similar to: winbind, idmap_ad and ldaps

Hello everyone, I have a - maybe only cosmetical - problem. I am currently configuring two SLES servers running Samba4 as member servers in a Windows2008/2012-AD. (Yeah, poor us!) Everything went fine: installing the samba packages, getting Kerberos running, and joining the AD. But when I use id or wbinfo now to get user information I get lots of groups which cannot be mapped a GID and thus are

Hi, I 'm running : bash-2.03# uname -a SunOS kdejenssamfs 5.8 Generic_108528-15 sun4u sparc SUNW,Sun-Fire-280R and Samba 2.2.5 with winbind and PAM module. I do not need local domain users anymoure as expected. But I have two remaining problems: 1. "console" logins are no longer possible. I get the follwoing error in /var/adm/messages: ... Oct 1 16:41:07 kdejenssamfs

Hi, since some days we have follow entries in the logfile: smbd/service.c:make_connection(340) Couldn't find free connection Google says less or nothing. Can I control this with "max connection = 0". Any another ideas? Please help. Thanks. Peter

I have investigated further and compared the behaviour of samba 3.3 and samba 3.5 on 2 identical SLES9 VM's. Samba 3.3 is working as expected with our Win2k3 SFU Domain and idmap_ad module. Samba 3.5 is not. I noticed that there are a few kerberos params that have changed in 3.5 but I just can't get 3.5 to work as expected: sles9test3:~ # testparm Load smb config files from

Some empirical testing shows that if I am using the idmap_ad module the template homedir parameter in smb.conf is ignored. I would just like to determine if this is the correct behaviour or if I am doing something wrong. JAB. -- Jonathan A. Buzzard Email: jonathan (at) buzzard.me.uk Fife, United Kingdom.

I have Samba 3.0.7 installed and running in security = ADS mode and I've built and installed the Idmap_ad backend according to the instructions. Group lookups seem to work fine, but getent passwd and id functions fail with the message - ad_idmap_get_id_from_sid: ads_pull_uint32 : could not read attribute 'gidNumber'. If I manually run an ldap query against Active Directory the

I saw a message on this mailing list about compiling the idmap_ad.c, back in October of last year... and I'm having the same problem... When I try to compile it, the message I get is: gcc -I/usr/include/linux -I/root/samba/samba-3.0.4/source/ubiqx -I/root/samba/samba-3.0.4/source/popt -I/root/samba/samba-3.0.4/source/smbwrapper -I/root/samba/samba-3.0.4/source

My long sojourn to get some configuration set up that will then allow me to set a uid of an ad user to whatever unix uid I want (nfs reasons), is still going. I set my backend to ad and added the winbind nss info = sfu. Nothing happened initially in the log.winbindd-idmap, but after lunch I saw some new things in there: 83390]: sid to uid S-1-5-21-54348060-1989963526-242692186-2762 [2006/08/25

Hello All; I have a small, isolated, network consisting of a W2K3 (sp2) domain controller and about 20 client PCs which dual-boot between Win XP Pro and Fedora 6. I am attempting to configure Samba (3.0.24), which runs only on the client machines when Fedora is booted, for single log-on and roaming profiles. MS Services for Unix (SFU) v3.5 is installed on the W2K3 domain controller, so I would

It would be a handy feature to have idmap_ad implement an alloc routine to write back the uid and gid mappings to AD either as SFU attributes or RFC 2307 attributes. I figure this could allow dynamic uid and gid allocation that can be easily preserved across multiple domains in a Windows environment. Has there been any attempt to provide this feature? Ross S. W. Walker Information Systems

Hi, I'm using Debian Stable with Samba from SerNet (3.0.28-21). Most of it is working, but there is one issue: > filer01 ~ # getent passwd user > user:*:1024:10000:Aiko Barz:/home/DOMAIN/user:/bin/false > filer01 ~ # getent passwd | grep user > user:*:1024:10000:Aiko Barz:/net/server.domain.local/home/user:/bin/bash > filer01 ~ # getent passwd user > user:*:1024:100:Aiko

I note from the man pages, that idmap_ad will only map users/groups IF you set the UIDnumber in the active directory. In lookin in my active directory, there is a "Unix Attributes" tab with "UID" in that tab that you can set. There is also and "Attributes Editor" tap where you can look at all attributes and edit the "UIDnumber" I just want to verify that

Hi 4.1.11 no longer includes the idmap_ad module in a default ./configure. This has caught out at least two list users recently. We think it is important enough to reinstate as default. Anyone with us? Especially those whose task it will be to have to tell users via the list of the change. . . Cheers, Steve

On 26/01/16 18:48, Joe Maloney wrote: > Hello all, > Samba Version 4.1.21 on 8 servers as member servers configured with > idmap_ad. I have all the RFC2307 attributes configured for every user, and > group. I wrote a script to ensure that. I have scripts in place to make > sure I don't have duplicates, show users without attributes, etc. I also > filter out the users I

On 04/07/16 18:35, Raphaël RIGNIER wrote: > Hi samba team ! > > I try to resolve for hours a problem I have with a Linux Host (Samba > 4.3.9 ubutnu 16.04) as AD member.DCs are Windows 2008 R2, One is 2012 > R2. Forest level is 2003 R2. > > my smb.conf : > [GLOBAL] > netbios name = CR-DEV-01 > security = ADS > workgroup = ADDOMAIN >

On 05/07/16 17:56, Raphaël RIGNIER wrote: > The strange behavior is the different output between group object and > user object > > and > net ads search -U administrator > net ads search -P > > in Samba Wiki, primarygroupid refers to the one for User's "Unix > Attributes" tab. Which is in fact GidNumber. (I have made tests to > check this) > The

Yes, I missed that at first. Some the documentation indicated that the users need to have a gidNumber for their primary group. On 09/22/16 08:18, Rowland Penny via samba wrote: > On Thu, 22 Sep 2016 08:02:36 -0400 > Gaiseric Vandal via samba <samba at lists.samba.org> wrote: > >> Thanks to various people for the feedback. >> >> >> I had created a test

On Wed, 18 Apr 2018 10:02:53 -0400 Wvu Hpc via samba <samba at lists.samba.org> wrote: > Hello, > > We are in process of providing access to a AD connected master domain > and one its subdomains to one of our SAMBA 4.6.2 file-share servers. > The samba server is a member of the MASTER domain. The problem is we > have cases where the same person has an account in both the

On Wed, 18 Apr 2018 10:52:12 -0400 Wvu Hpc <wvu.hpc at gmail.com> wrote: > Hi Rowland, > > Thanks for the help and ideally I would like to get rid of the sub > domain all together but that is probably not going to happen. > > So couple comments and please forgive any of my ignorance. No problem. > > For your second question, all users in the subdomain who have

>It's probably worth noting that for users who are >adding idmap_ad over an existing winbind setup, the >old mapping has to be deleted as above. Thanks, I'll put this in the README for the next version. regards, -- Luke --