Displaying 20 results from an estimated 3000 matches similar to: "Samba4 primaryGroupID attribute"
2012 Feb 06
1
Samba 4 posixGroup mapping
Hi
I've created a Samba 4 group called suseusers and mixed in posixGroup
and gidNumber using samba-tool group add as a basis.
It works, e.g. when I added an existing user to the group:
getent group suseusers
suseusers:*:2000:
and
getent passwd steve4
steve4:x:3000019:2000:steve4:/home/CACTUS/steve4:/bin/bash
and
id
uid=3000019(steve4) gid=2000(suseusers) groups=2000(suseusers)
but there
2014 Oct 08
1
BUG : ldif "dn" prefixes case sensitivity (and primaryGroupID module)
Hi samba team !
I have found a very strange bug when changing my user's primaryGroupID
with ldif files. The bug is very easy to reproduce :
1) Create a user, create a group, add the user to the group
-------------------------------
~# samba-tool user add stduser
User 'stduser' created successfully
~# samba-tool group add stdgroup
Added group stdgroup
~# samba-tool group addmembers
2014 Oct 25
1
Change primaryGroupID
Currently, when CIFS users create files these get "Domain Users" as
their group. I would appreciate a different group in general and yet
another group for some selected users.
Googling until my fingers bled I learned that this group is somehow
magically encoded in the RID 513 set as primaryGroupID for all users.
With Samba3 there used to be commands like 'net groupmap' to
2014 Sep 11
1
change primaryGroupID - unwilling to perform
My tool is growing fast and it takes me to the finishing line for
setting up my new user database. But nw I came across another strange issue:
I'd like to change the primaryGroupID. It is currently set to 513, which
simply does not exist. I wanted to set to 100, which exists and actually
the user is a member of this group, but then I get the following exception:
ldap.UNWILLING_TO_PERFORM:
2002 Jun 03
1
What is so bad about primaryGroupID=513?
I try to set up Samba 2.2.4 / LDAP as a PDC and it almost works. The
only thing I don't understand is why a domain user can't have a
primaryGroupID of 513 (which looks like it should be a safe default).
But if I set it, login is denied with an error C0000078 on the client,
and something like
[2002/06/03 10:32:28, 3] smbd/sec_ctx.c:set_sec_ctx(314)
setting sec ctx (65534, 65534) -
2019 Aug 19
4
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
Hi Samba Team !
My Samba AD DC server run an NFSv4 server so I need correct RFC2307 id
mapping between the server and the clients.
On the client side it's very easy with the new smb.conf options :
idmap config SAMDOM:unix_nss_info = yes
idmap config SAMDOM:unix_primary_group = yes
But on the server side winbind use the gidNumber of the group
corresponding to the user's primaryGroupID.
2019 Aug 19
3
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
Le lun. 19 ao?t 2019 ? 11:01, L.P.H. van Belle via samba
<samba at lists.samba.org> a ?crit :
>
> Hai,
>
> Fist of all, i must say it not very wise to have you NFS server on the AD-DC.
>
> I do about the same but my NFS server is on a member.
>
> Have you configured /etc/nsswitch.conf ?
> If not do that.
>
> If you run : id username
> I see :
2019 Aug 20
3
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Prunk Dump via samba
> Verzonden: dinsdag 20 augustus 2019 10:20
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] winbind on DC : how use gidNumber
> instead of primaryGroupID as user's primary group
>
> Le lun. 19 ao?t 2019 ? 12:37, Rowland penny via samba
2019 Aug 19
0
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
Hai,
Fist of all, i must say it not very wise to have you NFS server on the AD-DC.
I do about the same but my NFS server is on a member.
Have you configured /etc/nsswitch.conf ?
If not do that.
If you run : id username
I see : uid=10002(NTDOM\username) gid=10000(NTDOM\domain users) groups=10000(NTDOM\domain users)
So my GID and Primary group id are the same.
> -----Oorspronkelijk
2019 Aug 20
0
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Rowland penny via samba
> Verzonden: dinsdag 20 augustus 2019 11:55
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] winbind on DC : how use gidNumber
> instead of primaryGroupID as user's primary group
>
> On 20/08/2019 10:29, L.P.H. van Belle via samba
2019 Aug 22
1
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
Le mer. 21 ao?t 2019 ? 17:04, Rowland penny via samba
<samba at lists.samba.org> a ?crit :
>
> On 21/08/2019 15:14, Prunk Dump via samba wrote:
> > Le mer. 21 ao?t 2019 ? 14:34, Rowland penny via samba <samba at lists.samba.org>
> > a ?crit :
> >
> >> On 21/08/2019 09:04, Prunk Dump via samba wrote:
> >>> Le mar. 20 ao?t 2019 ? 14:30, L.P.H.
2016 Jul 05
1
winbind idmap_ad rfc2037 can't read UIdnumber
Le 05/07/2016 à 19:40, Rowland penny a écrit :
> On 05/07/16 17:56, Raphaël RIGNIER wrote:
>> The strange behavior is the different output between group object and
>> user object
>>
>> and
>> net ads search -U administrator
>> net ads search -P
>>
>> in Samba Wiki, primarygroupid refers to the one for User's "Unix
>>
2019 Aug 20
0
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
Hai,
>
> In short. My network design previously work with Debian Stretch
> Servers and clients and some Windows clients (not many).
>
> Debian Stretch use Samba 4.5.16 so there is no unix_primary_group
> option for the clients. So I have to use the "dirty" tweak of
> modifying all my users "primaryGroupID" to the corresponding
>
2019 Aug 21
2
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
Le mer. 21 ao?t 2019 ? 14:34, Rowland penny via samba <samba at lists.samba.org>
a ?crit :
> On 21/08/2019 09:04, Prunk Dump via samba wrote:
> > Le mar. 20 ao?t 2019 ? 14:30, L.P.H. van Belle via samba
> > <samba at lists.samba.org> a ?crit :
> >> Hai,
> >>
> >>> In short. My network design previously work with Debian Stretch
>
2019 Aug 19
0
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
On 19/08/2019 11:13, Prunk Dump via samba wrote:
> Le lun. 19 ao?t 2019 ? 11:01, L.P.H. van Belle via samba
> <samba at lists.samba.org> a ?crit :
>
>
> This is a little bit off-thread but why it is not safe to run an NFSv4
> server on a DC ? I know that with a samba file server you have some
> restrictions like using only encrypted communication.
>
> But the NFS
2019 Aug 21
3
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
Le mar. 20 ao?t 2019 ? 14:30, L.P.H. van Belle via samba
<samba at lists.samba.org> a ?crit :
>
> Hai,
>
> >
> > In short. My network design previously work with Debian Stretch
> > Servers and clients and some Windows clients (not many).
> >
> > Debian Stretch use Samba 4.5.16 so there is no unix_primary_group
> > option for the clients. So I have
2012 Feb 14
1
Samba4 ldbmodify Unwilling to perform error 53
Hi everyone
samba --version
Version 4.0.0alpha18-GIT-bfc7481
openSUSE 12.1
If I do this:
ldbmodify --url=/usr/local/samba/private/sam.ldb -b dc=hh3,dc=site
dn: CN=steve6,CN=Users,DC=hh3,DC=site
changetype: modify
add: objectclass
objectclass: posixaccount
-
replace: primarygroupid
primarygroupid: 1134
I get an error something like: ERR: (Unwilling to perform) error 53
If however I do the
2019 Aug 21
0
winbind on DC : how use gidNumber instead of primaryGroupID as user's primary group
On 21/08/2019 15:14, Prunk Dump via samba wrote:
> Le mer. 21 ao?t 2019 ? 14:34, Rowland penny via samba <samba at lists.samba.org>
> a ?crit :
>
>> On 21/08/2019 09:04, Prunk Dump via samba wrote:
>>> Le mar. 20 ao?t 2019 ? 14:30, L.P.H. van Belle via samba
>>> <samba at lists.samba.org> a ?crit :
>>>> Hai,
>>>>
2017 Jun 30
2
User management scripts in AD mode...
Mandi! Rowland Penny via samba
In chel di` si favelave...
> > I'm again a bit confused... ;-(((
> Yes I can see that ;-)
;-)
Sorry for the late answer, but i was busy on other things...
> Hope this helps, but feel free to ask any questions.
I try to summarize:
a) as i supposed 'RFC2307 group membership' are totally ignored by
samba, so i can use RFC2307 schema to
2016 Jul 05
2
winbind idmap_ad rfc2037 can't read UIdnumber
Le 05/07/2016 à 17:07, Rowland penny a écrit :
> On 05/07/16 08:33, Raphaël RIGNIER wrote:
>> Le 04/07/2016 à 20:09, Rowland penny a écrit :
>>> On 04/07/16 18:35, Raphaël RIGNIER wrote:
>>>> Hi samba team !
>>>>
>>>> I try to resolve for hours a problem I have with a Linux Host
>>>> (Samba 4.3.9 ubutnu 16.04) as AD member.DCs are