similar to: Samba PDC with groups in LDAP

Hi, When Samba is running as a PDC and a workstation is joined to the Domain, should the user logged into the workstation be able to see all the groups they are a member of using `ifmember /list`? Is the below output as expected? I'm I correct thinking that as all my groups originate in the Unix world, I don't need winbind to allow the Workstations to see them? For what

Hi All, I'm trying to add a user to a group using /usr/local/samba/bin/net rpc group addmem room11 dunk -Uroot%password The user is added to the group as far as I can tell but the command returns NT_STATUS_ACCESS_DENIED This is on Solaris 10 (Sparc) and Samba 3.2.1, OS and Samba are both configured to lookup users and groups in LDAP. /usr/local/samba/bin/net rpc group members

Hi everyone! I have (i think) a fully functional tls enabled samba ldap server. I used the documenation on www.idealx.org. I can make users and computers with smbldap-tools but i can't add Windows computers to the domain in the client end. smbldap-useradd -w w-eddie ldapsearch -x generates among other things: # w-eddie$, Computers, dbb.su.se dn:

Hi all! I'm very close to have a fully functional samba and openldap. Thanks to idealx.org. I just need to understand how it works. Everything works accept one thing. When I change TLSVerifyClient allow to TLSVerifyClient demand in slapd.conf and do: ldapsearch -x -ZZ -b 'dc=yourdomain,dc=com' '(objectclass=*)' -d 127 in the end I get: ldap_chkResponseList for msgid=2, all=1

I have a problem with one samba 3.0.24 pdc using ldap with nss etc, sharing works fine, but ownership and the security tab seems crippled, and usrmgr.exe complains about "the specified local group does not exist" (of course without saying which group) so I dived in to check I found filters like this one below in the ldap log - is that to support nested groups? There are no groups with

Hi, I just upgraded one of our samba BDC's (with LDAP back end on solaris 10) from 3.0.23c to 3.0.26a and can no longer mount shares. The error message I'm seeing in the samba logs is [2007/11/15 14:15:26, 1] auth/auth_sam.c:sam_account_ok(172) sam_account_ok: Account for user 'dbb' password must change!. [2007/11/15 14:15:26, 3]

Hi! I know this should be asked to the Openldap mailing list but: I?m trying to set up a Samba/ldap environment were the Samba server is separated from the ldap server. Everything seams to work on the ldap server and when I do a ldapsearch like this: ldapsearch -H ldap://l1.dbb.su.se/ -b dc=dbb,dc=su,dc=se ?x Everything works on both. But when I do: ldapsearch -H ldaps://l1.dbb.su.se/ -b

Hi! -I've separated samba-3.0.2a and openldap-2.1 on two computers with Slackware 9.1 -smbldap_populate.pl genertated all standard groups and the Administrator account -The ldap seams to work now ldapsearch -H ldap://l1.dbb.su.se/ -b dc=dbb,dc=su,dc=se -x ldap_bind: Confidentiality required (13) additional info: TLS confidentiality required -This is like it should be since the server

> I just upgraded one of our samba BDC's (with LDAP back end on > solaris 10) from 3.0.23c to > 3.0.26a and can no longer mount shares. > > The error message I'm seeing in the samba logs is > > [2007/11/15 14:15:26, 1] auth/auth_sam.c:sam_account_ok(172) > sam_account_ok: Account for user 'dbb' password must change!. > [2007/11/15 14:15:26, 3]

Hi, I'm using omindex to index files and I want make query with user/group boolean prefix (I*, I at ... and I#...). That work well with "other" and "group" right, but not in all case for "user" right. Here is an example: assume that we have an user "ftp" not in "users" group. If file right are: -rw-r------ 1 ftp users 13 2013-10-06

Hello, Thank you for your response. I need to install RankTail package since it contains the beta binomial distribution, CDF and inverse CDF in the usual form which I need to use. However rmutil package contain unusual forms for these functions. So it is easier for me to deal with the forms are contained in RankTail. I tried to install bioconductor package, using the following commands but I

Hi All, Any thoughts on why, while everything seems ok at the OS level (getent , id -a ) Samba doesn't pickup any supplementary groups when Solaris is configured with 'group: files ldap' in nsswitch.conf and using it's own native nss_ldap.so.1 but does when using PADL's nss_ldap? Everything else is equal. Do they use/accept different calls or could it be an

dn: cn=Domain Admins,ou=groups,dc=mydomain objectClass: top objectClass: posixGroup objectClass: sambaGroupMapping gidNumber: 512 cn: Domain Admins description: Netbios Domain Administrators sambaSID: S-1-5-21-3936576374-1604348213-1812465911-512 sambaGroupType: 2 displayName: Domain Admins memberUid: root memberUid: sadmin dn: cn=Domain Users,ou=groups,dc=mydomain objectClass: top objectClass:

Hello! I'm running Samba 3.0.0 with Openldap 2.1.22. Samba is my PDC and I'm using ldapsam as backend. Nearly everythings works, but I have a public share [tmp] which should be accessible without authentication from all clients even if they are no domain members. I think, my share definition is o.k. in smb.conf but if I click on the Samba server symbol on a client (Microsoft Windows

Hi, I'm using Samba 2.2.4 with LDAP support (OpenLDAP 2.0.23), and with pam_ldap included in the rpm nss_ldap 1.86 from Redhat (I'm on Linux Redhat 7.2). All these things are working well (I use the same object SambaAcount under PosixAccount in order to authenticate all these things), but a problem appears when I'm trying to list all the accounts and groups from my Win2000

Hello all, I could not find anything in the discussion groups or documentation about using LDAP and Unix group mappings. The documentation states that in order to map unix groups to samba groups, you need to use the net group add command. However, I have an ldap backend and all my groups, that I care about are in LDAP. So I have a group called mainwdev. dn:

This is probably pretty simple. The following error appears in my logs since upgrading from version 2.2.8 to 3.0.1: [2003/12/25 14:44:09, 0] rpc_server/srv_util.c:get_domain_user_groups(372) get_domain_user_groups: primary gid of user [testuser] is not a Domain group! get_domain_user_groups: You should fix it, NT doesn't like that I'm guessing that my user's primary group

When I try to join the wks into samba domain using Administrator account I receive following in logfile: [2003/11/20 10:03:21, 2] rpc_server/srv_samr_nt.c:access_check_samr_object(93) _samr_open_domain: ACCESS DENIED (requested: 0x00000211) [2003/11/20 10:03:21, 2] rpc_server/srv_samr_nt.c:access_check_samr_function(115) _samr_create_user: ACCESS DENIED (granted: 0x00000201; required:

Hi, Thanks for your information. Now I was not able to login as domain user. I am getting following error message. The system cannot log you on now because domain TECHGROUP is not available. Here is my ldap log message:- Dec 28 00:31:08 rishi slapd[1753]: conn=93 fd=17 ACCEPT from IP=::1 1230 (IP=:: 389) Dec 28 00:31:08 rishi slapd[2166]: conn=93 op=0 BIND

hi, I would like to know is it possible to make writing file to samba completely in kernel? I'm using a slow CPU (FA526) , and the memory copy is even slower. The reading performance is over 7 MB/s, with mmap and sendfile enabled, while writing is only 4-5 MB/s. Without mmap and sendfile, reading from samba is also about 4-5 MB/s. I use Oprofile to profile writing file to samba and found