similar to: Problem with ADS idmap backend

I have a Centos 3 server running Samba 3.0.28. It's a member of an AD domain on a Windows Server 2003 R2 Standard x64 SP2 box. From the W2K3 server I can see the samba share I created. Using the Security tab in the Windows Explorer file properties dialog I can add and remove users and change their permissions. However, in the Permissions tab of the Advanced Security Settings dialog,

Hi Guys, Just need some guidance regarding AD across sites. We have two sites, siteA and siteB. Until about a month ago both sites were running NT4 domains, separate domains but with the same names, let's say thedomain. We classicupgrades siteA to AD and now need to migrate siteB to AD. The sites are connected with a WAN link We think ,the steps involved will be the following -

I think somebody had a similar problem (also on Solaris), but that thread seemed to die. I've compiled (with Sun Studio cc) and installed samba-3.2.1 on a Solaris 10 x64 box, which is a member of a (Windows Server 2003 controlled) domain. I previously had samba 3.0.28a running on the same machine without any problems. Now winbindd is eating up all of the CPU (on the CPU it's assigned

I am experiencing an odd problem while attempting to mount and access a directory with smbfs. smbclient does not exhibit the same behavior. I have created a directory /mnt/smb-test and am attempting to mount a volume from a NetApp Filer running OnTap 7 with NTFS security mode. An Active Directory DC handles security for the share. The Linux machine shows as registered in AD and I can use

My objective is also to run headless virtual machines through libvirt library. I am using an Ubuntu 10.04 distro and libvirt 0.9.2. Before asking you guys about it, I searched on the web and found this: Hi, > > thanks for your hint. > > I read the lines in the documentation, but unfortunately editing the xml > > within virsh lead to the errors. > > The Solution to a

# wbinfo -Y S-1-5-11 Could not convert sid S-1-5-11 to gid # wbinfo -Y S-1-5-13 Could not convert sid S-1-5-13 to gid (S-1-5-11 are the Authenticated Users, S-1-5-13 are the Terminal Server Users.) This bug was finally solved in release 3.023d. Now it is back again. How can I get this working? I'm using idmap/tdb - would another idmap-module solve this issue? The winbind log looks like

Hi, I'm trying to use doveadm backup but I'm having a few issues. When trying locally: `doveadm backup -D -A maildir:/usr/local/backup` It results that no mailbox is separated by user - all seems to sync on the same folder, messing up with the folder structure of the original maildir. When trying remotely: `doveadm backup -D -A -N ssh -i mykey root at myremotebackup.com:/backup

Mandi! L.P.H. van Belle via samba In chel di` si favelave... > Full qouta search list : > https://bugzilla.samba.org/buglist.cgi?quicksearch=quota&list_id=25312 I don't think it's a samba bug! Simply i'm pointing out that disabling 'winbind enum' can lead to some 'glitches', mostnotably 'getent passwd' return no domin users (by design) and

I would like some clarification on Winbind's capabilities. I have winbind up and fully functional. I can use wbinfo -g, wbinfo -u, etc.. I would like to use winbind to correlate sids to uid on filesystems mounted with smbfs or cifs. In reading further I see lots of information about doing this on EXT3 (or Linux filesystems that support ACL). Perhaps, I had misunderstood the purpose of

Dear samba list, For some time we've had servers connecting to a w2k3 r2 server via ADS setup. Wins was working fine and users were able to authenticate. Recently we've added a GFS like system. This required getting the UID/GID's unified. Suggestions were made on the samba IRC channel to install SFU on the PDC. I'm receiving some very strange output. Usernames/pwd have

Hi, We recently upgraded some AD member file servers from 4.6.7 to 4.6.11. Since then, "getent group" has been failing to return groups properly after winbind's been running for a couple of days. We have a lot of entries in log.wb-<DOMAIN> like this: [2017/12/15 11:39:47.959368,  1] ../source3/winbindd/winbindd_ads.c:1236(lookup_groupmem)   lsa_lookupsids call failed

On 06/06/2019 12:00, Praveen Ghimire via samba wrote: > Hi Guys, > > Just need some guidance regarding AD across sites. We have two sites, siteA and siteB. Until about a month ago both sites were running NT4 domains, separate domains but with the same names, let's say thedomain. We classicupgrades siteA to AD and now need to migrate siteB to AD. > > The sites are connected with

Hi Rowland, Let?s say due to number of machines involved, it is not practical to drop them off the NT4 domain all at once. We are thinking are two possible options - VLAN the ports and only allow certain machines to talk to serverb - Or use the host deny and host allow in smb.conf, example Host allow 10.10.10.5 Host deny 10.10.10.0 Preferably the second one Other questions If we have bind9

IDAMP cache somehow ends up with an unmapped SID2UID entry (i.e value = -1) and the SID2GID entry expires. At this stage winbindd returns unmapped for a SID-to-UNIX-IDs request. This results in smbd giving incorrect group memberships and incorrect resource access, until the SID2UID entry expires. This is surely a bug? Samba version is 3.6.6 as bundled with our current Solaris 10 patch revision

Hi, After lots of struggle and rtfm I finally got most things running, except for 'nmblookup' and 'net getlocalsid' on the BDC. I'm not new to Samba, but plenty more to learn. Here's the setup in summary: system pdc is the PDC on subnet 192.168.0.0, running SuSE10.1, LDAP master, wins server, domain master browser, no iptables; system bdc is the BDC on subnet 192.168.2.0,

Hi. I was cloning a domain and now I can't boot the original nor the clone domain. Currently when I start one of those domains I can see only a blank screen. I am not sure what went wrong cloning. I was trying to use kpart to mount the new image and change info in the filesystem like hostname, ip and so. Anyway when I start the new or old domain: # virsh start --console thedomain

I was able to build Samba 3.0.x under Solaris 10 using the Sun Studio compiler (cc) and the Solaris ld (/usr/ccs/bin/ld) that it uses. Trying to build Samba 3.2.0, however, I immediately run into a problem where the build process assumes the linker understands "--version-script", which is specific to the GNU linker: Linking shared library bin/libtalloc.so /usr/ccs/bin/ld: illegal

Hi, As said below, I am trying to use doveadm backup. I made some progress, but I think I misunderstand some of the basic principles behind the command. My main issue is: when using the -A flag, is there a way to create the backup user on the remote server if it doesn't exist there? Another related question: if backing up on another location on the same computer, using -A doesn't

> On 15 Jul 2019, at 18:11, Trever L. Adams via dovecot <dovecot at dovecot.org <https://dovecot.org/mailman/listinfo/dovecot>> wrote: > >/So, one of the problems I am seeing is that people are trying to fake />/users into revealing information by sending from an outside domain but />/with an internal reply to address and claiming to be administration, IT />/or what

I'm hoping somebody can point me to the right documentation for setting up the following scenario. Earlier this year I had Samba 3.0.28a working as a member server of a (Windows Server 2003) AD domain, using Solaris 10 and Heimdal Kerberos. I was able to log into the server using AD accounts, getent passwd worked, etc. I was using "secruity=ads" with these settings (among other):