similar to: idmap backend questions

for you information: because I use security=user, I don't have kerberos enabled on my samba server Hello I have some questions regarding the idmap backend. Does this only work when you've have joined your samba server to the AD domain (security = ADS)? I would like to map SID to uids/gids on a samba server that has a trust with an AD server. In my setup I have established a trust

hi all, i'm not expert with Samba integration into domain. I did setup many servers acting with local auth that were running very fine. We've a Windows 2008 acting as Domain controller. So to not create more login/password to users, i decided to authenticate using Active Directory. The shares work, but sometimes users failed to access. The server is running Debian stable Lennny. The

Has anyone else gotten samba functioning with idmap_ad and multiple domains? In our environment we have a domain with two child domains. There is one child domain for students, and another for faculty staff. Our servers are joined to the student domain, but need to be able to enumerate users in the staff domain. When attempting to lookup a user (wbinfo -i 'NAU\car3') that only exists

I am having a strange problem that I thought someone might be help resolve. I am using Samba 3.4.7 at the moment, but I've had the same issue with Samba 3.4.6 and Samba 3.5.2. NOTE: Domain, hostnames, usernames and SIDs have been changed to protect the guilty. I am seeing an unable to successfully execute a variety of lookups from wbinfo and I think this is the underlying cause of some

Hello list users, I have been struggling with this combination in the subject field couple of days now, so I decided to ask for some advice here. Hopefully someone can point me to a right direction. The ultimate goal for me is to authenticate users using AD, so that the UID/GID values configured for users with SFU would also be in use in all our Linux machines. My understanding is that using

Hi all, I have done a fair bit of searching of the mailing list archives, google and the manual, but have not had any luck as yet. I apologize for the length of this e-mail, but I thought it was better to provide what I could right off the bat instead of waiting to be asked for it. I am having the following oddity with a new samba server: I have it configured to talk to an

Hi Problems with wbinfo this time. With -u/-g/-n it works, but -i doesn't. The log.winbindd-idmap is filled with this: [2010/01/28 10:32:56, 4] libsmb/namequery_dc.c:73(ads_dc_name) ads_dc_name: domain=* [2010/01/28 10:32:56, 3] libsmb/namequery.c:1972(get_dc_list) get_dc_list: preferred server list: ", *" [2010/01/28 10:32:56, 3] libads/dns.c:343(dns_send_req)

For our Linux Machines (SLES 10) we are using kerberos and LDAP to authenticate against Active Directory (works perfectly) Please note that the same configuration works with Windows 2003 Server, the problem is with with Windows 2008 Server However we are experiencing problems with winbind for the file share, I see in the "log.winbind-idmap" logfile the following errors [2011/03/03

Hello all, I have an interesting situation that I'm trying to get working. At this point, I'm not sure if it's possible to do what I want with my configuration. I will start by explaining my situation. I have a primarily windows network in my organization. I also have quite a few UNIX systems as build servers. All these systems share 1 file server (currently a Netapp, but I am moving

Hi! I can Join, wbinfo -u etc works but getent passwd doesnt... I think the problem is: get this error: 'get_dc_list: preferred server list: ", *"' but why does it not know my domain? (already joined) Can someone help? Greetz Conf: #GLOBAL PARAMETERS [global] workgroup = CHAOS realm = chaos.local password server = beelzebub.chaos.local preferred master = no

I can configure UidNumer and gidNumber attributes by Microsoft RSAT tool and the value is stored. When I click again on the tab "Unix Attributes" appears a message saying "Not is possible the execution". I click OK button and the attribute is correct. Why appear this message? How can I verify if the NIS service is working correctly? Regards, Márcio

Hi, I have two Windows Domains, DOMA and DOMB. A Samba 3.6 Server is a member server in DOMA. DOMA has a (unidirectional) trust relationship to DOMB. Users from DOMB should be able to connect and authenticate at the Samba server. The domain controller of DOMB has the IP 10.35.5.25. During authentication of a DOMB user at a share I get the following log entries: get_dc_list: preferred server

Hey Folks, i am trying to get Dovecot LDA to work with Active Directory dovecot --version 1.2.9 While using Postfix to deliver mail, dovecot does only imap-Services, passdb is auth bind and userdb is static. NOW i want to use Sieve Scripts. So LDA of dovecot is required. So userdb lookup is required. With use of virtual Mailboxes i have a working postfix setup, which needs to be transferred

Dear i have connected Samba 3.5.6 with an Active Directory 2008 R2 When i try to get the uid number of an Active Directory user on the linux box: ********************************************* root at bdc2:~# id angelique id: angelique : utilisateur inexistant (means non existent user) ********************************************* The winbindd debug claim NT_STATUS_OBJECT_NAME_NOT_FOUND and

Hello all, I'm having a problem with Winbind resolving some users from AD on a W2KSP4 server running SFU 3.5 [8.0.1969.1]. All users and groups in the AD domain have been assigned UIDs and GIDs via SFU. The Linux fileserver is running CentOS 5.3 with Samba 3.0.33-3.7.el5. The fileserver has been joined to the domain using authconfig with proper modifications made to nsswitch and pam.

Hi, I have a problem with the combo of CentOS 5.5, the latest Samba Packages from Sernet and our Active Directory. Samba Packages installed: samba3-cifsmount-3.5.8-43.el5 samba3-client-3.5.8-43.el5 samba3-3.5.8-43.el5 samba3-utils-3.5.8-43.el5 samba3-winbind-32bit-3.5.8-43.el5 samba3-winbind-3.5.8-43.el5 When I try to get all users or groups via getent command, only local

Dear samba list, For some time we've had servers connecting to a w2k3 r2 server via ADS setup. Wins was working fine and users were able to authenticate. Recently we've added a GFS like system. This required getting the UID/GID's unified. Suggestions were made on the samba IRC channel to install SFU on the PDC. I'm receiving some very strange output. Usernames/pwd have

Hi everyone, I know this one has been addressed before. I have had so much trouble getting the IDEALX scripts to work that I set about writing my own and they almost work. The trouble is with the add machine script. The first time I do the join, I get an access denied error message on WinXP. I have verified that an entry for the machine was successfully created in ldap. Then, I try again

I have setup dovecot to allow users to login using their email address or uid and have found a strange behaviour when the user logs in using the email address for a "username". I am using OpenLDAP for a backend data store with a rather customized schema. This behaviour occurs for both POP3 and IMAP logins. For some users it works as expected, but for others the pass_attrs->user

Sorry about that I typed and sent a full message, but it looks like the entire body got swallowed up in transit. Here is the full text again. Let's hope this one works. I have a server running CentOS 7.9 with the system provided Samba packages (4.10.16-24.el7_9). It is joined to an Active Directory domain and acting as a member server. The active Directory domain has a user object with among