similar to: Samba4 primaryGroupID attribute

Hi I've created a Samba 4 group called suseusers and mixed in posixGroup and gidNumber using samba-tool group add as a basis. It works, e.g. when I added an existing user to the group: getent group suseusers suseusers:*:2000: and getent passwd steve4 steve4:x:3000019:2000:steve4:/home/CACTUS/steve4:/bin/bash and id uid=3000019(steve4) gid=2000(suseusers) groups=2000(suseusers) but there

Hi samba team ! I have found a very strange bug when changing my user's primaryGroupID with ldif files. The bug is very easy to reproduce : 1) Create a user, create a group, add the user to the group ------------------------------- ~# samba-tool user add stduser User 'stduser' created successfully ~# samba-tool group add stdgroup Added group stdgroup ~# samba-tool group addmembers

Currently, when CIFS users create files these get "Domain Users" as their group. I would appreciate a different group in general and yet another group for some selected users. Googling until my fingers bled I learned that this group is somehow magically encoded in the RID 513 set as primaryGroupID for all users. With Samba3 there used to be commands like 'net groupmap' to

My tool is growing fast and it takes me to the finishing line for setting up my new user database. But nw I came across another strange issue: I'd like to change the primaryGroupID. It is currently set to 513, which simply does not exist. I wanted to set to 100, which exists and actually the user is a member of this group, but then I get the following exception: ldap.UNWILLING_TO_PERFORM:

I try to set up Samba 2.2.4 / LDAP as a PDC and it almost works. The only thing I don't understand is why a domain user can't have a primaryGroupID of 513 (which looks like it should be a safe default). But if I set it, login is denied with an error C0000078 on the client, and something like [2002/06/03 10:32:28, 3] smbd/sec_ctx.c:set_sec_ctx(314) setting sec ctx (65534, 65534) -

Hi Samba Team ! My Samba AD DC server run an NFSv4 server so I need correct RFC2307 id mapping between the server and the clients. On the client side it's very easy with the new smb.conf options : idmap config SAMDOM:unix_nss_info = yes idmap config SAMDOM:unix_primary_group = yes But on the server side winbind use the gidNumber of the group corresponding to the user's primaryGroupID.

Le lun. 19 ao?t 2019 ? 11:01, L.P.H. van Belle via samba <samba at lists.samba.org> a ?crit : > > Hai, > > Fist of all, i must say it not very wise to have you NFS server on the AD-DC. > > I do about the same but my NFS server is on a member. > > Have you configured /etc/nsswitch.conf ? > If not do that. > > If you run : id username > I see :

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Prunk Dump via samba > Verzonden: dinsdag 20 augustus 2019 10:20 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] winbind on DC : how use gidNumber > instead of primaryGroupID as user's primary group > > Le lun. 19 ao?t 2019 ? 12:37, Rowland penny via samba

Hai, Fist of all, i must say it not very wise to have you NFS server on the AD-DC. I do about the same but my NFS server is on a member. Have you configured /etc/nsswitch.conf ? If not do that. If you run : id username I see : uid=10002(NTDOM\username) gid=10000(NTDOM\domain users) groups=10000(NTDOM\domain users) So my GID and Primary group id are the same. > -----Oorspronkelijk

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: dinsdag 20 augustus 2019 11:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] winbind on DC : how use gidNumber > instead of primaryGroupID as user's primary group > > On 20/08/2019 10:29, L.P.H. van Belle via samba

Le mer. 21 ao?t 2019 ? 17:04, Rowland penny via samba <samba at lists.samba.org> a ?crit : > > On 21/08/2019 15:14, Prunk Dump via samba wrote: > > Le mer. 21 ao?t 2019 ? 14:34, Rowland penny via samba <samba at lists.samba.org> > > a ?crit : > > > >> On 21/08/2019 09:04, Prunk Dump via samba wrote: > >>> Le mar. 20 ao?t 2019 ? 14:30, L.P.H.

Le 05/07/2016 à 19:40, Rowland penny a écrit : > On 05/07/16 17:56, Raphaël RIGNIER wrote: >> The strange behavior is the different output between group object and >> user object >> >> and >> net ads search -U administrator >> net ads search -P >> >> in Samba Wiki, primarygroupid refers to the one for User's "Unix >>

Hai, > > In short. My network design previously work with Debian Stretch > Servers and clients and some Windows clients (not many). > > Debian Stretch use Samba 4.5.16 so there is no unix_primary_group > option for the clients. So I have to use the "dirty" tweak of > modifying all my users "primaryGroupID" to the corresponding >

Le mer. 21 ao?t 2019 ? 14:34, Rowland penny via samba <samba at lists.samba.org> a ?crit : > On 21/08/2019 09:04, Prunk Dump via samba wrote: > > Le mar. 20 ao?t 2019 ? 14:30, L.P.H. van Belle via samba > > <samba at lists.samba.org> a ?crit : > >> Hai, > >> > >>> In short. My network design previously work with Debian Stretch >

On 19/08/2019 11:13, Prunk Dump via samba wrote: > Le lun. 19 ao?t 2019 ? 11:01, L.P.H. van Belle via samba > <samba at lists.samba.org> a ?crit : > > > This is a little bit off-thread but why it is not safe to run an NFSv4 > server on a DC ? I know that with a samba file server you have some > restrictions like using only encrypted communication. > > But the NFS

Le mar. 20 ao?t 2019 ? 14:30, L.P.H. van Belle via samba <samba at lists.samba.org> a ?crit : > > Hai, > > > > > In short. My network design previously work with Debian Stretch > > Servers and clients and some Windows clients (not many). > > > > Debian Stretch use Samba 4.5.16 so there is no unix_primary_group > > option for the clients. So I have

Hi everyone samba --version Version 4.0.0alpha18-GIT-bfc7481 openSUSE 12.1 If I do this: ldbmodify --url=/usr/local/samba/private/sam.ldb -b dc=hh3,dc=site dn: CN=steve6,CN=Users,DC=hh3,DC=site changetype: modify add: objectclass objectclass: posixaccount - replace: primarygroupid primarygroupid: 1134 I get an error something like: ERR: (Unwilling to perform) error 53 If however I do the

On 21/08/2019 15:14, Prunk Dump via samba wrote: > Le mer. 21 ao?t 2019 ? 14:34, Rowland penny via samba <samba at lists.samba.org> > a ?crit : > >> On 21/08/2019 09:04, Prunk Dump via samba wrote: >>> Le mar. 20 ao?t 2019 ? 14:30, L.P.H. van Belle via samba >>> <samba at lists.samba.org> a ?crit : >>>> Hai, >>>>

Mandi! Rowland Penny via samba In chel di` si favelave... > > I'm again a bit confused... ;-((( > Yes I can see that ;-) ;-) Sorry for the late answer, but i was busy on other things... > Hope this helps, but feel free to ask any questions. I try to summarize: a) as i supposed 'RFC2307 group membership' are totally ignored by samba, so i can use RFC2307 schema to

Le 05/07/2016 à 17:07, Rowland penny a écrit : > On 05/07/16 08:33, Raphaël RIGNIER wrote: >> Le 04/07/2016 à 20:09, Rowland penny a écrit : >>> On 04/07/16 18:35, Raphaël RIGNIER wrote: >>>> Hi samba team ! >>>> >>>> I try to resolve for hours a problem I have with a Linux Host >>>> (Samba 4.3.9 ubutnu 16.04) as AD member.DCs are