similar to: squid + samba error

Hello, I have been using samba to authenticate my squid users to Active Directory. Because of the amount of users, I would like to set up my ACL's based on groups, rather than individual user accounts. I have successfully joined my samba box to our windows domain (2k). For some reason I had to enter the domain controller name instead of the domain name when doing so. I am now having issues

A problem On the integrate Samba and AD 2k3 .. the page is my reference http://www.infosecwriters.com/text_resources/pdf/AD_and_Linux_TMunn.pdf i wnat to use users group for squid' wbinfo_group.pl use auth... now i can join the samba server to AD domain but i can't read user's group.. can any one tell me what is happend.. like this [root@wxyz-dns1 samba]# wbinfo -u

Hi All, I'm having issues getting Samba/Winbind to work with a domain that is lowercase. I have read on some sites that it won't work, is this the case? system is Debian lenny, samba 3.2.5-4. Windows server is 2003 running AD in 2000 native mode. I've done everything I would normally do that my running samba/ad authing servers do, and wbinfo -u + wbinfo -g work fine, as do the

Hi All, I have the following problem: [2002/05/29 18:16:13, 0] smbd/posix_acls.c:create_canon_ace_lists(774) create_canon_ace_lists: unable to map SID S-1-5-21-2025429265-1580818891-682003330-1109 to uid or gid. in smb.conf I have: [global] winbind uid = 1000-2000 winbind gid = 1000-2000 winbind enum users = yes winbind enum groups = yes Any Idea?? Thanks, Christian DISCLAIMER: This

Hello, I'm having trouble when I try do get a group SID from my domain, the user lookup and authentication is working fine. Actually what I'm trying to do is to authenticate squid against MS AD using winbind. I need to restrict access by group, so I'm using wbinfo_group.pl to do it. The machine has been built to be a proxy server only. I'm using Suse Linux 9.3 Professional

I am suddenly no longer able to see any existing files on one of my shares, from my Windows clients. I have a Linux server (Fedora Core 8) which used to be my firewall and router as well as file and print server. There are two Samba shares on it I have mounted on various Windows clients: my home directory and a multimedia directory with my music and videos, etc. I mount the former as H: on all my

We also have been using samba 2 and 3 for years with ldap idmap. This occurs whether I use sernet 3.3.7 rpms or build my own from samba.org3.3.7 tgz. I increased logging and here is what I get in log.winbindd-idmap. [root at niairphome2 ~]# tail -f /var/log/samba/log.winbindd-idmap [2009/08/03 10:46:24, 3] lib/module.c:do_smb_load_module(48) Error loading module

After the join is attempted I am returned the following Could not initialise lsa pipe error looking up rid for user user$: NT_STATUS_NONE_MAPPED Unable to join domain xxxx. Running on freebsd 9.0 with samba-3.4.17 I haven't seen much in the logs. Everything was working fine before a reboot LEGAL NOTICE This email and any files transmitted with it are confidential and intended solely for

Please excuse my ignorance: I have been running Samba for a little time, and I've very little experience with it. I'm running Samba 3.0.37 on FreeBSD 7.2/amd64, configured as member server of a domain whose PDC is a Samba 3.0.25b-apple (the default Samba instance running on a Mac OS X 10.5.8). The member server is sharing a couple of folders for 5 users (most of whom are using Mac OS

Hello list, I am using Samba + winbind and I have some users that cannot access shares on this server, getting the following error in '/var/log/samba': [2011/12/30 09:33:08.072315, 1] smbd/sesssetup.c:454(reply_spnego_kerberos) Username GALILEU-F\teste is invalid on this system Also, in 'winbind-idmap' log file I am getting this: [2011/12/30 09:32:56.902810, 1]

I have problems with SID to UID mapping using winbind on a FreeBSD 5.2/Samba 3.0.4 as a member server of a Win2k domain controller. I use heimdal-0.6.1 for kerberos. I would like my XP machines in the domain to use the share with the user accounts defined in Active Directory. At a first glance it seems to work: the connection to the share succeeds without a prompt for a password. Users may

Hello all, after migration from 3.0.26a to 3.4.2 we get lots of the following messages in our winbind-idmap logfile. Has anybody seen this before? [2009/11/10 10:51:14, 0] winbindd/idmap.c:201(smb_register_idmap_alloc) idmap_alloc module ldap already registered! [2009/11/10 10:51:14, 0] winbindd/idmap.c:201(smb_register_idmap_alloc) idmap_alloc module tdb already registered! [2009/11/10

# wbinfo -Y S-1-5-11 Could not convert sid S-1-5-11 to gid # wbinfo -Y S-1-5-13 Could not convert sid S-1-5-13 to gid (S-1-5-11 are the Authenticated Users, S-1-5-13 are the Terminal Server Users.) This bug was finally solved in release 3.023d. Now it is back again. How can I get this working? I'm using idmap/tdb - would another idmap-module solve this issue? The winbind log looks like

Please help. I've been searching for days, trying nearly everything I can find that seems relevant, but I can't get this working. I am able to create users, login to Windows systems joined to the SAMBA domain as those users, but filesystem ACLs on Windows Domain Member Servers do not work which I suspect is due to my IDMAP OU is empty. wbinfo -u returns "Error looking up domain

Hello. I´m using an ftp server in passive mode using ports 30000-50000 and i have a question: how i can limit bandwidth using shorewall for multiple ports? It´s possible? Can someone send me an example? Thanks Wilson ------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated

Hello all! I have on my network a PDC running w2k with active directory. On this machine i have: nic 1: internet (valid ip) nic 2: hub 1 -> 10.1.1.1 nic 2: hub 2 -> 11.1.1.1 my wins server is running in 10.1.1.1 on pdc. i applied SP3 and all windows updates corrections. on my linux machine i have: kernel: 2.4.19 - samba 2.2.7 - squid 2.5S1 nic 1: internet (valid ip) nic 2: hub 1 ->

Hi everybody, I have joined 3 of my 40 samba fileservers on my active directory domain. And today I have a weird error message while I am trying to join another fileserver. Error message is the following : # tail -f /var/log/samba/log.winbindd-idmap [2010/07/16 13:26:02, 1] winbindd/idmap.c:idmap_init(385) Initializing idmap domains [2010/07/16 13:27:47, 1]

I can get authentication to work on linux 7.1 with samba 3.0alpha15 if I make valid users = @"INS+Domain Users", but if I try to set valid users to just a single user: valid users = INS+DavidSha, it fails to give me access. I see the following in log.winbindd. It looks like it is looking for a domain called DavidSha?!? My winbindd separator is +. Can somebody please respond to this.

hello! any help me with winbind. i need to use samba/winbind just only to provide autentication with ntlm for squid. programs versions: linux rh 8.0 - squid 2.5S1 - samba 2.2.6 remember: the use of samba/winbind is only to provide autentication for squid with ntlm. MY smb.conf workgroup = CENTROADM password server = PMF security = domain winbind uid = 10000-20000 winbind gid = 10000-20000

Hello. when i type smbpasswd -j centroadm fetch_domain_sid: machine PMF rejected the tconX on the IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. Failed to get domain SID. Unable to join domain CENTROADM. i have 3 nic on linux box an 3 on w2k pdc. what is the problem??? thanks WILSON This is my smb.conf [global] workgroup = centroadm password server = pmf security = domain winbind uid =