan-less tiny mipsel_CPU router running OpenWRT distribution. I already managed to compile Samba 3.0.21a and OpenLDAP 2.3.18 for it, and they seem to work fine. The problem is, this tiny distribution for routers doesn't seem to have anything like Name Service Switch (NSS), and relies solely on /etc/passwd and

Hi: I have Samba3.0.14a-Debian installed on a Debian (unstable) system After setting smb.conf to act as a domain logon I connected to the Samba server from a Windows XP client using my personal login and password. Samba was set to export HOMES as a share with this configuration: [homes] comment = User Homes path = /home/%u read only = No create mask = 0754

Is then new idmap_ad module capable of getting uid/gid info from a Windows 2003 AD pre-R2 with RFC2307 Unix Identity Mapping Extensions applied? Also, is the correct syntax for specifying the schema_mode as follows: idmap config dom.example.com:schema_mode = rfc2307 (I am not confident that I am reading the idmap_ad manpage and the new idmap document correctly.) Thanks for the help, Murthy

Hi, Please Help! My normal users are able to gain access to all home directories even though the group owner is Domain Admins. I have set the permissions to 770 while testing and the group to Domain Admin on all directories. I have a Server2003 AD Domain with a clustered RHEL5 samba server for the home directory. I am using samba 3.0.23 with Winbind and LDAP idmap backend. This server is

Hi all, I have noticed that if you create a share to path lets say \\dir1\dir2\dir3 And a user lets say u1 has full control on dir3 BUT no control at all on dir2 then user u1 cannot access the share. Is it right? We have a situation with clients who typically do the following: Create a share to the root of the file system and give only to administrator full control on for the root path

A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 255 bytes Desc: OpenPGP digital signature Url : http://lists.samba.org/archive/samba/attachments/20060525/a6a8d41f/signature.bin

Please provide me with an example on how to use this tool to change a uid of a user to what I want the uid to be. I am confused on what it thinks are keys. It has a keys command: key 11 bytes: UID 119989 key 44 bytes: S-1-5-21-54348060-1989963526-242692186-2277 key 44 bytes: S-1-5-21-54348060-1989963526-242692186-8749 key 45 bytes: S-1-5-21-54348060-1989963526-242692186-24986 But if I go

Hi, I am setting up a samba server where i intend to store audio files. Since they require quite a lot of disk space i thought of compressing them in the flac audio format. The thing is that flac is not supported in many programs we use here. So here are my questions: 1.) Is it possible to configure samba to display .flac files as .wav? 2.) Is it possible to convert the .flac files to wav on the

Hi, I have just started to turn my Linux boxes over to use winbind for authentication and ldap based idmap backend servers (open-ldap). As far as I understand the documentation (for version 3.0.23c) it is only possible to specify one ldap server, mine config line looks like: idmap backend = ldap:ldap://idmap.xelerated.com I did try to map the idmap.xelerated.com entry in DNS to two

Hi, I have a domain using LDAP backend, and recently we've managed to establish a trust relation with another domain in our network, which uses a pure NT4 server. After that, some accounts from the trusted domain started being created in our base. The user created doesn't have the same attributes as a valid user (he doesn't have sambaSamAccount, for example). But for auditing

So what happend with the ldap filters? Is a feature that will come back some time in the future? Or I must keep using an old version? I have an ldap tree with 3 companies and i can't allow that people from one company is able to login in the other domain! I don't have pam. What can I do? Tnxs in advance.

Hi all, I am doing some research on Samba+OpenLDAP (+DHCP+DNS) with the intention of getting rid of the Micro$oft licenses necessary to maintain the Server products from such company. One of the aims I have is to demonstrate other people in my company that an open source alternative can work as well as (or even better than) a propietary solution. At the moment, I am getting desperated trying to

Folks, Maybe it's me, or my systems, but I've found that idmap restore simply doesn't work under samba-3.0.25rc3. When I try to import the idmap.dump file I create from one of my older systems into a fresh 3.0.25rc3 installation, I get a huge stream of errors along the line of "could not set mapping of (UID|GID) to sid xxxxx". This happened whether I was using

Dear users, I have uploaded the new 3.0.25a packages compiled for sarge. At the same time I have removed older 2.2.x and 3.0.x packages for Woody. Support for back porting packages to Woody was already discontinued, but older packages were still provided. As these packages were not updated after the recent security issues, I decided to remove them to avoid pushing people to use outdated and

Hi, I tried to configure the new idmap interface. Currently without much success. I have two samba domains, trusting each other. Each PDC using it's own LDAP server. I tried idmap domains = DOM1, DOM2 idmap config DOM1:default = yes idmap config DOM1:backend = ldap idmap config DOM1:ldap_base_dn = ou=Idmap,dc=dom1,dc=mydomain,dc=de idmap config

Hi, we are running into a problem that winbindd sometimes caches negative entries into its tdb database. We are still investigating the reason for that. However, another question, when winbindd caches an entry into its tdb database, is there any timeout for those tdb entries? While walking through the code I don't see any relation between winbindd_cache.c and idmap_tdb.c. Is winbindd_cache.c

I just want to warn people that want to use the new hashing algorithm for mangled names. And that note should also be put in the man page IMO. You must understand that changing the hashing algorithm on a production server may have unwanted side effects (this is why we maintain by default hash and not hash2 and why it was not back ported to 2.2 initially). Windows clients may save all around

Hi, are there any known problems with Debian's Samba version 3.0.14a-3sarge1 ? I read about client/server connection problems. Are there any reasons, why not to use 3.0.14a-3sarge1 version or should I go to Version 3.0.22-0bpo1 from backports.org? Thanks, Marcus

Need some assistance on the below information - please let me know if this is not the right group for this to go to. Thanks, Lisa Gates Systems Administration Engineer ----- Forwarded by Lisa G Gates/Harland Clarke/Email on 12/11/2014 09:53 AM ----- From: Simo Sorce <idra at samba.org> To: <Lisa.Gates at harlandclarke.com>, Cc: <cifs-protocol at