similar to: Groups not showing in Win2K Control Panel "Users and Passwords"

Hi Folks, A couple of questions about making SMB (3 or 4) authenticate to an external (anonymous) LDAP server: 1) A typical LDAP user record is below. Is there anything lacking in this record that would prevent Samba from authenticating against our LDAP server? Note the sambaSID is as is, gobblygook info: dsAttrTypeNative:eduPersonAffiliation: Employee Member dsAttrTypeNative:givenName: David

> Le 13 sept. 2019 ? 09:29, Gerben Wierda via dovecot <dovecot at dovecot.org> a ?crit : > > Nobody? > >> On 10 Sep 2019, at 11:58, Gerben Wierda via dovecot <dovecot at dovecot.org <mailto:dovecot at dovecot.org>> wrote: >> >> I am new to dovecot administration. I?ve read the Wiki but that hasn?t given me the understanding I need. >>

I am new to dovecot administration. I?ve read the Wiki but that hasn?t given me the understanding I need. When I query my LDAP (on macOS) on a value for user ?gerben?, I can get that: dumbledore:~ gerben$ dscl /LDAPv3/127.0.0.1 -read /users/gerben GeneratedUID GeneratedUID: 780D870E-6B00-478E-AB70-3D3307215A82 I would like to use that value in dovecot settings, e.g. something like user_attrs =

I groupapped the domadmins group in linux to ntgroup="Domain Admins" but instead of mapping to the SID number ending in 512 it's creating a new SID number endind in 2025 mapped to domadmins... Does anybody knows why??? It worked in the previous server. This is the command I execute net groupmap add ntgroup="Domain Admins" unixgroup=domadmin If I use the rid=512 option I

Hello List, we have installed samba Version 3.0.20-0.1-SUSE. when I'm entering > net getlocalsid I get > SID for domain <netbios name> is: S-1-5-21-4166838278-3756557259-2095403906 entering > net getlocalsid <domain name> returns > SID for domain <domain name> is: S-1-5-21-2018781741-1218799122-1862565094 Does this mean that the pdc itself is not in the domain

Hi, I have the following situation concerning group mapping: when I enter > net getlocalsid I get > SID for domain PDC is: S-1-5-21-4166838278-3756557259-2095403906 when I enter > net getlocalsid DOMAIN I get >SID for domain DOMAIN is: S-1-5-21-2018781741-1218799122-1862565094 The group mapping shows > net groupmap list > Domain Users

Hey all, I have a functioning Samba server in my test lab. All of my must-haves are met. My problem really boils down to a minor nuisance. Basically, when I log the test users in and open My Documents I only see one folder: My Music. Not that I really care but curiosity is killing me here and I can't figure out why the My Pictures folder is not present also. On top of that users love

Hi, I am in the process of migrating our windows workstations to a samba domain. Here is the problem: When creating the domain user I put every user additionalyy in the domain admin group so that he/she can copy his old files on the local profile to his new domain account. Then after this is done I put them to the domain users group but some (!) of the user the lose then access to the

Hi ! I'm using samba-3.0RC3 as a PDC (for testing). I'm using the ldap backend. I created 1 user, 1 computer and some groups. I mapped the unix groups domainadmins to "Domain admins" with my_personnal_sid-512. I added my user to domainadmins. I set "admin users = @domainadmins" in my smb.conf, but I still do not have domain admin rights on workstations :( Any idea

I've been testing DFS roots and I'm finding that while Vista and 2008 Server clients can connect with no problems, Windows XP Pro and 2003 Server clients fail. This seems like it's the wrong way round - Samba usually has more difficulties with recent Windows versions than older ones - but I can only assume that there's some registry/policy change between the versions. If anybody

Hi, We have a os x server here with duplicate groupmappings unfortunately the net groupmap functions are broken due to apple modifications. Can I manually delete the groupmapping from the database? I assumed the group mappings were stored in ldap but can't find any reference there. The group_mapping tdb also seems empty so asides rom looking at the source I am at a loss. Many thanks Paddy

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I cannot find anything in the documentation or mailing list that addresses this oddity. I've installed Samba Version 3.4.7 on Ubuntu Server 10.04, and I'm utterly confused by samba's behavior regarding permissions. Users on the server have home directories in /home/chemgroup/username. (chemgroup is actually a symlink to another

Cups 1.2.7 Debian Etch with Samba 3.0.24 Clients: WinXP SP3 (with Firewall completely off for testing) When I define a printer specifically in smb.conf, they show up as shared printers in WinXP. But when I follow the normal way (see below) to load all from cups they don't. I followed mainly the latest SAMBA-HOWTO (chapter 21-22) The only error I see in log.smbd when accessing the

Hey all, I'm coloring outside the lines a little bit here but I would like to automate the install of a samba pdc. Within that script to install I would like to assign rights to a group. Here is an example of a few steps: # Create Unix group: groupadd domadmins # Map unix group to samba groups: net groupmap add ntgroup="Domain Admins" unixgroup=domadmins rid=512 type=d # Assign

I have the following setup: PDC: Samba 3.0.37 on Solaris 10 BDC1: Samba 3.0.37 on Solaris 10 BDC2: Samba 3.4.3 on Solaris 10 Samba 3.0.37 is the bundled version of Samba. Samba 3.4.3 is compiled from source. BDC2 is a recent addition to the network. All machine use LDAP as the backend for everything. They use winbind to handle a domain trust with another domain, but otherwise

I seem to be having a bit of a brain fade with regard to permissions in samba. I have a share with several folders owned by different groups: drwxrws--- 13 root accounts 4.0K Jun 7 12:12 Accounts drwxrws--- 16 ian accounts 4.0K Jun 7 11:24 Administration drwxrws--- 14 accounts users 4.0K Apr 22 12:05 Downloads drwxrwsr-x 7 ian users 4.0K Mar 22 13:51

Follow up to original post. If I created local groups and users in /etc/passwd & /etc/groups I get farther along. For instance, if I have a Samba PDC with LDAP basically like I listed in my post. If I browse from a w2k pro box to the samba server without the workstation having joined the domain, I can authenticate to the samba server with a user who is not in /etc/passwd but is in LDAP. So

Thanks for the reply, Besides the problem with source4/lib/messaging/messaging_handlers.c, Good to hear that selftest is actively used, then do I understand it right that 'make test' should succeed? My bigger problem is that it failed with lots of errors. This must be a problem with my build, then, but since this is a fresh tarball I am a bit puzzled. I would appreciate some hint on

Hello guys! I'm using samba 3.2.4 (binaries from samba.org) on SLES9+sp3. I am building a PDC with LDAP support (i am attaching my config files), I'm also using ldapsam:trusted and ldapsam:editposix. Although I am setting the account lock after 3 failed tries in usrmgr, and verified that the parameters are actually set in the LDAP, no locking occurs. I started thinking that it was my

> On 13 Sep 2019, at 11:51, Jean-Daniel Dupas <jddupas at xooloo.com> wrote: > > > >> Le 13 sept. 2019 ? 09:29, Gerben Wierda via dovecot <dovecot at dovecot.org <mailto:dovecot at dovecot.org>> a ?crit : >> >> Nobody? >> >>> On 10 Sep 2019, at 11:58, Gerben Wierda via dovecot <dovecot at dovecot.org <mailto:dovecot at