similar to: tdbsam.

I have just struggled to implement a Samba Domain Server, and have some remaining issues. I have a Samba PDC using tdbsam, managing a domain called RHEA. I have (finally) configured a new Samba Domain Server (AUREUS) using winbind and idmap_rid. When I am logged in to RHEA as user GMCH I can access a TMP share on AUREUS (at last). Running 'getent passwd' I get (inter alia):

hi, it?s me again :( i?m still not able to use idmap_rid in a trusted domain environment (samba v3.0.20b Sernet). well, to be clear: NSS is not working (id, getent passwd <user>, ...) so samba does not find the posix information for any user from a foreign domain it?s working in a single domain with ##################################### # WINBIND - Settings idmap backend =

Hello, I've some trouble with winbind and the idmap_rid feature in an ADS environment. (Opteron with Debian 3.1pure64, official Samba/Winbind packet 3.0.14a) Without "idmap backend = idmap_rid:...." in the smb.conf a "getent passwd" works fine. Then I delete the /var/lib/samba/*.tdb-files, activate idmap_rid in smb.conf (see below) and join the ADS-Domain once more -

I use winbind+AD for single sign-on to many Linux machines, and the Linux hosts automount home directories on one Linux file server. I am faced with a need to synchronize the *.tdb files on the file server with all the Linux machines for consistent UID-to-loginID mapping. Has this been tried by sharing the /var/lib/samba/ over nfs with the other servers? Are there any pitfalls? Has this been

Hi, wbinfo -Y BUILTIN\group can work without idmap_rid in Samba-3.0.14a. But I'm experiencing wbinfo -Y with idmap_rid failed for SID to GID conversion of BUILTIN groups. Since idmap_rid only works in a single domain, and captures workgroup's domain sid as a real domain sid in rid_idmap_get_domains(), when running "wbinfo -Y BUILTIN/System Operators", the function

Hello, Please forgive me if this has been discussed, I did not find any references when I searched. I'm trying to replace a W2K server with a samba member server in a single ADS domain. It seems that the Fedora rpms do not support idmap_rid so I am trying to compile from the Fedora SRPM. After following the docs for building and configuring idmap_rid I get no ADS users from `getent

Dear All, I have successfully compiled MIT krb5 and samba 3.0.28a under Solaris8. Joining an AD domain works fine and also the commands wbinfo -t, -g and -u list all of the users. getent passwd and getent group are also working. The problem now is that when i run the "group user" command it just stays there and doesn't display any users. This works fine under Linux (SLES9, RHEL4)

I have two SAMBA machines they both successfully joined to the same Active Directory (actually SAMBA 4) I have copied the user files from *server 1* to *server 2* /owner id/ and /group id/s are preserved. on server 1, when is do: *id user1* I get *2001* but on server 2 the same user has different id. This is actual for groups as well i.e different id's. *smb.conf*s are identical --

A question for the best winbind SID-UID/GID mapping in our situation: I'm building a new infrastructure with Windows 2003SP1 ADS Domaincontrollers and some Debian Servers (File: Samba+NFS; Mail; Web; ....) and varios XP and Debian Clients. After reading Chapter 12. (Identity Mapping) in the Samba-HOWTO is IDMAP_RID in couple with winbind an easy way to solve the problem with syncr.

The samba server is FC3 / samba 3.0.10 (Fedora package w/ idmap_rid compiled) The samba server shows up in the browse list, but when you select it from an XP machine windows spits up "\\ server is not accessable" yada yada "The user name could not be found" The following shows up twice in /var/log/samba/winbindd: [2005/02/01 14:00:27, 0]

hi, i have a question about winbind, idmap_rid and trusted domains. at sambaxp jerry said it's possible to have idmap_rid working with trusted domains. this is what we would like to have here. smbd -b doesn't show this compile option on 3.0.14a rpm (SuSE). may be this is normal, but how do i ensure that this option is in my binary w/ testing too much :) or how can i compile it

I'm running Samba 3.0.11. Compiled with: ./configure '--with-ads' '--with-pam' '--with-winbind' '--with-smbmount' '--with-shared-modules=idmap_rid' It configured, make and make installed fine. I configured the idmap_rid using the following directives in the smb.conf. ; IDMap Stuff idmap backend = idmap_rid:<DOMAINNAME>=500-100000000

I am trying to get out Linux boxes to authenticate against our AD domain. We have that part working just fine using Kerberos and winbind. The problem is when we use NFS on multiple machines. As you could guess, the UIDs and GIDs are not consistent across all of the machines. From what I have been reading on the internet, this seems to be common problem, but all the solutions that I have found

I need to migrate from samba w/LDAP 2.2.8a to 3.0.1pre3 with tdbsam. Any suggestions how to keep from having to change all the profiles? I have read through chapter 30 of the HOWTO but it assumes keeping the same backend. I need support to munge_dial and that is not available without mysql or tdbsam.... Thanks in advance for your help. Sean

Greetings, I'm looking how I can set manually the GID & UID of my Active Directory users into Samba & Winbind. I have several server linux using Samba and they are linked to Active Directory to get users & groups. On all my Linux system I did a "net join ads". Also I set this option in all smb.conf: idmap uid = 20000-30000 idmap gid =

As discussed previously on this list, Samba RPMs for Fedora Core do not include idmap_rid support. This is also true for older RedHat distributions. SuSE on the other hand, seems to have been patching in idmap_rid support since 3.0.5 or so; and with trusted domain support, to boot. Harrumph. I've been able to rebuild samba srpms on FC2 and RedHat 8 by patching the samba distributed rpms,

Hi everyone, I'm trying to use idmap_rid with Samba 3.0.21c on AIX 5.3. So far, I've not been successful. I've followed the method from http://us5.samba.org/samba/ftp/Binary_Packages/AIX/README to compile Samba, but added "--with-static-modules=idmap_rid". Also, I used IBM's compiler and not gcc. The compilation fails as follows: [...] Compiling sam/idmap.c Compiling

I didn't get any answers so I try again: I am using tdbsam as passdb backand. I have added root user with pdbedit. The machine trust account was added on the fly. I have added the user with pdbedit. I have created the user in /etc/passwd. When the user logs in from a W2k and mounts the home-directory I noticed that Samba didn't take the home-directory information from tdbsam, it

Running Samba 3.x with tdbsam. Its a small nework of 4 Windwos XP machines. Having a little trouble adding the machines to the domain. pdbedit shows duplication machines names and such. Since its such a small number of machines, want to just start over with a fresh tdbsam as it seems faster then trying to clean it up. Can we just delete the existing tdbsam? Stop and restart Samba and

Hi All, I just added three users to my tdbsam with "pdbedit -a -u username" (had to do "useradd" first). All three appeared in tdbsam as they should, as verified with "pdbedit -L". But, all three also appeared in /etc/samba/smbpasswd. This is not a mistake, they were not there before. Are "tdbsam" and "smbpasswd" linked? I am confused.