similar to: "Idmap module nss already registered" ???

Hi, We have just managed to get winbind behaving correctly in a Samba domain with Samba member servers with help from Sernet. It is now not adding spurious entries for the "own domain". However, a member server keeps trying to add group mappings that already exist in the LDAP idmap ou. This would not be a problem, apart from the fact that every time it fails adding an entry, the

Hello, I have problem with idmap configuration. I would like to use LDAP as backend for idmap in Samba+ADS environment, but i have following errors in log.winbindd-idmap: [2011/06/08 16:57:54.805575,? 0] winbindd/idmap.c:201(smb_register_idmap_alloc)????????????????????????????????????????????????????????????????????????????????? ? idmap_alloc module ldap already

I have a Centos 7.6 server with samba 4.8.3  configured as a member of an AD domain using "ads' security and the "nss" idmap backend. Clients are unable to access the shares on the server - they repeatedly get asked for their credentials. The smbd log shows the user authenticating and a mapping from the user's SID to their unix uid is found. However, it seems that

Hi, I am new to samba and Kerberos so please be gentle! I have built a samba AD DC (v4.3.5) on Centos Linux from source and am trying to add a service principal and generate a keytab containing the principal. However the principal entry does not appear in the keytab. Here's what I did: [root at bones ~]# samba-tool spn add GEMSTONE64/bunk.gemtalksystems.com at

Hi all, I'm using the VFS sbadow_copy2 module, and I think I've hit a bug. This config works: mattcen at adam:SambaTest$ cat works3/smb.conf [SambaTest] comment = SambaTest writable = yes path = /srv/SambaTest/share #vfs objects = shadow_copy vfs objects = shadow_copy2 shadow:snapdir = /mnt/dates shadow:basedir = /srv mattcen

Hi, I've setup Samba 3.5.6 as a member server in a 2003R2 domain with a single dc, idmapping is by rfc2307 with a tdb backend for builtin accounts etc, I can list users and groups using wbinfo and I can create shares and access them from the windows server, files and folders owned by ad users show the correct user and group names so mapping appears to be working, I can su to ad accounts but I

Can anyone tell me what might be going on here? Thanks in advance David : Jan 9 22:02:15 dns1 winbindd[19219]: [2010/01/09 22:02:15, 0] winbindd/idmap.c:smb_register_idmap_alloc(201) Jan 9 22:02:15 dns1 winbindd[19219]: idmap_alloc module tdb already registered! Jan 9 22:02:15 dns1 winbindd[19219]: [2010/01/09 22:02:15, 0] winbindd/idmap.c:smb_register_idmap(149) Jan 9 22:02:15 dns1

Hello, We are currently testing S4rc5 for an upcoming S3 to S4 migration. I am able to duplicate this issue with both classicupgrade and a new provision (both cases using internal DNS). I am able to join a 2008R2 system to the domain and promote it to a DC, however I am unable to demote it. The problem appears to be that the 2008R2 server fails replicating to the S4 DC. The specific error that I

Hello, It seems Samba4 is having problems with CNAME records. I am seeing the same behavior as mentioned in the thread below. Is there any ETA on a fix for this? This is identical to the problem with MX records. This is currently a much bigger problem than the MX records. I appreciate any assistance. [root at DC1 var]# dig autodiscover.testdom.com CNAME ; <<>> DiG

Hi , We ran the classic upgrade and migrated the domain . We were then able to add a Windows Server 2008R2 and dcpromo it. Here are some of the issues we are seeing post migration - Pre the migration, the password backend was LDAP. We had some groups that we had migrated into LDAP from TBD. These groups doesn't seem to have come up in AD. - Any groups that were created in

Hi, We are running Samba 4.0.9 running on centos 6.5 (64bit) with SecureLinux disabled. Having some share access issues, what are we missing to solve this puzzle? We are attempting to get the MSDFS share working. Until we can fix this we cannot continue. This is the Domain provision and dns, and reverse zone setup. Dhcp server set point all clients at samba as primary dns server. Nslookup

It looks like I've gotten the majority of things working in regards to Winbind. Users are being authenticated by the NT4 PDC when connecting to shares, but I can't seem to get things set up correctly to allow logging in via SSH(OpenSSH_3.6.1p2, SSH protocols 1.5/2.0, OpenSSL 0x0090702f). It appears as though I'm successfully authenticated by the PDC, but then the connection is

Hi, I am having a problem with Winbind: First, some information .. Domain name :TESTDOM PDC's Netbios name : ubuntu Samba version : 3.0.20 (lateset patches installed) with LDAP backend. Linux : Ubuntu 2.6.10 Samba is running smoothly, with no problems. I want to use Winbin, so I followed Samba HowTo - chapter 23 http://us5.samba.org/samba/docs/man/Samba3-HOWTO/winbind.html#id2634776 I

I am getting a lot of winbind errors in my logs on one server. Any idea's? Apr 7 10:32:19 pdc winbindd[8789]: [2011/04/07 10:32:19.062866, 0] winbindd/idmap.c:201(smb_register_idmap_alloc) Apr 7 10:32:19 pdc winbindd[8789]: idmap_alloc module ldap already registered! Apr 7 10:32:19 pdc winbindd[8789]: [2011/04/07 10:32:19.063011, 0] winbindd/idmap.c:201(smb_register_idmap_alloc) Apr 7

I have compiled 3.5.12 from source on CentOS 5.7. I am using krb5.conf, smb.conf files that have worked with other 3.5.x installs of Samba (at least in terms of wbinfo working) but now I am not able to get any data from winbind. The server is running and the logs don't report any errors. I had done several 'make uninstall' while compiling/recompiling with different options. Could

Hi List, I used samba-4.1.18 as domain controller and tried to use romaing profile. I got memory leak when every account with profile path setting logout. Every account with profile path setting eat almost 10mB memory so my samba machine crash if there are many hundred account with profile setting in domain. Any option in smb.conf or operation can help ? This is my reproduce setps: 1. create

Hi list, I can't make idmap talk to my LDAP server. And I haven't found an updated howto. Some entries from log.windbindd-imap: [2012/04/13 20:05:40.500475, 5] winbindd/idmap.c:153(smb_register_idmap) Successfully added idmap backend 'ldap' [2012/04/13 20:05:40.501112, 5] winbindd/idmap.c:153(smb_register_idmap) Successfully added idmap backend 'tdb' [2012/04/13

Hello all, I'm trying to set up my samba server rev 3.2.3 on opensuse 10.3 as a member of the active directory domain, so that client connections can be authenticated by the AD server. Unfortunately when I try to connect to the samba server from a windows XP system, it keeps on asking me for user name and password. I've been reading through various howto's and descriptions but no

My Question: ------------ Is it possible to get 2-way Interdomain Trust relationships working between a Samba domain and an NT4 SP6a domain, while restricting all password hashes to NTLMv2 only? Everything works except the inter-domain trust I'm able to get the NT4 domain to trust the Samba domain, but not the other way around. My System: ---------- I have a perfectly running Samba domain

Hello, After noticing some odd behavior on my domain, I realized that many of my DNS records are incorrect and that clients are no longer properly updating DNS. While looking into this, I also discovered that I am unable to delete MX records via AD DNS Manager or samba-tool. Both tools "see" the record but report it does not exist when I attempt to delete it. I can create new MX