similar to: Using Windows­­­­ ACL on a samba3 share

Hello again, I am using samba 3.5.6. I have another though maybe this problem occurs due to my OpenLDAP service? My /etc/openldap/slapd.conf is using: [...] access to dn.base="" by * read access to dn.base="cn=Subschema" by * read access to attrs=userPassword,userPKCS12 by self write by * auth access to attrs=shadowLastChange by self

Hi list, i got an question about the right acls for my Samba+ldap can someone have an look. acl.conf access to dn.base="" by * read access to dn.base="cn=subSchema" by * read access to attrs=userPassword,userPKCS12 by self write by * auth access to attrs=shadowLastChange by self write by * read access to dn.subtree="ou=adressbuch,dc=test,dc=intern" by

hi there, I am working trough a tutorial on setting up samba and ldbap on a suses 11.1 box everything worked fine so far but now samba can not contact the the ldap server. all command trying it issue the following error message. Failed to issue the StartTLS instruction: Can't contact LDAP server how can I trace down what causes this? thanks for your help I added my slapd.conf and the

Hello! I'm geting errormessage, when I start sldap on commandoline: amd:/usr/lib/openldap # /usr/lib/openldap/slapd /etc/openldap/schema/samba.schema: line 432: AttributeType not found: "gidNumber" I think, I must create a new group with a gid. But is the groupname sambaGroupMapping? my samba.schema-line 432:(MUST...): ## ## Group mapping info ## objectclass (

Hello, i?ve some problems setting the initial password for Windows and Unix User with Samba configured to use LDAP as backend. I?ve attached the configuration files and the errors. Creating a new user with net rpc user add "xyz" is working without problem. Using for example GQ as LDAP browser, i can see the account and also getent passwd is showing the entry. I?ve activated ldap

Hi, I've got this cenario in my Suse 9.2 box: samba-3.0.7-5 openldap2-2.2.15-5 smbldap-tools-0.8.4-1 So when I try to logon with a defaul user (winnt) I receive C0000001 error code (unsuficient auth). Here the logs for this request: #/var/log /messages Feb 11 19:59:36 glasgow slapd[6674]: conn=583 op=4 SRCH base="dc=labredes,dc=tre-sc,dc=gov,dc=br" scope=2 deref=0

Hello everybody, if I use Microsoft's Active Directory & Users tool to add a home drive mapping to a users profile, I encounter the problem that ADUC tool cannot create automatically the home directory for the desired user. ADUC tool fails with the message, that the share cannot be accessed. My smb.conf contains: [global] template homedir = /data1/homes/%ACCOUNTNAME [homes]

Hello guys! I'm using samba 3.2.4 (binaries from samba.org) on SLES9+sp3. I am building a PDC with LDAP support (i am attaching my config files), I'm also using ldapsam:trusted and ldapsam:editposix. Although I am setting the account lock after 3 failed tries in usrmgr, and verified that the parameters are actually set in the LDAP, no locking occurs. I started thinking that it was my

Hi Lucas ? Thanks, but the time is in sync on all clients and is updated on login by a login script. There's is no discrepancy in this regard between those clients that work and those that don't. :) ? On Wed 24-04-2013 10:47:?icro MEGAS <micromegas at mail333.com> wrote Check your time sync between clients and server. If the time is not in sync, it can result to Kerberos errors

Hello list, using AD with rfc2307 provisioned and NIS extensions are available. In ADUC tool I choose the group "Domain Admins" and click on the [UNIX Attributes] tab. I activate it for my domain and choose the GID=500. When I execute on my member server "net cache flush && getent group 500" I get the result domain admins:x:500:johndoe,name1,name2 So far so good,

Hey all, according to the whitepaper http://technet.microsoft.com/en-us/library/cc736591%28v=ws.10%29.aspx I would like to a windows shortcut on the desktop that allows me to open and run the "Group Policy Editor" *for my samba4/AD domain*. The shortcut command should be: "gpedit.msc /gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=mydom,

Hi, i have followed the idealx tutorial to the letter, however i get this error when i try to start slapd: ambepdc# /usr/local/etc/rc.d/slapd start Starting slapd. /usr/local/etc/openldap/slapd.conf: line 74: index type "uidNumber" undefined this is my slapd.conf ambepdc# cat /usr/local/etc/openldap/slapd.conf # # See slapd.conf(5) for details on configuration options. # This file

Hi all, I wonder if there are any pro/cons between using Samba4 of Debian's official Wheezy-backports repository which actually is version 4.1.11 -or- using Samba4 of Sernet's official repository which actually is on version 4.1.12 I understand that Sernet's package at that moment is more recent, but recently I had an issue which was Debian/Samba4 related and unfortunately I made

Hi Gruss, Had to ditch the VM and start again. Here is the info: tdbdump secrets.tdb |egrep -v '^data|^}|^{' key(21) = "SECRETS/SID/mydomain" key(18) = "SECRETS/SID/sam3dc" key(42) = "SECRETS/LDAP_BIND_PW/cn=admin,dc=mydomain" key(25) = "SECRETS/DOMGUID/mydomain" key(42) = "SECRETS/MACHINE_SEC_CHANNEL_TYPE/mydomain" key(42) =

Dear Davor, would you please stop abusing this thread? The topic and initially posting is talking of something quite different than Rowland used in his first answer and to what you have replied. Thanks for your understanding. And no, uid and gid is not the same (uid!=gid) Regards, Mirco

Am Montag, 5. März 2018, 22:16:36 CET schrieb Rob Thoman: > Hi Gruss, > > At this stage there is only one server, running 3.6.25 on Ubuntu12.04. > The plan to get LDAP to work on this one. Then add the second server > 4.x and the promote it to BDC and then demote this one. Just a side > info, we didn't want to go tdbsam in both as I read it breaks the > domain trust.

Hello list, I am facing an issue which I cannot explain myself. The roaming profiles don't work for users that are members of the group "Domain Admins". The [profiles] share on the member server was configured exactly as explained on the wiki for roaming profiles. It works like a charm for all domain users, *BUT*: if a user is member of the group "Domain Admins" it

Hi for everybody I upgrade my system, to Fedora COre 1, and now, my ldap service don't 'up'... This's the debug messages: @(#) $OpenLDAP: slapd 2.1.22 (Oct 23 2003 10:23:24) $ root@bugs.devel.redhat.com:/usr/src/build/319319-i386/BUILD/openldap-2.1.22/build-servers/servers/slapd daemon_init: listen on ldap:/// daemon_init: 1 listeners to open...

Hi list, I am experimenting with two member servers (both samba4). I am using following configuration: membersrv:/etc/samba/smb.conf: ========================== [...] username map = /etc/samba/smbmap [...] membersrv:/etc/samba/smbmap: ========================= !root = MYDOM\johndoe MYDOM\foo MYDOM\bar MYDOM\Administrator Administrator So the domain users from my AD called "John Doe",

Samba 4.0.4 installed, provisioned by classicupgrade, running on Debian Squeeze: -------------------------------------------------------------------------------- The issue is, that changes to the roaming profile is not transferred after log ins/outs between Win2K and XP machine. In example: I log into the W2k machine with my testuser and create a "testdir1" and "testdir2" on