similar to: getent doesn't list my users when using idmap_adex

Hi Guys, I'm having problems getting the new idmap_adex module to work. When using the idmap_adex plugin I get the following: # wbinfo -n administrator S-1-5-21-XXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-500 User (1) # wbinfo -i administrator Could not get info for user administrator As expected attempting to lookup user & group info via commands which use libnss also fail. The

Hi, Actually I am using the Backend Idmap_AD. I thought Idmap_adex is still under heavy development. Tobias Mit freundlichen Gr??en Tobias Mucke LFK-Lenkflugk?rpersysteme GmbH Serverpool, FCI4 Landshuter Stra?e 26, 85716 Unterschlei?heim, GERMANY Phone: +49 89 3179 8438 Fax: +49 89 3179 8927 Mobile: +49 170 635 3830 E-Mail: tobias.mucke at mbda-systems.de http://www.mbda.net Chairman of

Hi Guys, I'm setting up a new file server in our domain environment and I'm having problems with the adex configuration/module. I have couple of working file servers using rfc2307/idmap_ad and they are working perfectly. What attracted me to the idmap_adex module is the domain trust/forrest authentication support. I have 2 domains not in the same forest with a 1-way trust setup. The

I'm trying to get my linux boxes to authenticate to AD using winbind. I need to get my uid's from AD so I'm using idmap_ad. I got to the point where 'getent passwd' shows me the list of unix users from AD with all correct details, however when I do 'getent passwd <username>' for any username from the list returned by 'getent passwd' I get an empty reply

We have Windows 2008R2 domain controllers running 2003 functional level with SFU (i think thats what its called, im not the windows admin :p ) . With Winbind 3.0.33 (on Redhat 5.5) I can get the UIDs/GIDs from AD without issue using: idmap config DOMAIN:backend = ad idmap config DOMAIN:default = yes idmap config DOMAIN:schema_mode = rfc2307 idmap config DOMAIN:range = 10000 - 30000

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Release Announcements ===================== This is the second release candidate of Samba 3.3.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Major enhancements in Samba 3.3.0 include:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Release Announcements ===================== This is the second release candidate of Samba 3.3.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Major enhancements in Samba 3.3.0 include:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Release Announcements ===================== This is the second preview release of Samba 3.3.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Major enhancements in Samba 3.3.0 include:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Release Announcements ===================== This is the second preview release of Samba 3.3.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Major enhancements in Samba 3.3.0 include:

After spending some time trying to figure out how to merge the allocating backend from idmap_ldap and the rest of idmap_adex, I have found that it may not be worth the effort to avoid having to configure idmap_ldap. Has anyone had success with idmap_ldap as the uid/gid allocator and idmap_adex in Samba4? I haven't done much with ldap, so any instructions on how to add schema info needed

[2009/11/18 12:41:05, 1] winbindd/idmap.c:438(idmap_init_passdb_domain) Could not init passdb idmap domain [2009/11/18 12:41:05, 1] winbindd/idmap_tdb.c:214(idmap_tdb_load_ranges) idmap uid missing [2009/11/18 12:41:05, 0] winbindd/idmap.c:201(smb_register_idmap_alloc) idmap_alloc module tdb already registered! [2009/11/18 12:41:05, 0] winbindd/idmap.c:149(smb_register_idmap) Idmap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Release Announcements ===================== This is the first release candidate of Samba 3.3.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Major enhancements in Samba 3.3.0 include:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Release Announcements ===================== This is the first release candidate of Samba 3.3.0. This is *not* intended for production environments and is designed for testing purposes only. Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Major enhancements in Samba 3.3.0 include:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================ "After all, computers crash, people die, relationships fall apart. The best we can do is breath and reboot." Sarah Jessica Parker ================================================================ Release Announcements ===================== This is the first

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ================================================================ "After all, computers crash, people die, relationships fall apart. The best we can do is breath and reboot." Sarah Jessica Parker ================================================================ Release Announcements ===================== This is the first

Hi! $SUBJECT says it all. Why am I asking? A few times in the recent past I've stumbled across this module when trying to make changes in the winbind infrastructure that would involve changes to idmap_adex. The problem here is that I have no chance to test those changes, because I do not have the test setup including a Likewise Cell infrastructure around. Is anybody around using this module

Hi, I'm running a mixed linux/Windows network with authentication done using Active Directory. The Linux clients use Samba/Winbind for authentication (with help from the list, thanks!). I've setup smb.conf such that doing 'net ads join -Uadministrator' populates my /etc/krb5.keytab (see configuration files below). klist shows me a nice set of principals from /etc/krb5.keytab

On 12/10/15 08:27, VigneshDhanraj G wrote: > Hi Rowland, > > Thanks for the help. > > Yes, Joined to the domain, ftp uses pam authentication. After > upgrading samba i found ftp pam authentication not working > > /etc/pam.d/ftp contains > > #%PAM-1.0 > auth sufficient /lib/security/pam_smbpass.so > auth sufficient /lib/security/pam_winbind.so

Hi, We have just managed to get winbind behaving correctly in a Samba domain with Samba member servers with help from Sernet. It is now not adding spurious entries for the "own domain". However, a member server keeps trying to add group mappings that already exist in the LDAP idmap ou. This would not be a problem, apart from the fact that every time it fails adding an entry, the

On Thu, 13 Oct 2016 17:56:50 +0200 Udo Willke via samba <samba at lists.samba.org> wrote: > Hello Rowland, > > Am 13.10.2016 um 16:53 schrieb Rowland Penny via samba: > > On Thu, 13 Oct 2016 16:22:47 +0200 > > Udo Willke via samba <samba at lists.samba.org> wrote: > > > >> Hello Rowland, > >> > >> I have removed the rfc2307-IDs