similar to: AD LDAP for auth, NIS for uid?

I'm wondering if it's possible to get samba to auth against LDAP without saving multiple hashes in the directory? I'd like to keep it to the hash that we use to auth unix-systems today, without cluttering the directory with other hashes that need to be synchronized etc. -- Odd Rune

Greetings! I tried to post this question to openldap group but somehow my post never showed up there. Anyway, I built PDC using Samba3 and OPENLDAP and now like to integrade NIS service to it. I searched the net there are quite a few guides on how to replace NIS with LDAP. However, in our environment, we have almost all sorts of Unix platforms, e.g. Linux (mainly Redhat), Solaris, HPUX, AIX,

Hi, I have both linux and solaris NIS client against a Solaris NIS Server, but my linux box are shamefully slow compare to solaris some sample: on Solaris 5.8: # ypwhich transporter02.domain.com # time id userid uid=36923(userid) gid=36923(u_036923) real 0.0 user 0.0 sys 0.0 on Linux: [root at linux]# ypwhich transporter02.domain.com [root at amsdc2-n-s04taw root]# time

Hello from the Military-Industrial Complex! We're a large defense contractor located in East Hartford, CT, USA. US export laws make us 'kind of' concerned about who gets in here and what they can access. We've got a problem with some of the groups that we have in our NIS database. Everyone who logs into our Sun system is assigned to one of several groups for export-control

I have created an AD domain controller using the following guide: wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller I am seeking to setup a domain member using the following guide: wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member I have opted to use idmap_ad using the following guide: wiki.samba.org/index.php/Idmap_config_ad All of the kerberos and DNS tests

Okay, I'm at wit's end, and am about ready to give up on Samba 3.x as a way to implement single sign-on. I would like to know if there's anyone out there who has the following environment: - Solaris 8 and 9, running NIS (not NIS+) for automount and passwd/group maps - W2K-based Active Directory I'm trying to get Solaris authentication to work using AD user accounts. According to

Hello, I have been working to migrate away from my failing NT PDC to Samba (3.0.23d) on a Solaris 8 server running NIS. Passwords, etc.. are kept in /etc/yp/passwd, and the passwd command is used to change passwords (not yppasswd). I have used the vampire command to migrate all user accounts from the NT machine, while Samba acts as the BDC. This appears to work correctly, and output from

Hello listmates, We are currently running NIS for authentication but would like to migrate to LDAP. Thing is, though, that some of the machines that authenticate via NIS are so old I'd rather not even touch them. Hence the question - is there a good way to have an NIS server for user authentication that is a mirror image of an LDAP server, with a proviso that an update introduced there is

Hi, I've tried "smbldap-migrate-unix-accounts" to migrate NIS account into LDAP. It is a great tool. There is no problem if he/she authenticate from Linux machine with his old NIS account. But I found that I need to run smbldap-passwd to give a new passwd so that he/she can authenticate from windows machine. Does anyone has a better solution about it? Thanks a lot. I really

I am working in an environment with an HP-UX NIS that my Red Hat ES 4.x system is using for Unix access controls. My Red Hat system is serving as an NFS server for the HP-UX users who also could be Windows users coming from a Windows Server 2003 active directory. I have tested some configurations of SAMBA using winbind, but I don't get the results I want. What happens when using winbind

Hi list Does anyone know about a good howto setup nis and to make ad see it and use the usernames? Regards Per Qvindesland E-mail: per at norhex.com [1] http://www.linkedin.com/in/perqvindesland [2] Links: ------ [1] http://webmail.norhex.com/# [2] http://www.linkedin.com/in/perqvindesland -------------- next part -------------- An HTML attachment was scrubbed... URL:

For those who are new or forget - I have a RHEL 5 Server and a few dualboot XP w/SP2 and CentOS 5 systems. The Linux machines were installed straight of CD/DVD, no patches. I was initially going to try a single sign-on to the RH 5 box via LDAP, but RH says it simply isn't possible and I don't know my way around LDAP other than it is a database and exists. So, option 2 is to simply

Samba Admins: This is my second post on this matter so my apologies for redundant requests for help. My first request yielded only one response which did not solve my current problem. Background: We have been using Samba on Linux (Redhat) for several years to access shares on Sun servers. The Sun environment uses NIS/NFS for user accounts and sharing (mounting) remote file systems. Accessing

I have a strange problem on OS X server. I start the rsync daemon manually using su rsync --daemon (or sudo rsync --daemon) and it works for a while. But eventually, when people try to connect, they get an "invalid uid" error. The uid is the once specified in the profile in rsyncd.conf . If I kill the daemon process (kill -9) then restart it, it all works again. Anyone else run

The company where I work is mostly a Windows shop, but I run a few CentOS servers and desktops. I have configured my systems as follows with Kickstart: authconfig --enablemd5 --passalgo=sha512 --enablenis --nisdomain=XXX \ --nisserver=nis1.XXX.com,nis2.XXX.com --useshadow --enablekrb5 \ --krb5realm=XXX.COM --krb5kdc=ldap.XXX.com --krb5adminserver=ldap.XXX.com The /etc/nsswitch.conf file

I am trying to configure NIS, PAM, & LDAP on a CentOS 6.2 host. I've previously installed a similar configuration on RHEL4, but CentOS now uses nss-pam-ldapd and nslcd instead of nss_ldap, so the configurations are a little different. Currently, local users and groups are showing up but not LDAP users. When I do a /getent passwd/ and/getent group/ I don't get LDAP users. When I do

Hello! I've got users that access linux file server from Win stations using Samba and winbind authentication but also have AIX based workstations accessing the same server using nis authentication. They have the same username registered in NIS domain and in Windows domain. Is it possible to map winbind users (usually using uid & gid > 10000) to nis users, so user john

There are two NT domains, the resource domain (pretend it's RESDOM) and the user domain (MASDOM) where RESDOM trusts MASDOM. My Samber server (COOL) is registered in the RESDOM domain. I can do smbclient -L COOL -U MASDOM/myname and it asks for a password and displays the shares correctly, even picking up the NIS logon share. The problems start, however, when I want to connect to the myname

I am using either DOMAIN or ADS for authentication and am trying to understand how UID/GID mapping rules are triggered. This[1] seems to suggest that if I do not specify the idmap uid/gid parameters in smb.conf, then authenticated usernames are mapped to "local" user accounts having the same name. If, however, I _do_ specify idmap uid/gid then one of the idmap_* allocator modules is

Hello Brett, On Thu, Feb 26, 2015 at 6:10 PM, Brett Wynkoop <wynkoop+samba at wynn.com> wrote: > > Where does your "Wisdom" about no UID below 1000 come from? > I would guess it comes from distros (mostly the Linux ones) staticly assigning UID and GIDs to certain services to make the package managers job easier. But if your existing system has userids below that number,