similar to: After host name change: Failed to add user ... with error: The account's primary group is invalid

Hello, we are trying to set up Samba with LDAP Backend. Using the Samba toolchain to add our existing users/groups, the net command seems to get confused about what users and groups are, if both have the same name and are used in the same context. Here is what I tried: ==commandline== -> Create the Domain Group # net sam createdomaingroup duplicate -U Administrator%pwd Created domain group

Hi everyone, I installed a second samba4 DC and join to the first samba4 DC, following this link https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC, I added two records to the internal DNS, and checked everything works as promising. I did a ldbsearch on the two DCs, I found 5 attributes are not copied over to the second DC. ldbsearch -H ldap://localhost/ -U administrator

Hi all, I have Samba server joined Active Directory domain based on win2008r2, using LDAP as idmap backend. Recently I upgraded from 3.3.x to 3.5.x (Sernet RPMs for Centos4). Now I constantly observe those messages in log: [2011/02/03 09:10:25.696896, 0] winbindd/idmap_ldap.c:1471(idmap_ldap_set_mapping) ldap_set_mapping_internals: Failed to add S-1-5-21-3807515285-1394671770-2144936185-513

Hello, I got a Problem with my HFC Card, I start my "asterisk -vvvvvvvvvvvvc" The console comes up: ---------------snip---------- Asterisk Ready. *CLI> ---------------snip---------- Setting up debuglevel for span 1 ---------------snip---------- *CLI> pri intense debug span 1 Enabled EXTENSIVE debugging on span 1 ---------------snip---------- Console output:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, 7 Jun 2009, Johannes Berg wrote: Hallo Johannes, > Nice. I gave it an almost complete rewrite again, getting rid of the > magic array indexes and things like that. Please test, I haven't had a es gab einen off-by-one Bug beim Laden der Config. Dort habe ich noch eine "2" durch den Enum-Wert ersetzt. Beim Test

Hi, I'm having permissions problems connecting to a share when the gid of the directory shared is not the primary group of the user connecting to it. Maybe I faced it the wrong way, but I did read (and at least thought I understood) the 'File, directory and share access controls' section of the howto [0]. My users have either one or another 'primary group' (the one set in

bHi all, I have a Samba PDC with LDAP backend (using editPosix method) . Below are my versions RHEL6.3 samba-3.5.10-125.el6.x86_64 samba-common-3.5.10-125.el6.x86_64 samba-winbind-clients-3.5.10-125.el6.x86_64 samba-winbind-3.5.10-125.el6.x86_64 samba-client-3.5.10-125.el6.x86_64 When i Join a new Windows System to PDC, the system gets it's Primary gid as 513 (Domain Users) instead of

I tried setting up a samba/ldap domain using the ldapsam:editposix feature, using the brief instructions at http://wiki.samba.org/index.php/Ldapsam_Editposix. Everything goes rather smoothly, and I can add XP machines and log into them as the Administrative user. I added a user to the server, then to samba/ldap using smbpasswd -a newuser ldapsearch -x shows the user & encrypted password, so

On Fri, Aug 28, 2009 at 1:41 PM, Avinash Rao <avinash.aol at gmail.com> wrote: > On Fri, Aug 28, 2009 at 2:36 AM, Alex Crow<acrow at integrafin.co.uk> wrote: > > > >> Alex, > >> > >> I have been trying to use "root preexec" to add domain users to Power > >> users group on the local workstation, it never works.. > >> >

Hello everybody, I am trying to keep my samba pdc working with windows 7 pro clients. After my upgrade: 2016-12-15 15:10:16 upgrade samba:amd64 2:3.6.6-6+deb7u7 2:3.6.6-6+deb7u10 Some of the Windows 7 client can not login anymore and respond with: The trust relationship between this workstation and the primary domain failed Changing the setting client use spnego = no will make the Windows

section 13.3.2 of the HOWTO shows that i can add a user to a group with the following command: root# net rpc group addmem "MIDEARTH\Engineers" ajt -Uroot when i execute this command (replaced with my server specific values, of course), i get a NT_STATUS_NO_SUCH_USER error. i can verify that my user DOES exist and that he belongs to the posix group account. i can also verify that the

Hey all, Is there a comprehensive how-to on the new group nesting features? I've found a little bit of info, but nothing that paints a clear picture of the process. If anyone has any insight or can point me to a tutorial it would be much appreciated. I created the local groups and mapped them. Wbinfo and getent all seem to be working. I've been trying to do the 'net rpc group addmem

I am running 3.0.10-1.4E on RHEL4. The machine is a ADS member server. I would like to statically map the ADS group "Domain Admins" to the built in "wheel" group so all members of "Domain Admins" are in the "wheel" group. I have looked at the username map option, but I don't want a group of users mapped to a UID (this would defeat what I am trying to

Hi All, I'm trying to add a user to a group using /usr/local/samba/bin/net rpc group addmem room11 dunk -Uroot%password The user is added to the group as far as I can tell but the command returns NT_STATUS_ACCESS_DENIED This is on Solaris 10 (Sparc) and Samba 3.2.1, OS and Samba are both configured to lookup users and groups in LDAP. /usr/local/samba/bin/net rpc group members

Hi list I have samba 3.0.21 with LDAP version 2.2.13 on Redhat Enterprise Linux 4 enterprise server kernel version 2.6.9-5 . smbldap-tools version 0.9. in winbind.log i get the following errors my domain msdpl.com ################################################################# [2006/02/16 13:05:28, 0] lib/smbldap.c:smb_ldap_setup_conn(572) ldap_initialize: Time limit exceeded [2006/02/16

Sorry about the dumb question: Are the "BUILTIN\Administrators" and "BUILTIN\Users" local (nested) groups supposed to be populated with DOMAINNAME\Domain Administrators and DOMAINNAME\Domain Users (respectively) by default? If I download the Redhat Samba package, they are populated. Not so with a compiled version. I've had a helluva time populating BUILTIN\Administrators

hi list, is it possible with samba v3 and ldap backend to embedd a normal group like "normalgroup" in the group "Domain Administrators" to give members of the group "normalgroup" full administrative rights on workstations? i tried with "net groupmap addmem sid-of-normalgroup sid-of-domain-admins" and "net groupmap addmem sid-of-domain-admins

We observe a difference between a Windows 7 client and Windows 2003/XP client when accessing directories that should be accessible via the UNIX accounts primary group GID. Windows client refuses access. Ignoring for now why the two different client behaviours (either some subtle difference in the requests or the way the Samba reply is dealt with) the question is what should be the correct

Hello for all, I'm having a doubt that I could not find in samba man and even google. My need is to do with samba ldap something similar to what the AD (NT4 does too?) made with windows nested groups, which include groups within groups at different levels (not just one). Problem example: create a local or global group (better yet) called GRUPO_ALL, which contains two other global groups

I have compiled Samba 3.0.22 on Solaris 10 (sparc.) It has been configured as a PDC with a domain of, say, "SAMBADOMAIN." It has some predefined group mappings for the Administrators and "Domain Admins" group. These mappings were dropped in later versions of Samba. (I have been working with 3.0.24 as well. Unfortunately it doesn't seem to play nice with