similar to: Change in group membership behavior?

Hi All, I am using samba-common-3.0.10-1.4E.9 on a RHEL4_U4 x86 machine. The ADS server is WS03 sp1 running in Windows Server 2003 interim mode. In general thing are working well. However, when winbind caching is enabled (default), group membership does not appear to update, i.e. "wbinfo -r bob" and "groups bob" don't reflect changes in ADS group membership.

I've been playing with joining RHEL4 (CentOS) machines to a Win2k3 Active Directory. I've got everything pretty well squared away, except that the linux box never seems to see changes to users' group memberships. For example, I created a user, testuser, who initially just a member of Domain Users. I logged into the linux box with testuser successfully and both 'id' and

I've set up the following and can open a home share for me (sylveg). I've created a group on W2KADS and on OURSAMBALINUX called oadmin and added me as a member in both. I created a samba share called o_drive (see smb.conf below) w/ the linux dir /home/o_drive and valid users = %D+oadmnin. The /home dir is: drwxr-xr-x 2 root root 4096 2004-09-03 15:16 ftp/ drwx------ 2 root root

I'm using Samba 3.0.33 (RHEL 5) to connect to a Windows 2008 active directory server. I am restricting SSH logins to a particular AD group. The users allowed to login will change frequently, so it's important to me that their group membership is updated when their access to this server is granted or revoked. The problem that I keep running into is that group membership on the

On Tue, 27 Nov 2018 16:39:41 -0200 Marcio Vogel Merlone dos Santos via samba <samba at lists.samba.org> wrote: > Hi, > > I have a samba 4.7 AD DC running on a Ubuntu 18.04 server with distro > packages. I update a user with a new group and this new membership is > not reflected on that user. On example below, I can successfully add > the user "test.account" to

On Wed, 28 Nov 2018 08:48:07 -0200 Marcio Vogel Merlone dos Santos via samba <samba at lists.samba.org> wrote: > Hi Rowland, > > Those tests were made on DC (araucaria), not a domain member. > > root at araucaria:~# testparm /etc/samba/smb.conf > Load smb config files from /etc/samba/smb.conf > rlimit_max: increasing rlimit_max (1024) to minimum Windows limit >

On Wed, 28 Nov 2018 10:12:39 -0200 Marcio Vogel Merlone dos Santos via samba <samba at lists.samba.org> wrote: > Hi Rowland, thank you for your prompt reply, > > I sent you the testparam output hence lots of defaults (i presumed > would be better), here is crude smb.conf: > > root at araucaria:~# cat /etc/samba/smb.conf > [global] >     netbios name = ARAUCARIA

Hello, This is my first post to this list so if I break any rules be gentle :) I will try to put in as much detail into this as I can, here I go: We have a domain at work with Samba (samba-3.0.10-1.fc2) as the PDC. The Linux box is running FC2 as the rpm suggests running on a 2.6.5-1.358smp kernel. The problems that we exhibit is that unless you have your domain account made a member of the

Hi, I'm attempting to make a Samba 3.0.10 fileserver become a domain member of a Samba 3.0.7 server which is running as a PDC. I'm using the instructions gained from here... http://samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html#id2538809 ...but when running the command... net rpc join -S PDCNAME -UAdministrator%password I get the error... Create of workstation

Hi Rowland, thank you for your prompt reply, I sent you the testparam output hence lots of defaults (i presumed would be better), here is crude smb.conf: root at araucaria:~# cat /etc/samba/smb.conf [global]     netbios name = ARAUCARIA     realm = AD.TLD     server role = active directory domain controller     workgroup = A1     server services = -dns     ldap server require strong auth

Hi, I have a samba 4.7 AD DC running on a Ubuntu 18.04 server with distro packages. I update a user with a new group and this new membership is not reflected on that user. On example below, I can successfully add the user "test.account" to group "test", but not my user "marcio.merlone": root at araucaria:~# id test.account uid=30214(A1\test.account)

Hi, I'm using the "ChrootDirectory" option for the sshd daemon to jail my ssh users. Additionally, I'm using the "Match group" option to only jail people belonging to a specific active directory group. Here are the relevant lines of the sshd_config file: LogLevel Debug3 Subsystem sftp internal-sftp Match group sftpusers ChrootDirectory /my/chroot/home ForceCommand

Hi Rowland, Those tests were made on DC (araucaria), not a domain member. root at araucaria:~# testparm /etc/samba/smb.conf Load smb config files from /etc/samba/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[netlogon]" Processing section "[sysvol]" Loaded services file OK. Server role: ROLE_ACTIVE_DIRECTORY_DC Press

Send CentOS-announce mailing list submissions to centos-announce at centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request at centos.org You can reach the person managing the list at centos-announce-owner at centos.org When

Send CentOS-announce mailing list submissions to centos-announce at centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request at centos.org You can reach the person managing the list at centos-announce-owner at centos.org When

Send CentOS-announce mailing list submissions to centos-announce at centos.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.centos.org/mailman/listinfo/centos-announce or, via email, send a message with subject or body 'help' to centos-announce-request at centos.org You can reach the person managing the list at centos-announce-owner at centos.org When

I've been following the forums on this subject. I am still having problems implimenting this at my site. I am trying to replace a Novell 5 file server doing single server signon(workstation manager) with a linux/samba server and a W2K ADS server. I tried this with slackware 10.0, samba 3.0.10, MIT krb5 v 3.1 5, openldap-2.1.22 and got it pretty close (could login wihtout password) but had

I planned using ifmember.exe from Windows 2000 resource kit to map the right drive-mappings to the right shares with logon-scripts. Unfortunately it seems as ifmember simply doesnt report the right groups for the users. Even tho "id user1" shows the right groups; "uid=2082(user1) gid=1002(Group1)roups=1002(Group1),545(Users),1000(Group0)", User is a member of group

We've seen Samba crash and burn twice in the last 48 hours - it just started happening, and we have no idea what might be causing it. I'm hoping that someone will recognize this problem. Platform: we are running RedHat Enterprise Server, with Samba 3.0.7. We're using security=domain in an old-style NT4 domain environment. The symptom that we're seeing is that the number of

I am installing smb 3.5 on a CentOS 6.2 host using smbldap-tools. I've previously installed a similar configuration on RHEL4 using smb 3.0 but CentOS now uses nss-pam-ldapd and nslcd instead of nss_ldap, so the configurations cannot be moved straight across. When I do a listing of a share directory that should have user and group ownership determined by LDAP, I get the uidNumbers and