similar to: map untrusted to domain parameter in 3.4.0

On 04/06/2020 13:49, Harald Hannelius via samba wrote: > > > We have a windows domain "AD" and a samba domain "SAD" running Samba > 4.9 in AD-mode. > > We also have an old NT4 domain called "Samba" running Samba 3.6 + > OpenLDAP. > > We have the same users and passwords in all three. The user objects in > the "SAD"-domain

hi: at RHEL 7.4 we had used "map untrusted to domain = yes". so users can login with "username" instead of "sam-dom\username". after upgrade to RHEL 7.5, samba version upgrade from 4.6 to 4.7. now "map untrusted to domain = yes" or "map untrusted to domain = auto" are not working. can we still let user to use "usename" instead

Hi I have a question/problem about winbind and the "map untrusted to domain" (=yes) parameter. I use samba 3.6.0 on FreeBSD 8.2 with the following configuration: [global] encrypt passwords = yes map untrusted to domain = yes allow trusted domains = yes client ntlmv2 auth = yes client use spnego = yes client lanman auth = yes client plaintext auth = no winbind enum

2018-06-29 15:12 GMT+08:00 Rowland Penny via samba <samba at lists.samba.org>: > On Fri, 29 Jun 2018 12:56:33 +0800 > d tbsky via samba <samba at lists.samba.org> wrote: > >> hi: >> >> at RHEL 7.4 we had used "map untrusted to domain = yes". so users >> can login with "username" instead of "sam-dom\username". >>

On Tue, 17 Jul 2018 13:53:41 -0500 (CDT) Andrew Martin <amartin at xes-inc.com> wrote: > ----- Original Message ----- > > From: "samba" <samba at lists.samba.org> > > To: "samba" <samba at lists.samba.org> > > Sent: Tuesday, July 17, 2018 2:54:17 AM > > Subject: Re: [Samba] Cannot authenticate as guest to domain-joined > >

We have a windows domain "AD" and a samba domain "SAD" running Samba 4.9 in AD-mode. We also have an old NT4 domain called "Samba" running Samba 3.6 + OpenLDAP. We have the same users and passwords in all three. The user objects in the "SAD"-domain have the same uidNumber as in the "Samba"-domain. Workstations and users log on to the windows

Greetings samba list, I'm running into an issue when attempting to use "map unknown to domain" on a samba servers bound to my AD domain. When a client maps a share and is not part of the domain, the domain is properly mapped for the user (according to the logs), but the domain controllers report that the password is wrong. I've copied my password out of notepad and pasted it

On Mon, 16 Jul 2018 16:47:57 -0500 (CDT) Andrew Martin via samba <samba at lists.samba.org> wrote: > Hello, > > I just upgraded Samba on a fileserver from 4.6.8 to 4.7.0; this > fileserver is joined to a Samba4 AD Domain. I have configured the > following options to allow guest access to a share: > > [global] > guest account = nobody > map to guest = Bad

On Fri, 29 Jun 2018 16:56:47 +0800 d tbsky <tbskyd at gmail.com> wrote: > 2018-06-29 16:26 GMT+08:00 Rowland Penny via samba > <samba at lists.samba.org>: > > OK, if I remove all the default and unnecessary lines, I am left > > with this: > > > > [global] > > workgroup = SAM-DOM > > realm = AD.SAM-DOM.EXAMPLE.COM > > security =

----- Original Message ----- > From: "samba" <samba at lists.samba.org> > To: "samba" <samba at lists.samba.org> > Sent: Tuesday, July 17, 2018 2:29:59 PM > Subject: Re: [Samba] Cannot authenticate as guest to domain-joined Samba 4.7.0 fileserver when map untrusted to domain = > auto > On Tue, 17 Jul 2018 13:53:41 -0500 (CDT) > Andrew Martin

Hi all, I have a domain member server 3.6.6 running on debian7, authenticating against another debian7 + samba 3.6.6 in DC-mode. Both servers have user-accounts and groups on LDAP and resolve posix users using libnss-ldap. The groupmap is living on LDAP as well. The domain member server serves a share with ACL enabled. I got the upgrade to 3.6.X and idmap-updates working, but the old

Hello, I just upgraded Samba on a fileserver from 4.6.8 to 4.7.0; this fileserver is joined to a Samba4 AD Domain. I have configured the following options to allow guest access to a share: [global] guest account = nobody map to guest = Bad User [Share] guest ok = yes When attempting to connect from a local account on a Windows 7 client (the client is joined to the domain but the

----- Original Message ----- > From: "samba" <samba at lists.samba.org> > To: "samba" <samba at lists.samba.org> > Sent: Tuesday, July 17, 2018 2:54:17 AM > Subject: Re: [Samba] Cannot authenticate as guest to domain-joined Samba 4.7.0 fileserver when map untrusted to domain = > auto > On Mon, 16 Jul 2018 16:47:57 -0500 (CDT) > Andrew Martin

Hello, I have two Samba 3.0.22 PDCs and each trust each other. When I add an user of each domain to the permissions of a file on a windows machine (W2k, WXP), it shows for them DOMAIN\USERNAME. Everything is fine. But when i close the permission window and reopen it, then the user out of the trusted domain is only shown as SID. The one of the own domain is resolved fine. This happens on clients

2018-06-29 17:07 GMT+08:00 Rowland Penny via samba <samba at lists.samba.org>: > Why do you still have a dos client, even I (an inept programmer) could > crack its password in minutes. some tool/utility only has dos version. if you want to input/output something to dos, then samba is the best partner. you won't want usb-disk or floopy under dos. BTW, dos has universal storage

On Thu, 4 Jun 2020, Rowland penny via samba wrote: > On 04/06/2020 13:49, Harald Hannelius via samba wrote: >> >> Question 3) >> If I would enable trust between "AD" and "SAD", would users trying to >> access files on a Samba fileserver be mapped to the uidNumber in "SAD" DS? >> Or would they be mapped to something entirely else?

Mandi! Harald Hannelius via samba In chel di` si favelave... > Question 2) > Does a windows client behave differently when speaking to a NT4-domain or an > AD-domain in how they try passwords? I have a feeling that users in the > "AD"-domain didn't need to (manually at least) enter any passwords to get > their drives mapped from the "Samba" domain.

On Thu, 4 Jun 2020, Rowland penny via samba wrote: > On 04/06/2020 14:46, Harald Hannelius via samba wrote: >> >> So the best way for me would be to implement the RFC2307/SFU schema in the >> Windows AD "AD", add the same uidNumber for every user in "AD" as they had >> in the old "Samba" domain, and then just join the fileservers to the

Hello, I have two samba domains and I want to let users of each domain connect to shares of each other PDC. As long as I use samba <=3.0.22 it works fine (DOM1\user1 is automatically mapped to DOM2\user2) , but later versions won't (DOM1\user1 is shown as DOM1\user1 on PDC2). How can I do this? Regards Marc Muehlfeld -- Marc Muehlfeld (Leitung Systemadministration) Zentrum fuer

On Thu, 4 Jun 2020, Rowland penny via samba wrote: > On 04/06/2020 13:49, Harald Hannelius via samba wrote: >> >> Question 2) >> Does a windows client behave differently when speaking to a NT4-domain or >> an >> AD-domain in how they try passwords? I have a feeling that users in the >> "AD"-domain didn't need to (manually at least) enter any