similar to: Samba authenticating against Windows Active Directory

Hi, I'm trying to get an Ubuntu 12.04 system's Samba (3.6.3) and Winbind to map userids and groups to the unix attributes in an AD 2008 server. I can see that when I perform an ldapsearch, I'm able to read the attributes, and for one of my accounts, the id should be 1001. However, when I run 'wbinfo -i <username>', I get back something like 920. At one point, I was

hi, Samba 3.4.1 is compiled and running successfully from source. I need to connect samba to ADS . As a first step kinit is not working for me. Here is the error root at web # kinit Password for samba at XXXX.EDU: localhost: RPC: Program not registered no warning possible root at web # How do I debug what is not working? Thanks Paras.

I have two SAMBA machines they both successfully joined to the same Active Directory (actually SAMBA 4) I have copied the user files from *server 1* to *server 2* /owner id/ and /group id/s are preserved. on server 1, when is do: *id user1* I get *2001* but on server 2 the same user has different id. This is actual for groups as well i.e different id's. *smb.conf*s are identical --

Hi; ? I would like to use a samba configuration with : ? dedicated keytab file = /etc/krb5.keytab kerberos method = system keytab security = ADS ? But when I test the configuration (testparm) I have the following error msg : ? Load smb config files from /etc/samba/smb.conf Unknown parameter encountered: "dedicated keytab file" Ignoring unknown parameter "dedicated keytab file"

Hello list, So, the application I am working on right now needs to have LDAP authentication build in, meaning that if the user enabled it, we will query about his basic data (email,pwd) on a user-setup LDAP directory. It used to work fine when I was testing with OpenLDAP. The code, essentially, is this: connection.bind(self.bind_dn,self.password)

I have a quick question on hooking Samba to a large AD domain. Following the excellent recipe at: http://wiki.samba.org/index.php/Samba_&_Active_Directory I see it states about half way down to join the machine to AD "Now to join your machine to the active directory. You will need the user-name and password to a Domain Administrator account to do this. The command you need to join

This is not your usual "so when is CO 7.8.xxxx coming out?" posts. I'm just curious if the CentOS team is affected by our current world conditions, or is work-from-home modus operandi for the team? (In other words, "when is CO 7.8.xxxx coming out?") -- *Matt Phelps* *Information Technology Specialist, Systems Administrator* (Computation Facility, Smithsonian

The group names from these two commands display differently. For example: $ net ads user info my-name -U my-name . . Systems Engineering EU $ wbinfo -g . . systemsengineeringeu.write Why is this different? Regards, John

All, I'm trying to find out if you can limit Samba to only pull user accounts from a particular Active Directory OU. My AD has over 200K contacts entries for the global address list so I would like samba to only query the location with the valid user accounts. I'm running samba 3.0.1. Thanks for any help/suggestions you can provide, Brian

Hi, Just want to clarify and confirm with everyone, If I want my Solaris Samba box to join an AD domain via winbind, I'd need neither krb5.conf nor krb5.keytab, but instead only file I'd need is smb.conf with a correct configuration, correct? Thanks in advance. - Kevin

Hi, I am Inderjit, and have some issues with configuration of samba with ADS 2008. I am able to connect to ADS 2008, but command "getent group" doesn't show always the output with ADS groups. We have more that 25000 users and domain controller is not located at same location. Could you please give me a hints or suggestions, what can be changed to solve this issue. Regards

I have a quick question regarding Samba, can i mount a Windows share on a Unix server? -- Thanks Jorge

Hi, Today I'm trying to debug a problem on samba 3.5.4 where a domain member server is having trouble mapping UIDs to SIDs. I must admit I never really looked at this before as everything seemed to "just work". Today I discovered that idmap backend on the PDC and the member server were both defaulted to tdb. This means they have independent views of UID to SID mappings I guess.

There are three DCs in my Windows 2003 AD domain, but I have noticed that only one of them is referenced in my krb.conf and krb5.conf. Should there be a reference to one or two of the other domain controllers? If the DC goes down, how will my Samba/Winbind servers authenticate? -- Eric Robinson Disclaimer - February 27, 2011 This email and any files

hi, I trying to join a samba 3.5.6 (debian) on a domain W2K8 without kerberos followin the wiki page (http://wiki.samba.org/index.php/Samba_&_Active_Directory) using net ads join i've got this error Failed to join domain: failed to join domain 'MYDOMAIN.COM' over rpc: NT_STATUS_NOT_SUPPORTED conf in /etc/smb.conf workgroup = MYDOMAIN server string = %h server # allow

I was wondering if anyone has had any luck getting samba working with a Windows 2008 domain? I've got mine working for the most part except for UID lookups. I've got identity management for unix installed on on the windows box and have several users configured with custom home directories, login shell, and UID on the Unix attributes tab. My samba server is joined to the domain, wbinfo -u

I was wondering if anyone already had completion files for samba utils like 'net' wbinfo...etc... I can never remember all the params, I keep wanting to hit <tab> to autocomplete for options like I can on many other sys utils. So I started looking at examples of existing completion files and started cobbling one together... if no one else has some (which would be great!), I'll

I'm hoping someone can give me a clue what I am doing wrong here, Running Debian Etch AMD64, I followed the samba wiki at: http://wiki.samba.org/index.php/Samba_ <http://wiki.samba.org/index.php/Samba_&_Active_Directory#Prerequisites> &_Active_Directory#Prerequisites. I get mostly good results, except when I try to run 'getent passwd' or 'getent group' only

A few questions about Unix groups in Samba. (1) "samba-tool user add" has an option to set --gid-number. However, I can't see that this attribute is ever used. Can someone confirm if this is true? From digging around previous mailing list postings (*), I surmise the following: - the user's Unix primary gid is taken from their primary *Windows* group (primaryGroupID, which

I was wondering if it was possible to get a Samba server that was acting as an AD member server to also be able to authenticate local users, or is stuck just serving AD users? -- Aaron Clausen mightymartianca at gmail.com