similar to: Winbindd

With a smb.conf like the following where does samba store the UID to GID mappings? Is there a way to view this? Also can't I use a method that converts SIDs to UIDs and GIDs on a consistent basis? Thanks Mark #======================= Global Settings ===================================== [global] workgroup = XXX server string = Samba Server security = ads encrypt passwords

I am trying to get the rid back end to work for samba so that the UID and GID are predictable. Here is my smb.conf file. Anyone see any problems with this? When I use the default of tdb it maps UID just fine but this config is not working. Thanks Mark [global] workgroup = XXXX server string = Samba Server security = ads encrypt passwords = yes realm = XXX.XXX.EDU

So I have idmap:rid working. The problem is I can set only the same shell for all users. I was trying to find a way to store the shell in AD. I have found a couple references to ||RFC2307. Can this be used with AD and if so is there a good article on it somewhere? (I looked through the samba docs but didn't find anythings yet perhaps I am just blind) Thanks for any help. Mark --

I have a Solaris 10 box running samba. I have it joined to a windows 2003 domain. I can authenticate to the samba server. However I am not getting group informaiton. I have in nsswith.conf I have passwd: files winbind group: files winbind winbindd is running libnss_windbind.so and so.1 are in /usr/lib when I run wbinfo -u or -g it returns users and groups from AD. When I do a

I am trying to join a samba server and have the keytab file set. After joining there was no keytab file so I ran the command: /usr/sfw/sbin/net ads keytab add host -d 10 This was the result: [2007/12/04 21:40:09, 5] lib/debug.c:(391) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0

I have a problem that deals with correlating wind velocity to seed collection data. The problem lies in that I have a wind data set that is contains 2000+ data points and weed collection data on the order of a couple hundred. Both data sets were collected for the same time period, but there is not a one-to-one wind velocity->seed location match. My understanding of correlation is that you

Hello, I encountered a problem when trying to send an email to multiple recipients. === LOG === ... cut ... Jul 3 12:34:57 dhcp90 dovecot: lmtp(24106): Debug: none: root=, index=, control=, inbox= Jul 3 12:34:57 dhcp90 dovecot: lmtp(24106): Connect from local Jul 3 12:34:57 dhcp90 dovecot: lmtp(24106): Debug: Loading modules from directory: /usr/lib64/dovecot Jul 3 12:34:57 dhcp90

Dear All, Would like some know the answer on the above question. What is the different between compiling using internal heimdal library vs mit-krb5. I'm on gentoo and thus like other distro having issue on the system-wide mit-krb and removing it is not that convenient (But still possible) I've try to compile samba 4.1.2 with internal heimdal library to work as a Domain controller But

Hello, After spending sometime trying to generate histograms of all the numeric variables in a data frame using a for loop, I realized I could use apply to create the histograms. This was one of those few moments when I `see' the alternative to looping. So, I can generate all the histograms with this command: apply(toblo.df[,-c(40,52)],2,hist) # 40 and 52 are ID's When I do this, the

Hi all, I was hoping to setup a realm trust between a Samba AD domain and a kerberos realm running mit-krb5, however it looks like that isn't currently supported. Is that correct, or am I missing something (I'm running Samba 4.9.4)? Having noticed that "samba-tool domain trust" only seems to cater for trusts involving other AD domains, I tried to workaround that (in the

Robert Schetterer wrote: > Alex Persson wrote: >> Robert Schetterer wrote: >>> Alex Persson wrote: >>>> After upgrading from Ubuntu 16.04 to 18.04 printing via SMB-Kerberos no longer works (printing still works in 18.04 when I print via SMB but I don't want to have the password stored in clear text in /usr/lib/cups/backend/smb). >>>> >>>>

Hi all I am trying to get windows AD logins to work with Fedora 8/9 linux.I had the same setup working well with fedora 7 , but with fedora 8/9 the problem is whenever I do "getent passwd 'username'" the login shell is listed as /bin/false and users cannot login , even though I have set it to use template shell= /bin/bash in the smb.conf configuration file. Also I have made

BSD/OS 4.2 comes with OpenSSH 2.1.1p4, patched to support BSDI's authentication library. However, BSDI's patches have several problems: 1. They don't run the approval phase, so they can allow users to login who aren't supposed to be able to. 2. They don't patch configure to automatically detect the BSDI auth system, so they're not ready to use in a general portable

Hello all, When I try to compile the mod_webauth module on CentOS 5, the dependencies for Kerberos fail. I have the Kerberos libs installed, which is what I assume it's complaining about. Ideas? Is there an RPM missing? Here's some of what I found: [root at localhost webauth-3.5.4]# ./configure checking for gcc... gcc checking for C compiler default output file name... a.out

Hello. I'm installing new FreeBSD 6.2-RELEASE, based on intel machine. Firewall type is OPEN. I have Windows Server 2000 with Active Directory on it, working in Native mode. I've installed samba-3.0.23c_2,1 from /usr/ports/net/samba3 prefix=/usr/local without krb-1.5.1 being installed. Added: nmbd_enable="NO" smbd_enable="NO" winbindd_enable="YES" to

Jan, maybe I should check the /afs information that you pointed me at in a subsequent email first, but I wanted to update you on what happened following this path: I did get some mileage out of both of your suggestions below, but still did not make it through (now working with openssh-2.9p2): gcc -o ssh ssh.o sshconnect.o sshconnect1.o sshconnect2.o sshtty.o readconf.o clientloop.o -L.

There are three DCs in my Windows 2003 AD domain, but I have noticed that only one of them is referenced in my krb.conf and krb5.conf. Should there be a reference to one or two of the other domain controllers? If the DC goes down, how will my Samba/Winbind servers authenticate? -- Eric Robinson Disclaimer - February 27, 2011 This email and any files

Hi How to get rid of kerberos, or at least to prevent to go into path? Where is defined the path for users? I need to configure and use rtools (I know that I should use ssh, but I need rtools) and I think very annoying the messages from Kerberized rsh or rlogin, like this: -sh-3.2$ rsh kitten02 connect to address 192.168.89.2 port 543: Connection refused Trying krb4 rlogin... connect to

Hi there I'm still going round in circles trying to get winbindd authentication against a 2003 server working. I have what appears to be the same problem as: http://www.ssite.org/articles/view.aspx?class=2&articleid=2 There's something wrong with the SMB Packet signing on this machine. In parallel, I succcessfully built and have got working samba-devel on FreeBSD 5.1 against the

Hi, I am doing some kerberos testing with samba4 using ssh. I have setup samba4 using the howto at http://wiki.samba.org/index.php/Samba4/HOWTO and active directory seems to be working both with Windows and Linux clients. ssh unfortunately is not kerberos authenticating via GSSAPI. The client krb5.conf contains this: ===================================================== [libdefaults]