similar to: help needed about SID to UID/GID mapping

I have: linux 2.6.18-1.2200.fc5 samba-3.0.23c-1.fc5 W2000 AD with SFU 3.5 uid and gid in SFU linux configured to use AD with ldap client for mapping users, groups and authentication winbind not configured Everyting works fine except ACL in the linux filesystem: I receive this error when I want to add an user access to a file: [2006/10/18 09:38:28, 0]

ok, I followed the directions on that wikipage, made a hot backup, copied the hot backup over to the new DC, renamed the hot backup (thus replacing the existing idmap.ldb) and ran "samba-tool ntacl sysvolreset" and it spat out the following after a minute or 2 of thinking... root at dc1 samba/private# samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime):

Apologies, despite that error, the permissions now look good on the sysvol folder. Is there anything I need to do moving forward to keep my DCs idmap.ldbs in sync? or is this a one time thing? On Fri, Dec 15, 2017 at 1:16 PM, Taylor Hammerling <thammerling at tcsbasys.com > wrote: > ok, I followed the directions on that wikipage, made a hot backup, copied > the hot backup over to

On Fri, 15 Dec 2017 11:09:38 -0600 Taylor Hammerling via samba <samba at lists.samba.org> wrote: > This isn't necessarily an issue (I don't think) but more so a > curiosity. > > How are UIDs mapped to SIDs and then SIDs mapped to names in Samba4 > across multiple DCs? > > I set up my DCs using Louis' how tos ( >

On Fri, 15 Dec 2017 13:16:51 -0600 Taylor Hammerling <thammerling at tcsbasys.com> wrote: > ok, I followed the directions on that wikipage, made a hot backup, > copied the hot backup over to the new DC, renamed the hot backup > (thus replacing the existing idmap.ldb) and ran "samba-tool ntacl > sysvolreset" and it spat out the following after a minute or 2 of >

Interesting... How do I go about getting them/keeping them in sync? On Fri, Dec 15, 2017 at 11:47 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Dec 2017 11:09:38 -0600 > Taylor Hammerling via samba <samba at lists.samba.org> wrote: > > > This isn't necessarily an issue (I don't think) but more so a > > curiosity. > >

Samba 3.5.8 on OpenSolaris (SunOS 5.11) Intel platform; gcc 4.2.3; built with "configure --with-winbind --with-krb5 --with-ldap --with-ads" Samba is joined to our Windows-2008 AD domain. Pretty much everything works, except that winbindd can't convert between SIDs and uid/gid: 1. wbinfo -r WIN\\lanz (Returns nothing -- no output) First I obtain my SID from "wbinfo -n

Danke! On Fri, Dec 15, 2017 at 1:03 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Dec 2017 11:56:25 -0600 > Taylor Hammerling <thammerling at tcsbasys.com> wrote: > > > Interesting... How do I go about getting them/keeping them in sync? > > > > see here: > > https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_ >

This isn't necessarily an issue (I don't think) but more so a curiosity. How are UIDs mapped to SIDs and then SIDs mapped to names in Samba4 across multiple DCs? I set up my DCs using Louis' how tos ( https://github.com/thctlo/samba4/tree/master/howtos). All of my DCs smb.confs have the line "idmap_ldp:use rfc2307 = yes" My policies folder under \sysvol\domainname\ has

I have a new Samba 3 domain backed by LDAP. I am using Fedora-DS for LDAP component, so I have relied on a blend of tools to get up and running including Fedora-DS console and phpLDAPAdmin and (momentarily!) sambaldap-tools. I am generally following the great IDEALX How-To but having to adapt it somewhat. Standards for well-know Samba groups like "Domain Admins" were easy to

Hi there! I'm experiencing the following weird problem: pokeball:# wbinfo -n VTB+jimenezju S-1-5-21-776561741-1450060922-1644491937-1249 1 pokeball:# wbinfo -Y S-1-5-21-776561741-1450060922-1644491937-1249 1 11771 pokeball:# wbinfo -Y S-1-5-21-776561741-1450060922-1644491937-1249 1 11772 pokeball:# wbinfo -S S-1-5-21-776561741-1450060922-1644491937-1249 1 10140 pokeball:# wbinfo -S

Hello My is environment: Ubuntu 8.04 LTS, Squid 2.6.18, Samba 3.0.28a For Squid I need the query of a global group from Active Directory 2003. This works beautifully, but unfortunately not always. There are global groups which works to transform and others where it does not work. Here are my entries for test: # wbinfo -n nobadurl S-1-5-21-986273330-1409306274-1541874228-9965 Domain Group

Hi. I have a problem with mapping SIDs to uids in Samba 2.2.6pre2. I am using Mandrake linux 8.2 with acls, and samba acting as PDC on my local net. My problem is what when I viewing permissions on my test WinXP box, it shows to me SIDs, but not a user or group, and of cource everyone... For example, I created user "test" on my linux box and added him to smbpasswd. Then, when I logon

Did a git-pull and built samba4, up and running with winbind. I have a file server, which will be access by windows. Say I have a user named "abcde" (uid = 1000), under group "abcde) (gid = 1000). When I created a user with samba-too (samba-tool newuser abcde xxxxx), it creates an account "abcde" with mapped uid 300018 under group user users. I am really wondering if

We are using a windows server 2003 active directory as our single sign on server. I have been able to get our RHEL4U6 servers to authenticate with active directory. My concern is that the RID mapping to unix uid/gid range (15000-20000) is stored locally on each machine in a tdb database. So far all of the servers have produced the same mapping, but I do not think it is guarantied. I think the

Hi everyone, Ok I can log in locally as a windows user. I can su to a windows user as well. But once I'm there: [root@sandbox ~]# su mluich bash-3.00$ whoami whoami: cannot find username for UID 16777253 bash-3.00$ ls -l total 4 drwxr-xr-x 2 16777253 16777218 4096 Jul 28 16:21 Desktop -rwxr--r-- 1 16777253 16777218 0 Jul 28 15:31 test.txt Getent passwd

On Tue, 2003-06-17 at 09:45, Nick Stephens wrote: > Greetings! > > I have grabbed the latest samba3 cvs source, and successfully compiled it, > got it talking to my NT server, joined the domain, etc.. life is good. > But, now I have a question kinda related to functionality, i believe... > > A quick synopsis of my goal is as follows: > > i currently have a sendmail

Greetings, For a number of samba iterations I've been using Samba with winbind to keep AD users's UNIX UIDs and GIDs the same across several systems. I don't run the Active Directory set-up and those that do are NOT going to make any alterations to make my life easier. So i have always used idmap_rid to keep consistent UID/GID numbers across all my UNIX machines. This has

I have winbind v3.0.26a running on ubuntu server v7.10 (gutsy). I intend to get user & group info from MsActiveDirectory. However, when I type: getent passwd somerandomuser I get the uid and gid for the user, as recorded in the msad schema by virtue of sfu, but the homedir and loginshell that are returned are like what "winbind nss info = template" would return by default:

I have a samba server running on a Linux RHEL5 system. The system uses nss_ldap and gets passwd and group information from a non-windows ldap server. The smb.conf file is using security=ads and spnego in order to user Kerberos tickets rather than ntlmv2. I have done a net ads join, and the authentication is working fine, however when I try to set an ACL on a file from a windows client