similar to: autorid not working

Thanks Michael, Please see the inline answers. > On Jan 10, 2016, at 5:16 PM, Michael Adam <obnox at samba.org> wrote: > > On 2016-01-10 at 17:58 +0000, Rowland penny wrote: >> On 10/01/16 17:05, Partha Sarathi wrote: >>> >>>> This could have a lot to do with the fact that idmap_rid & >>>> idmap_autorid calculate the uids differently

Sorry, this probably belongs on samba, not -technical, at least for now. On Wed, Apr 8, 2020 at 1:55 PM Nathaniel W. Turner <nate at houseofnate.net> wrote: > I have a configuration that is working correctly with samba 4.8 (in CentOS > 7.6). When I apply the same basic configuration to a system running samba > 4.9 (CentOS 7.7), I see a very strange behavior: The ID mapping for

On 2016-01-10 at 17:58 +0000, Rowland penny wrote: > On 10/01/16 17:05, Partha Sarathi wrote: > > > > > This could have a lot to do with the fact that idmap_rid & > > > idmap_autorid calculate the uids differently i.e if you have RID > > > '2025000', autorid would calculate this as '1102500000' , rid > > > would calculate this as

Show the servers there smb.conf that might help. And your using autorid.. https://wiki.samba.org/index.php/Idmap_config_autorid Drawbacks: User and group IDs are not equal across Samba domain members. TC84\administrator:*:1100500:1100513::/home/administrator at TC84 TC83\administrator:*:1200500:1200513::/home/administrator at TC83 1200500-1100500 = 100000 idmap config * : rangesize =

On 08/01/16 19:30, Partha Sarathi wrote: > adding samba list > > On Fri, Jan 8, 2016 at 10:22 AM, Partha Sarathi <parthasarathi.bl at gmail.com> > wrote: > >> Hi, >> >> >> We have a customer who facing security issues after changing RID idmap >> backend to AUTORID. >> >> >> The History of the issue looks as below, >>

On 10/01/16 17:05, Partha Sarathi wrote: > Thanks for the reply. Now we end-up with mix uid/gid from both ranges > in cache TDBs. Few user logins are denied with below error in smbd.log, > > *[2016/01/07 11:39:44.475960, 1, pid=5202] > ../source3/auth/token_util.c:430(add_local_groups > * > ** SID S-1-5-21-3082371790-1274690562-2878062458-5771 -> > getpwuid(10005771)

L.P.H. van Belle wrote: > start with fixing the overlapping idmap config. > that wont help. I don't think they are overlapping: I used 100,000-999,999 for rid and 1,000,000 to 9,999,999 for autorid. > check again if host.fqdn a and ptr exists in the dns. # dig +short wrn-radtest.ad.example.net. a 192.168.5.83 # dig +short -x 192.168.5.83 wrn-radtest.ad.example.net. > check

Thanks for the reply. Now we end-up with mix uid/gid from both ranges in cache TDBs. Few user logins are denied with below error in smbd.log, *[2016/01/07 11:39:44.475960, 1, pid=5202] ../source3/auth/token_util.c:430(add_local_groups* ** SID S-1-5-21-3082371790-1274690562-2878062458-5771 -> getpwuid(10005771) failed** wbinfo --user-info=mariond mariond:*:10015138:110000513:Marion,

I realize I never followed up with this. The problem here turned out to be that I was doing a "reload" of the samba services (smb, nmb, winbind) to pick up my ID mapping changes in smb.conf. Switching my test case to do a "restart" instead resolved the issue. More details: The test case basically did the following: 1. Join AD using "realm join --client-software=winbind

On 05/11/2019 20:03, Alexey A Nikitin wrote: > On Tuesday, 5 November 2019 01:37:15 PST Rowland penny via samba wrote: >> On 04/11/2019 18:52, Alexey A Nikitin wrote: >>> On Sunday, 3 November 2019 01:41:18 PST Rowland penny via samba wrote: >>>> As I said, you cannot use 'winbind use default domain = yes' with >>>> 'autorid', it makes all

> Am 23.02.2019 um 22:23 schrieb Rowland Penny via samba <samba at lists.samba.org>: >>>>> He also has these: >>>>> >>>>> idmap config * : rangesize = 1000000 >>>>> idmap config * : range = 1000000-19999999 >>>>> idmap config * : backend = autorid >>>>> >>>>> The '*' domain

Hi all, Thanks for the replies. On Thu, Apr 9, 2020 at 3:54 AM L.P.H. van Belle via samba < samba at lists.samba.org> wrote: > Good morning Rowland, > > > -----Oorspronkelijk bericht----- > > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > > Rowland penny via samba > > Verzonden: donderdag 9 april 2020 9:46 > > Aan: samba at

On Sat, 23 Feb 2019 22:45:04 +0100 Ralph Böhme <slow at samba.org> wrote: > > > Am 23.02.2019 um 22:23 schrieb Rowland Penny via samba > > <samba at lists.samba.org>: > >>>>> He also has these: > >>>>> > >>>>> idmap config * : rangesize = 1000000 > >>>>> idmap config * : range = 1000000-19999999

On Sun, Feb 24, 2019 at 06:53:04PM +0000, Rowland Penny via samba wrote: >On Sun, 24 Feb 2019 19:25:14 +0100 >Ralph Böhme <slow at samba.org> wrote: >> Am 24.02.2019 um 18:48 schrieb Rowland Penny via samba <samba at lists.samba.org>: >> >> I'm not really what "there" implies for you, but it seems >> >> idmap_autorid is eventually the

On Sun, 24 Feb 2019 19:56:27 +0100 Viktor Trojanovic via samba <samba at lists.samba.org> wrote: > > On 24.02.2019 19:25, Ralph Böhme via samba wrote: > > Am 24.02.2019 um 18:48 schrieb Rowland Penny via samba > > <samba at lists.samba.org>: > >> On Sun, 24 Feb 2019 18:28:43 +0100 Ralph Böhme <slow at samba.org> > >> wrote: > >>>

On Sun, 24 Feb 2019 19:25:14 +0100 Ralph Böhme <slow at samba.org> wrote: > > Am 24.02.2019 um 18:48 schrieb Rowland Penny via samba > <samba at lists.samba.org>: > > On Sun, 24 Feb 2019 18:28:43 +0100 Ralph Böhme <slow at samba.org> > > wrote: > >> Am 24.02.2019 um 16:42 schrieb Rowland Penny via samba > >> <samba at

adding samba list On Fri, Jan 8, 2016 at 10:22 AM, Partha Sarathi <parthasarathi.bl at gmail.com> wrote: > Hi, > > > We have a customer who facing security issues after changing RID idmap > backend to AUTORID. > > > The History of the issue looks as below, > > 1) When samba configured with RID idmap backend customer requested to > change few permissions,

On 24.02.2019 20:22, Rowland Penny via samba wrote: > On Sun, 24 Feb 2019 19:56:27 +0100 > Viktor Trojanovic via samba <samba at lists.samba.org> wrote: > >> On 24.02.2019 19:25, Ralph Böhme via samba wrote: >>> Am 24.02.2019 um 18:48 schrieb Rowland Penny via samba >>> <samba at lists.samba.org>: >>>> On Sun, 24 Feb 2019 18:28:43 +0100

On 24.02.2019 19:25, Ralph Böhme via samba wrote: > Am 24.02.2019 um 18:48 schrieb Rowland Penny via samba <samba at lists.samba.org>: >> On Sun, 24 Feb 2019 18:28:43 +0100 Ralph Böhme <slow at samba.org> wrote: >>> Am 24.02.2019 um 16:42 schrieb Rowland Penny via samba <samba at lists.samba.org>: >>>> On Sun, 24 Feb 2019 15:58:39 +0100 Ralph Böhme

On Fri, 14 Jun 2024 17:32:30 -0300 Andreas Hasenack via samba <samba at lists.samba.org> wrote: > Hi, > > On Fri, Jun 14, 2024 at 4:44?PM Elias Pereira via samba < > samba at lists.samba.org> wrote: > > > hi, > > > > Knowing the 3 idmap backends (ad, rid and autorid) available to > > configure samba as a domain member, could you give examples