similar to: still confused about domains and SIDs

so I have some local users that I'd like to show up in my samba domain a bit more properly, but it's infeasable to add their accounts to the ldap directory proper. I've tried to create an idmap entry (probably wrong) and a structural SID with a sam account pointing to the numeric UID and a proper name for the unix account, but it still shows up as UNIX-USER/accountname. what am

I've got a somewhat special domain (servers only, no clients, for unified passwords stored in ldap and unix passwords are in there too), and I'm looking at my directory and there are a few things I don't quite understand, or that I need some clarification on.. 1) these "Domain Admins" and "Domain Guests" and "Domain Computers" groups.. do they NEED

Hello, If I have a PDC with a netbios name FIRST, and I want to add a BDC - named SECOND - do these machines need to have the same SIDs, or different (I just copied files / settings from PDC to BDC and I'm not sure what to do next)? Tomek

Hi, I''ve been working the past 8 hrs combatting DDoS attacks on websites and dedicated servers I host for clients. They''re hitting one specific IP address, but coming from thousands of external IP addresses. I use: shorewall-4.0.10-3.noarch How can I tackle this? I''ve blocked many subnets in the blacklist file but it''s made very little difference. If

how to do only users from ldap? i'm not running in domain mode, I'd just like to be able to have the same username and password for users from ldap. there are no machines, and nothing else, just users and groups. all the guides I find have machines in ldap too, and require domain mode, I'm not sure which pieces need tobe changed.

I have some shares on a media server that are considdered "Local, offline content", namely they should be accessible if the rest of the network is down, and each system has it's own group of users who are allowed to maintain it. the media servers in the livingroom are only for my wife and I, but each person can modify the one in their own bedroom and noone elses bedroom.

I found a fancy, easy (seeming) way to add printer drivers in windows 7 since the old methods don't seem to work anymore. if you run mmc, you can add a snapin called print management, which enables you to manage various things (drivers, forms, ports, and printers to be most important). Problem is, I can't figure out how to use the "Drivers" method to add drivers. I get a

I would like to migrate users into my Samba3 server. Problem is I have a sambaDomainSID that conflicts with my Windows domain SID. My backend is LDAP. I'm not sure what to delete so I can get my SambaDomainSid in sync with Windows domain SID and start migrating users. Thanks! TJ ------------------------ Cannot import users from LABOR at this time, as the current domain:

Hi everyone. I added a new server a few days ago to an existing Domain Controller cluster that has been working fine for over a year. (Debian Linux, DRBD, Linux-HA, etc.) This server is just being used for more space, basically. Users log in normally and map a drive to this new server and all seems to be well. This server is mapped in a kixtart script to G: and the 'main' server is

I've got a standalone host with an SID that matches exactly a domain SID. for some (fairly obvious) reason, windows machines get confused by this, so I need to change one of the two SIDs. I decided (for simplicity's sake) to change the machine. it broke a bunch of permissions in some silent way, and I couldn't solve a printing related issue as a result (see my other post).

Hi, i`ve searched a lot, but i haven?t found a solution to it.. I have the this: One Server with samba 3.0.14a-3sarge1 on Debian Sarge. This Samba use Ldap as passdb backend... everything works great until this point. I have other samba 3.0.24-6etch4 On Debian Etch. The samba 3.0.14a-3sarge1 has: security = user passdb backend = ldapsam:ldap://127.0.0.1/ The Samba 3.0.24-6etch4 On Debian

>>I have a client in a similar situation. NT4 PDC w/Exchange 5.5 and Samba member servers. Main problem is that >>they're running an old custom Outlook/Exchange workflow app which locks them in until it can be replaced. Similar situation - though we've been able to replicate it fairly easily in google apps. >>As you're aware newer then XP cannot join an NT4 domain

On 01/09/16 15:57, Gaiseric Vandal via samba wrote: > In the past I used samba shares on top of autofs NFS > shares. I did not try samba over static NFS mounts > (file systems mounted by root manually or defined in > /etc/fstab.) I suspect therefore that you might have a > permissions issue. I said: ...seems ok on the clients but only - until a user want to change

Greetings, All! I'm planning a migration to Samba 4 (for a long time, I admit, but I only recently got a promise of funds for a new server... whew...), but I'm a little in the dark on how to arrange whole process. Right now, the situation is imagined as follows: Server A: LDAP/PDC/Samba3/NAT/DHCP/BIND/everything else. Server B: New installation, x86_64, Samba4, would-be-replacement for

I would like to dnat certain protocols (HTTP, HTTPS, SSH) to the contents of an ipset (lan:+serviceshost or similar) where the ipset is ensured to contain only one host, but can be changed dynamically when services are in maintenance mode and go to the "services are down" message on another server. Will this work, or am I barking up a fish here?

hello, i have 1 PDC and 1 BDC using smbldap, and now i'm adding a server (as a domain member, not BDC) that will have shares to be mounted by the clients. this server also uses smbldap and, at this moment, the service is working almost normally. the problem seems to be the typical SID problem, but my new samba reports to have the same SID that the PDC and BDC have, and users can log into

Hi All, I have a domain setup soon to go into production. We have 3 buildings, each containing a fileserver for that buildings users (home drives/share drives). I've been using the smbldap-tools on the PDC, which is all working fine. Is it possible to join another server to the domain, also using the smbldap-tools, with a different config, that will setup a users home drive, etc on

Hello According to NT4 Migration Using tdbsam Backend http://samba.org/samba/docs/man/Samba-Guide/ntmigration.html#id2604610 I would like to transfer PDC settings (users,groups sids) to BDC and later make from BDC PDC machine. I have Fedora Core 7 PDC(hostname serwer) and Centos 5.4 BDC (hostname serwer2) both on tdbsam backends. I have copied smb.conf, passwd,group,shadow,secrets.tdb files

Hello, I am setting up our backup Linux server to act a BDC to our Linux PDC. In the directions that are available within the Swat Online Help... There is a section that states that the private/MACHINE.SID file must be copied over exactly as is to the Samba BDC in order for that machine to act as a Samba BDC to a Samba PDC. For the life of me, I have been unable to locate that

I'm having a problem with roaming domains on Samba v3.0-alpha21. I've connected the machine (watertown) to the domain (precidia) via the server (griffon). I've logged on with my userid (bcwhite) and seen my roaming profile get created on the server upon logoff. Future logons grab the roaming profile and everything is fine. However, _sometimes_ I get a window with the message: