similar to: Winbind & AD group membership caching

On Fri, 20 Oct 2017 15:02:45 +0200 Giuseppe Ravasio via samba <samba at lists.samba.org> wrote: > Hi, > we are testing a new AD domain that will replace our old NT4 one, and > we are setting up a new cifs vserver of our Netapp filer (running > Clustered Dataontap 9.2). > > The new AD domain was a clean deployment created using "samba-tool > domain provision

Hi, we are testing a new AD domain that will replace our old NT4 one, and we are setting up a new cifs vserver of our Netapp filer (running Clustered Dataontap 9.2). The new AD domain was a clean deployment created using "samba-tool domain provision --server-role=dc --use-rfc2307 ...". All seems to work well and the Netapp filer joins the domain without errors and seems to run fine.

Hi, I'm using the "ChrootDirectory" option for the sshd daemon to jail my ssh users. Additionally, I'm using the "Match group" option to only jail people belonging to a specific active directory group. Here are the relevant lines of the sshd_config file: LogLevel Debug3 Subsystem sftp internal-sftp Match group sftpusers ChrootDirectory /my/chroot/home ForceCommand

On Fri, 01 Jun 2018 11:53:55 +0200 Kristian via samba <samba at lists.samba.org> wrote: > Folks; > > using samba+winbindd+pam+nsswitch to make several Linux servers > authenticate against an AD domain, I do have my setup mostly working > now: > > - AD users are able to ssh into the machine. > - wbinfo -g / -u does list all domain users. > - getent group / getent

On Fri, 01 Jun 2018 13:13:21 +0200 Kristian via samba <samba at lists.samba.org> wrote: > Hi Rowland; > > Am Freitag, den 01.06.2018, 11:42 +0100 schrieb Rowland Penny via > samba: > > > > OK, how are you running the Unix domain members ? > > Are you using the 'ad' or the 'rid' winbind backend ? > > If you are using the 'ad'

Hi Rowland; thanks for your comment. Am Freitag, den 01.06.2018, 11:05 +0100 schrieb Rowland Penny via samba: > > Have the users logged in ? If not, then this is the expected > behaviour. > The users have logged in several times using ssh; does that suffice? As far as I can tell right now, it *looks* like this is computed just exactly once and never updated. Did a quick check

Hi Rowland; Am Freitag, den 01.06.2018, 11:42 +0100 schrieb Rowland Penny via samba: > > OK, how are you running the Unix domain members ? > Are you using the 'ad' or the 'rid' winbind backend ? > If you are using the 'ad' backend, have you given the groups a > gidNumber ? > Hmm, I only have these statements relating to winbind and idmap in my

Folks; using samba+winbindd+pam+nsswitch to make several Linux servers authenticate against an AD domain, I do have my setup mostly working now: - AD users are able to ssh into the machine. - wbinfo -g / -u does list all domain users. - getent group / getent passwd does list Unix and AD users. However, after changing some users group memberships in AD, I didn't manage to propagate this

Hi All, I am using samba-common-3.0.10-1.4E.9 on a RHEL4_U4 x86 machine. The ADS server is WS03 sp1 running in Windows Server 2003 interim mode. In general thing are working well. However, when winbind caching is enabled (default), group membership does not appear to update, i.e. "wbinfo -r bob" and "groups bob" don't reflect changes in ADS group membership.

hi all, A year ago I did a fundable project for a browsercam annual membership, that has renewed but not everyone who originally joined has paid me for the renewal, so I have 14 user slots available. If you would like a full-access "unlimited" membership to browsercam (with VNC which is really useful), contact me off list and I''ll give you instructions - it basically

I'm running Samba 3.0.9 on Fedora Core. I can authenticate against global groups via ntlm_auth, but authentication against local groups fails. Our network consists of multiple NT 4.0 domains. 1. Can ntlm_auth authenticate against local groups, or is it limited to global groups? 2. Can multiple global groups be designated as arguments to 'require-membership-of' in an 'OR'

Hi I have a data comprised of repeated measures of growth (5-15 records per individual) for 580 fish (similar to Orange dataset from nlme library). I would like to standardise these growth measures (yi – ŷ/sd) using mean and standard deviation unique to each fish. Can someone suggest a function that would help me do this? I’ve had a look at scale and sweep but can’t find a worked example that does

Hi, The latest samba from sernet was installed on a new CentOS server. ntlm_auth is implemented with pptpd. ntlm_auth always return success whenever group, username and password are correct. No matter the user is in the group or not. Is it a bug or I missed something? The following is detail of my settings and testing result from command line. OS: CentOS 6.4 Samba version:

Hi to everibody in the lists! I'm tryng to authenticate squid with ntlm_auth but I'm having problem using --require-membership-of" option. In regards of discussion in http://lists.samba.org/archive/samba/2004-September/092047.html I ask if problems are solved in 3.0.7-1 version or if I have to wait the next release to have authentication based on a certain group possible. Thank's

Dear all, I'm investigating on how to estimate a specific kind of cross- classified multilevel model. I think it is often referred to as a multiple-membership model. To problem is this: I want to study changing attitudes of people, for which I use (amongst other things) contextual data of the neighborhood they live in. I have two surveys (panel-design) and I know the neighborhood

Hello, There is FreeBSD-6.1 box with gcc 3.4.4 compiler (the default). The box is a member of an ADS domain. Everything was working perfectly with samba-3.0.22. After upgrading it to samba-3.0.23_1 from FreeBSD ports collection, the following problem appeared. The system does not seem to recognize that a user is a member of some domain group, and does not grant him appropriate permissions. For

Greeting all, Sorry, I previously send my message in a wrong topic. I have a strange problem between Samba and OPenLDAP. Here the version. Samba: 3.0.21 OpenLDAP: 2.2.28 Problem: My Windows user can login to the domaine by a Samba PDC, but when the user try to enter a sharing ressouces on the same server nothing append. This user have all the good permission. Solution: After some research

Is anyone aware of a R package that uses the Grade of Membership model for data? Thanks

Everyone, Today I was trying to find a way to list the members of one or more groups in a domain. There may be a built-in way to do it, but I didn't find it. After a half hour or so of looking, I figured I could write a Perl script much quicker. So I did and thought I'd share it in case anyone else might need it or find a use for it. The script determines group membership by the

Summary of problem: members of Active Directory groups cannot access Samba shares that their group membership should allow. I recently joined our Linux servers to our Windows 2003 domain using Samba/Winbind. The research and implementation were time-consuming, but the results made it all worthwhile. Unfortunately I am running into a problem relating to group membership on the domain as it