similar to: configure for rfc2307

Howdy all, I was wondering if there was a known bug with the everyone acl. When looking at the security tab on windows the everyone acl has the read permission. If I unselect it to give everyone no permission and hit apply, read becomes checked again. If I select deny everyone read, then a warning pops up saying this will deny read for all users and it does. If after that I give read to another

On Tue, 4 Oct 2016 16:09:40 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 04.10.2016 um 15:43 schrieb Rowland Penny via samba: > > On Tue, 4 Oct 2016 15:16:17 +0200 > > Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > >> > >> Am 04.10.2016 um 10:21 schrieb Rowland Penny: > >>> On

Hi, In winbind, are there any plans to add the idmap_ad options "unix_primary_group" and "unix_nss_info" to the idmap_rfc2307 backend? I am using an ldap proxy to preserve the UNIX uids and gids between two domains, and it would be nice to also share the shell setting and the UNIX primary group as well.

I'm running samba 3.0.24 (the latest package that seems to be available for Ubuntu 7). I have a Windows 2003 AD with the R2/RFC2307 schema loaded. I would prefer to use the 3.0.24 package if possible unless there is an ubuntu package for 3.0.25. Any suggestions would be appreciated. Wbinfo -u and -g appear to work great. Net ads testjoin comes back successful. In log.winbindd-idmap I get

We have a situation where we have two domains that can authenticate users. One for students, one for faculty/staff, both with rfc2307 attributes. Winbind does lookups properly to the domain that samba is joined to, but claims it cannot lookup sids in the other domain. There is an explicit trust relationship, and wbinfo -g and -u can see the users just fine. However, getent passwd still can

Hi, As with the last few releases, compiling on solaris requires that I edit the Makefile and remove instances of "-z text" Also, once compiling and installing, it seems unable to start: ld.so.1: smbd: fatal: libtalloc.so: open failed: No such file or directory Killed ld.so.1: nmbd: fatal: libtalloc.so: open failed: No such file or directory Killed This is fixed by adding

Hello Samba Users, After going through a lot of hassles, i have ended up coming mentioned below samba configuration. But it is still far from a working stage. wbinfo -t, -u and -g works. But wbinfo -i works on few nodes but doesn't work on few resulting in error "Could not get info for user <username>" Strange part is that i could see these messages

I'm on Solaris 9 sparc. Current versions are: gcc 3.4.6 (sunfreeware pkg) MIT krb5-1.6.3 (source) openldap-2.4.11 (compiled with --with-tls and --enable-crypto) samba-3.2.2 db-4.2.52.NC (sunfreeware pkg) No compiler env vars set, except CC is set to CC=/usr/local/bin/gcc I'm invoking configure as follows: ./configure --with-ads --with-windbind --with-krb5=/usr/local --with-ldap

Hello, After provisioning a domain (with rfc2307 attributes), what are the next steps to enable S4 winbind to use these attributes? I have one server configured to get user info from AD via LDAP, and with the proper mappings, getent passwd reports the uid, gid, shell, etc that I have specified in AD. However, when using winbind for authentication, getent passwd reports incorrect (generated?)

On Tue, 4 Oct 2016 02:35:21 +0200 Achim Gottinger via samba <samba at lists.samba.org> wrote: > > > Am 03.10.2016 um 18:57 schrieb Rob via samba: > > Hi all, > > > > I've been experiencing an intermittent problem where some UIDs on a > > member server spontaneously change from being their AD-derived > > values to being allocated from the default

Hello, I just set up a samba server (version 2:4.1.13+dfsg-4) on Debian 7.7, being a member server of a Win2k8-Domain (before that, that server was an old SuSE (10.4)-Samba with own user-management (standalone-server). I would like to use winbind with the idmap backend "ad" or "rfc2307" instead. When using rfc2307 (like in my conf specified), I can do successfully: wbinfo

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Release Announcements ===================== This is the first preview release of Samba 3.3.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Major enhancements in Samba 3.3.0 include:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Release Announcements ===================== This is the first preview release of Samba 3.3.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Major enhancements in Samba 3.3.0 include:

> On 25 Jul 2016, at 16:39, Rowland penny <rpenny at samba.org> wrote: > > On 25/07/16 16:02, Kevin Davidson wrote: >> Having problems with rfc2307 user ids. This was working briefly and now it’s not. >> >> samba and winbind v 2.4.2.10+dfs >> >> […] >> What have I done wrong? >> > > You haven't done anything wrong. > >

On our campus, we have an AD forest. Our particular department has a number of samba servers that authenticate to one tree of that AD forest. All of our users have accounts in LDAP for unix and AD for windows. We don't want/need winbind for authentication. However, we would like the ability of setting ACLs on the samba server from windows clients. So, I assume I need a mapping of unix

Hi, We recently updated our domain to 2008R2 servers from 2000. I know the services for unix changed from the proprietary setup in 2000 to rfc2307 compliant around 2003 R2 I've updated samba to 3.5.4 (apparently most earlier versions don't play well with the changes in AD), and gotten things essentially working. The problem is users created since the old 2000 servers have been

Thank you Rowland for looking at it. I did read the wiki here https://wiki.samba.org/index.php/Idmap_config_ad that is how I got as far as I did; that and the idmap_ad man page. I could not find how to use the loginShell is there a variable I can use for it in the template or an option to set to use it? loginShell and unixHomedir are not mentioned on the wiki that I could find. I'm good with

Hi all, I would like to try to start up a conversation about the "proper" handling of usernames by samba/winbind. I know our current active directory setup is not really considered supported via samba and I would like to know if the samba developers think this might change, or if there are any recommendations for my issues. *** Since this came out rather long, here is a quick

On 2015-11-08 at 20:34 +0100, buhorojo wrote: > On 07/11/15 19:57, Michael Adam wrote: > >On 2015-11-07 at 17:47 +0000, Jonathan Hunter wrote: > >>On 7 November 2015 at 17:01, Michael Adam <obnox at samba.org> wrote: > >>>Also, for all I know, the DC always has local unix user and group > >>>IDs, and does NOT use the rfc2307 attributes for this.

Hi all, I've just installed Samba 4.3.6 on Debian jessie amd64 (as described in the wiki [1]) and everything seems to work properly except for rfc2307 data that winbind doesn't retrieve from AD backend, shell is always "/bin/false", homedir is always "/home/DOMAIN/username" and "getent passwd" also lists user without unix attributes. I have configured idmap_ad