similar to: 3.6.0 Domain trusts broken

Hi, We have just managed to get winbind behaving correctly in a Samba domain with Samba member servers with help from Sernet. It is now not adding spurious entries for the "own domain". However, a member server keeps trying to add group mappings that already exist in the LDAP idmap ou. This would not be a problem, apart from the fact that every time it fails adding an entry, the

Greetings Sambistas! I can't seem to get domain trusts to work in both directions. Details follow. I have a network running many OSes on four geographically separate sites with an OpenLDAP authentication backbone. Desktops are windows XP authenticating to samba 3.0.25b servers which in turn are configured to use LDAP. Our net has been running samba in various flavors and versions for

Hi everyone, last week I took a look at a samba3 PDC server with some performance issues. The samba3 PDC has an ldap backend and has nss_ldap configured properly. It has also interdomain trust so it has nss_winbind configured too, so in /etc/nsswitch.conf there is : passwd: compat ldap winbind group: compat ldap winbind This setup has some performance issues on the nss_ldap part of the

Hi, I have recently upgraded a system with a Samba BDC, PDC and a couple of member servers from 3.2.14 to 3.4.9 (and also tested with 3.5.6). There appears to be some problem with Winbind (we need to run it on all servers as we have a trust relationship to a domain at another office). I have an Idmap range set up in our LDAP database. With 3.2.14, all worked well. The Idmap ou would be

Hi, I'm trying to access the IMAP archives with Thunderbird but can't seem to get it to work. I have tried an unencrypted connection, SSL and TLS but with no success. Any ideas? Thanks Alex -- This message is intended only for the addressee and may contain confidential information. Unless you are that person, you may not disclose its contents or use it in any way and are requested

Hi Timo, Is it OK to have dovecot variables in entries in an LDAP userdb? Say I wanted to set the mail userdb parameter to override mail_location, would it work by having an entry in LDAP (eg for mailMessageStore attrib) like: mdbox:/home/email/%d/%n:INDEX=/home/indexes/%d/%1n/%n:ALT=/home/email_archive/%d/%1n/%n and those % variables will still be expanded by dovecot? Or would I be required

In reading the documentation I havn't found anything that covers the use of winbindd when authenticating against one domain (lets call it 'A') while also allowing users from a domain trusted by A (lets call it 'B'). My linux box is a member server in domain A which is a new domain we are working on transitioning to. We are not renaming because 2k server doesn't have that

Hello, I'm trying to use samba v3.3.8 on Centos 5.5 to act as a PDC, using ldap as the backend for users, groups, and computers. The ldap I'm using is Centos Directory Server v8.1. The setting is a new, never used before, installation of samba and ldap. There are no users other than what exists by default after a Centos install. The smb.conf contains what is my best guess for the

Greetings! I'm having problems with winbind and interdomain trusts. I've done alot of searching on the topic and there appears to be alot of folk out there with the same problem, but not any solutions. Environment is CentOS v5.6 with yumable samba3x-winbind-3.5.4-0.70 on x86_64. Specifically, the host is joined (successfully) to A: [ehvozda at AD-test samba]$ sudo wbinfo -t checking

Does anyone know if interdomain trusts work in samba at all and what versions they do? I am trying to get a 1 way trust working between two domains and DOM A (which samba is joined to works in mapping users via winbind) just not the one way trust for the other domain.... DOM B Samba is just a joined member of the domain A with security = ads with nothing more than winbind id rid maps for both

Hi @ll, as i had setup a vpn ( openvpn ) and have wins browse working nice between the 2 subnets i wanted to setup a interdomain trust. I did smbpasswd -a -i ... the trustaccount was created. but net rpc trustdom establish robowarp results in [2004/02/04 02:58:09, 0] utils/net_rpc.c:rpc_trustdom_establish(1789) Couldn't find domain controller for domain ROBOWARP for sure i checked all

Hi all, I have two different domains. At one point I had them trusting eaach other but then I ruined it. Now I am trying to get them back. They both have LDAP backend. I need them bot to trust each other and be trusted by each other. Here are the steps I am following: 1. On each domain, create a computer account called the other domain: CORP: smbldap-useradd -ai FURN$ CORP:

As per earlier post, I was having problems getting trusts setup between my Samba domain (3.0.x PDC, 3.4.x BDC on Solaris 10) and two Active Directory domains (each in a separate forest.) One domain is a test Win 2003 PDC in native Win 2003 mode, the other is a Win 2008 system also in native Win 2003 mode. To summarize some of the progess- things work better if the Samba 3.4 is the PDC,

I'm having an issue establishing a trust between a samba/ldap PDC and a windows 2003 Active directory server on a seperate domain. Here is what I've done. I've created a 2 way trust in windows with the samba domain. When I try to verify the outgoing trust from windows I get an access denied message. In samba logs I get " get_md4pw: Workstation CATS$: no account in domain"

I have a Samba-LDAP PDC at an office and 5 BDC's at other offices. At corporate HQ I have a W2k Server and domain. I have properly configured an interdomain trust and Users in the Samba domain can get to sections on the W2k machine regardless of location. However, members in the W2K domain can only access shares on the PDC. Attempts to access shares on a BDC cause a user name

Mother always told me that there'd be days like this. She just didn't tell me that they go on for weeks. OK - John's book suggests that we're not complete in this arena here...Yeah, I bought the Samba 3 How-to-guide - Borders/Phoenix had 3 on the shelf (now 2) - and also an LDAP book for reference. It's been a fun weekend ;-) problemo... # smbpasswd -x -i MULLEN

How can I check if a client has used the pdc or one of the bdc's for domain logon? regards martin

All, If I set up a BDC with a replicated ldap server, can I point the "ldap backend" and "idmap backend" options *both* to the localhost and enable a referral on the slave so that writes (ie Idmap updates) will be referred to the master server? I'm running debian unstable with openldap 2.4 (and libs) and Samba 3.0.30. I know I should use the new idmap interface but this

I have the same problem as the following: http://threebit.net/mail-archive/asterisk-users/msg36602.html I am using a b410p (Wildcard) in TE mode on 4 channels of ISDN2e and it totally fails to detect incoming DTMF. The newer mISDN drivers have a parameter "dtmfthreshold" where you can tune the volume above which DTMF detection is initiated. However (I've tried it) the newest

Hi there, I am looking into using CTDB between a PDC and a BDC. I assume this is possible! However I have a few questions: 1: Do I have to use tdb2 as an Idmap backend? Can I not stay with ldap? (from the CTDB docs: A clustered Samba install must set some specific configuration parameters clustering = yes idmap backend = tdb2 private dir = /a/directory/on/your/cluster/filesystem It is