similar to: Failing to get uids from AD

Hi, I'm trying to get an Ubuntu 12.04 system's Samba (3.6.3) and Winbind to map userids and groups to the unix attributes in an AD 2008 server. I can see that when I perform an ldapsearch, I'm able to read the attributes, and for one of my accounts, the id should be 1001. However, when I run 'wbinfo -i <username>', I get back something like 920. At one point, I was

Hi everone. Ubuntu 12.04 v3.6 clients with winbind joined to 12.04 Samba4 DC Clients: smb.conf [global] realm = polop.site workgroup = POLOP security = ADS wide links = Yes unix extensions = No template shell = /bin/bash winbind enum users = Yes winbind enum groups = Yes idmap uid = 300000-400000 idmap gid = 20000-30000 /etc/nsswitch.conf passwd: compat winbind group: compat

Samba4 with Linux and Windows clients wanting to get the same home folder data. Hi A college has students arranged with Linux home directories according to which year they belong to and which class within that year, a or b or whatever, they belong to e.g.: /home2/students/year7/year7a/student1 /home2/students/year7/year7a/student2 ... ... /home2/students/year13/year13a/student2500 To get at

Hi, I'm trying to convert an old system on Solaris 10 that uses the smbpasswd file authentication method to a system that authenticates against Active Directory. I've managed to get winbind working but of course this just allocates UIDs as it sees fit whereas the smbpasswd file method used the UID from the /etc/passwd file. The user codes on the Solaris server match the user

On 04/12/2019 11:21, Marco Gaiarin via samba wrote: > Mandi! Rowland penny via samba > In chel di` si favelave... > >> I think you are over thinking this ;-) > I'm simply applying the policy... ;-) > > https://docs.microsoft.com/it-it/windows/win32/adschema/a-lockouttime > > say at the bottom: > > This attribute value is only reset when the account is

Mandi! Rowland penny via samba In chel di` si favelave... I came back on this, because still some glitches happen. Yesterday I'm locked out. 'pdbedit -vL gaio' say me that account IS locked. But: > yes, Provided you use the right attribute to search on ;-) > Something like this will give you if/when the account was locked out: > ldbsearch -H

On 03/12/2019 14:40, Marco Gaiarin via samba wrote: > Mandi! Rowland penny via samba > In chel di` si favelave... > > I came back on this, because still some glitches happen. > > > Yesterday I'm locked out. > > 'pdbedit -vL gaio' say me that account IS locked. But: > >> yes, Provided you use the right attribute to search on ;-) >> Something

On 05/12/2019 10:36, Rowland penny via samba wrote: > On 05/12/2019 09:15, Andrew Bartlett via samba wrote: >> On Thu, 2019-12-05 at 09:44 +0100, Marco Gaiarin via samba wrote: >>> Mandi! Rowland penny via samba >>> ?? In chel di` si favelave... >>> >>>> As I said, if 'lockoutTime' isn't set or it is set to '0', then the

Mandi! Rowland penny via samba In chel di` si favelave... > As I said, if 'lockoutTime' isn't set or it is set to '0', then the user > isn't locked out, anything else and it is, but I do not believe that you can > set it to anything else but '0' manually, only the system can do this. > This is where 'lockoutDuration' comes in, the account

On Fri, 2019-12-06 at 12:22 +0000, Rowland penny via samba wrote: > On 06/12/2019 11:47, Marco Gaiarin via samba wrote: > > Mandi! Rowland penny via samba > > In chel di` si favelave... > > > > > You cannot create an ldap filter using the above, you would have > > > to filter > > > the result of the ldap search. > > > > I can

On 01/08/16 20:29, Anderson Hoffmann do Carmo wrote: > I executed the command in two scenarios. > > Account 'user1' unlocked: > > root at gteste2:~# > root at gteste2:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b > "dc=testead,dc=gsurfnet,dc=com" -s sub > '(&(objectclass=user)(samaccountname=user1))' lockoutTime > # record 1 > dn:

I will test this! Anderson Hoffmann do Carmo MCP | MTA | MCDST | MCTS | MCSA | MS | MOS | ITIL-F | ISFS | CLOUDF | CI-SCS | VCA-DCV | 2016-08-01 16:39 GMT-03:00 Rowland penny <rpenny at samba.org>: > On 01/08/16 20:29, Anderson Hoffmann do Carmo wrote: > >> I executed the command in two scenarios. >> >> Account 'user1' unlocked: >> >> root at

I have a server running samba-3.0.9-1.3E.10. And I'm trying to update that so I can now add windows 7 pcs to my network. The server is a Dell Poweredge 2850 running Red Hat Enterprise Linux EX release 3 (taroon update 8). It's also running Webmin version 1.580. I wanted to download the update as an .rmp thinking it would be easier and I would be able to run it from my webmin command

I executed the command in two scenarios. Account 'user1' unlocked: root at gteste2:~# root at gteste2:~# ldbsearch -H /var/lib/samba/private/sam.ldb -b "dc=testead,dc=gsurfnet,dc=com" -s sub '(&(objectclass=user)(samaccountname=user1))' lockoutTime # record 1 dn: CN=user1,OU=TESTE,DC=testead,DC=gsurfnet,DC=com lockoutTime: 0 # Referral ref: ldap://

Some empirical testing shows that if I am using the idmap_ad module the template homedir parameter in smb.conf is ignored. I would just like to determine if this is the correct behaviour or if I am doing something wrong. JAB. -- Jonathan A. Buzzard Email: jonathan (at) buzzard.me.uk Fife, United Kingdom.

On 03/12/2019 16:51, Marco Gaiarin via samba wrote: > Mandi! Rowland penny via samba > In chel di` si favelave... > >> Do you mean apart from '$((${LOT} + ${LOD}))' should really be >> '$((LOT+LOD))' ? > Apart bashism, this seems not the point: > > root at vdcsv1:~# bash -vx /tmp/test > LOT=1 > + LOT=1 > > LOD=1 > +

On 04/12/2019 16:36, Marco Gaiarin via samba wrote: > Mandi! Rowland penny via samba > In chel di` si favelave... > >> If you go here: http://www.selfadsi.org/extended-ad/user-unlock.htm >> It says: > So, seems to me that 'Lockout-Duration' is an 'unused option'... > From my understanding, it is supposed to work in the way you think it does, the

Hello, We have a Red Hat 5.3 SAMBA 3.0.33-3.7 Server that shares a few directories to 4 other servers. The other servers are Red Hat 5.3 and one Solaris 10 server. I configured SAMBA to do the following for each share; Force User: User1 Force Group: Group1 Create Mask: 02770 Security Mask: 02770 Directory Mask: 02770 Directory Security Mask: 02770 Inherit Permissions: Yes Inherit ACLS: Yes

On 05/12/2019 09:15, Andrew Bartlett via samba wrote: > On Thu, 2019-12-05 at 09:44 +0100, Marco Gaiarin via samba wrote: >> Mandi! Rowland penny via samba >> In chel di` si favelave... >> >>> As I said, if 'lockoutTime' isn't set or it is set to '0', then the user >>> isn't locked out, anything else and it is, but I do not believe

Hi , I have a data frame (Data1) which has a area variable (AREA) with codes (RA,RG,LT etc.). I would like to split the data frame into individual data frames called RA, RG, LT conatining only the observations from those areas. Thanks yours sincerely Andrew McCulloch -.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.- r-help mailing list -- Read