similar to: IDMAP: migrating from a single PDC to a PDC and some Member Servers

Hi, My doubt is about Idmap + LDAP + winbind, related do BDC + PDC. We are using Samba 3.0.33 (Slackware 12.0.0). Our layout is almost like this one http://us1.samba.org/samba/docs/man/Samba-Guide/images/chap6-net.png, but we have more BLDGn than this example. Actually, we are taking ideas from http://us1.samba.org/samba/docs/man/Samba-Guide/happy.html and from

Hello all, We have Samba (2.2.5) running on three servers, each in a different subnet. One of them is a PDC (domain master = yes). The Samba PDC is also the NIS master. The smbpasswd is replicated using rsync to the other machines that act as Samba BDCs (domain master = no). They are also NIS slave servers. The smbpasswd synchronization takes place automatically every time smbpasswd is updated,

Hi everyone, last week I took a look at a samba3 PDC server with some performance issues. The samba3 PDC has an ldap backend and has nss_ldap configured properly. It has also interdomain trust so it has nss_winbind configured too, so in /etc/nsswitch.conf there is : passwd: compat ldap winbind group: compat ldap winbind This setup has some performance issues on the nss_ldap part of the

Is this Samba 3 or Samba 4? If samba 3, which ldap server are you using> What is the mail server? Does the mail server have its own LDAP server included it or is also using an external LDAP server. If you want replication between LDAP servers, they should be the same type of LDAP server (e.g. OpenLDAP or Apache Directory Server or Oracle Directory Server.) If you have one

I was wondering what the best practice is for setting up several SAMBA servers in a SAMBA domain all on the same LAN. Here is what I am looking at PDC: LDAP, Samba, nss_ldap, pam_ldap Member1: Samba, nss_ldap, pam_ldap Member2: Samba, nss_ldap, pam_ldap Member . . . . Should I set the member servers up with: Security = domain and join the severs with net rpc join or, whould it be better to set

> -----Original Message----- > From: Andrew Bartlett [mailto:abartlet@samba.org] > > passdb backend = ldapsam:"ldaps://ldap1 ldaps://ldap2" > is what you want. This helped me a little bit forward. I suggest to add this line also to samba-pdc help. But still I ran into problems. I fixed the passdb lines on PDC and BDC. If the second server (on PDC slave-ldap and on BDC

Hi all - sorry for the off-topic posting - just that the list of consultants on the samba site is horrendously out of date! I thought that this would be the best place for me to find suitable resources... firstly I would like to say thanks a million to all the samba team for your ongoing efforts and great product. I just wish I had more time to experiment with it! We have the startings of a good

Hello everyone I hope this is the right place to post this question. I have all but eliminated all Microsoft servers in my current work environment, expect two boxes, which are our PDC and BDC, they also are the DNS, Dial in With Rocket Port Card, DHCP, Winslookup servers. I would like to remove these NT boxes and replace them with a nice shiny new Linux box running Samba. Reading some of

* distro: ubuntu breezy ( 6.06 ) * samba version: shipped version with updates ( 3.0.22-1ubuntu3.1 ) * no ssl * openLDAP is running on the same machine as samba, and referenced as localhost/127.0.0.1 where applicable ( 2.2.26-5ubuntu2.1 ) * nscd is not installed, much less running I've set up a samba pdc with ldap by following the Samba Guide very closely, adapting it to Ubuntu/Debian where

Hello=20all, =20=20I=20am=20wondering=20if=20anyone=20successfully=20built=20samba=20PDC=20= on mahine=20A=20and=20used=20LDAP=20on=20machine=20B=20for=20authentication? =20=20Because=20now=20before=20creating=20a=20samba=20account,=20one=20must create=20an=20unit=20account,=20right? =20=20My=20goal=20is=20as=20follows:

Hello, I want to use samba v3.3.x to implement an NT4/Win2k style domain: a samba PDC and a samba BDC, using ldapsam for the 'passdb backend'. I plan to use RedHat Directory Server v8.2 as the ldap server. I'm trying to sort out how user/group management and nss will work. I'm confused about how/when the samba-supplied ldap schema is used (I mean the schema that's in the

We are running with a little over 100GB of office data, and about 200GB misc other data shared to approximately 50 users using samba across two servers acting as PDC and BDC to Windows 2000 & XP Pro clients. Also using roaming profiles and ldap backend inclusive of nss_ldap and pam_ldap for the unix side - works well except for the more recent and horribly crippling MS Office bug. Tried

I'm trying to decommission our PDC which is running on some older hardware and migrate it's functionality to one of our two currently operating BDCs for the domain. The three servers have nearly identical configurations with only differences in file and printer shares and a couple attributes like "wins support" and "domain master". They all have identical netlogon

I've been unsuccessfully trying to get nss_ldap to work. I've chased down hundreds of google searches over the last 3 days, and I can't seem to get a centos system to authenticate against ldap. Every daemon on the system is running into the same problem: nss_ldap: could not search LDAP server - Server is unavailable sshd, nscd, httpd, you name it.. slapd is clearly running, telnet

I've seen several references on the web to setting up the LDAP SAM to communicate with the LDAP server via ldapi (IPC) verses ldap (IP). This should theoretically much faster. My LDAP master is on the same host as the Samba PDC. With nss_ldap using "uri ldap://localhost" and Samba using "ldapsam:ldap://localhost/" everything works. But changing nss_ldap to use

Thanks to everyone who has tried to help so far. Not quite there but I think I'm close. For anyone new, it's a private 2 comp network (RH9 and WXP) so I just want the simplest guest access possible. This is my current smb.conf file: [global] workgroup = SAMBA encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd security = share null

Please!!! does anyone know what's going on? I?really need to solve this problem and don't know how and didn't find bug report that matched with my description. ? ----- Original Message?----- From?: Gonzalo Britti [mailto:gonzalo.britti@idea-factory.net] Sent?: S?bado, 11 de Septiembre de 2004 04:24 p.m. To?: 'samba@lists.samba.org' Subject?: Samba(PDC) - LDAP problem only with

Again, another confusing issue in two how-to's I'm trying to resolve. In the SBE (samba-3 by example) Pg 161 in the PDF states. (It's actually page 200 of the PDF, but 161 of the numbered document pages.) "The name service caching daemon (nscd) is a primary cause of difficulties with name resolution, particularly where winbind is used." But the Authconfig in the IDEALX

hi, until now (about 1 year ago) i was working only with samba3+ldap PDC, but in near future my company enlarge his network with 6 new branchs spreaded all oever the country and i must build a scalable network with Samba-3 PDCs and BDCs, implement LDAP replication and multiple LDAP backends, all this over some VPNs(ipsec) . so, can tell me anyone how work the relationship beetwen a samba3-ldap

Hi, I've finally gotten my LDAP password backend up and running, and finally figured out the SID 1000/1001 thing for Samba admin. However I'm unable to join the workstation to my domain. Using any random user in the WXP dialogue, I get the "Access is Denied" error. Fair enough. Using the user with sambasid and sambagroupsid s-*-1000/s-*-1001, I get the error "The Username