similar to: Consistent Inter-Samba UID/GID Mappings

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I notice that there are a few registry updates required for Windows 7 when using Samba as a AD DC (according to the Samba wiki). However I've been able to join a Windows 7 workstation to my Samba4 domain without using any registry tweaks; am I likely to encounter problems? What I've read suggests that these settings are required to

Greetings everyone, I am currently in the process of trying to setup Samba4 as an Active Directory DC. My environment contains about 50% of Windows workstations, and 50% of Centos servers/Ubuntu workstations. Everything setup quite nicely, with Windows workstations and Linux machines being able to logon with a domain user. The problem I have is I can't seem to be able to get consistent UIDs

Hi, My Samba 3.6.6 file server isn't setting the security.NTACL extended attribute. It can set the user.DOSATTRIB without any issue. This appears to be an LXC container issue, as outside the container I can set this using the setfattr command without issue, whereas I can't do this inside. Despite this not being a Samba issue, I was wondering whether anybody has any encountered

I have setup a Zentyal 3.2 Samba4 AD. I am using RSAT to administer the AD server. Windows7 and Linux (CentOS) clients are able to join the AD; uid/gid of directories/files show up as per the definitions in Samba4. With Mac OS X clients, there is a problem. The OS X nodes are able to join the domain (quite a few blogs on this subject). The AD connection shows green button. The AD user is

I have 3 Samba 4 Domain Controllers and 1 Member server, been running in production for almost a year and very pleased with the results so far. I have winbind installed and working on all of my servers and I am also quite happy with that as well, except that the inconsistent uid and gid mapping is starting to cause some problems for me. I have done a fair bit of research and I think I would

I am trying to get out Linux boxes to authenticate against our AD domain. We have that part working just fine using Kerberos and winbind. The problem is when we use NFS on multiple machines. As you could guess, the UIDs and GIDs are not consistent across all of the machines. From what I have been reading on the internet, this seems to be common problem, but all the solutions that I have found

On 10/12/14 12:21, rintimtim at gmx.net wrote: > Thanks for the advice of copying the idmap.ldb. That works. > After adding zum users the uid and gid begin to differ again. I read > that it is not recommended to run a DC as a fileserver but in my case > it's not really an option. It's a network of twelve clients, so four > servers are incommensurate to this amount of

Hello, Must idmap.ldb be copied and pasted to all DC's each and every time a user has been added or deleted? Can rysnc be setup to copy this file every time it senses a change? I'm currently using rfc2307 on all DC's. My understanding is this is just for unix user ID and GID mapping. XID's are stored in idmap.ldb. Thanks. -- -James

But will this idmap.ldb change work for upcoming new users or groups so that uid/gid will not be different? The wiki tells us about built-in groups. Those have the right ids. Am 9. Dezember 2014 23:03:44 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/12/14 21:07, Tim wrote: >> Hello all, >> >> I have a fresh install of two CentOS 7 machines. On

I found this. But I didn't find it related to DC idmapping replication. I have two pieces of hardware. My goal is realize an active directory for the windows clients and a file server. The AD should have redundancy (this is why I provisioned two DCs). The file should integrate snapshots like a NetApp system (snapshots are done by rsnapshot). The snapshot functionality works so far by mounting

On 10/12/14 14:39, Tim wrote: > I found this. But I didn't find it related to DC idmapping replication. > > I have two pieces of hardware. My goal is realize an active directory > for the windows clients and a file server. The AD should have > redundancy (this is why I provisioned two DCs). The file should > integrate snapshots like a NetApp system (snapshots are done by

With a smb.conf like the following where does samba store the UID to GID mappings? Is there a way to view this? Also can't I use a method that converts SIDs to UIDs and GIDs on a consistent basis? Thanks Mark #======================= Global Settings ===================================== [global] workgroup = XXX server string = Samba Server security = ads encrypt passwords

Hello again, my server crashed today. It crashed because it ran out of file handles, which is not Samba's fault but mine. The server runs Suse 7.2 and Samba 2.5.5 with WInbind installed. The sever crash didn't effect any file systems, because I managed to properly shut the server down. The problem is that after I rebooted, some or all of the SID - uid/gid mappings got mixed up; e.g. gid

Am 02.10.2016 um 12:24 schrieb Rowland Penny via samba: > On Sun, 2 Oct 2016 11:45:15 +0200 > Achim Gottinger via samba <samba at lists.samba.org> wrote: > >> >> Am 02.10.2016 um 08:20 schrieb Trenta sis via samba: >>> Hi, >>> >>> I have a samba 4.4.5 AD domain and is working perfect, but now I >>> need to add a second samba 4 AD, I

On Fri, 21 Oct 2016 16:59:07 +0000 (UTC) Ricardo Pardim Claus via samba <samba at lists.samba.org> wrote: > Dear, > I have 2 DC's Samba4.4.5. > I realize that there is a difference in mapping groups gid mappings. > The /etc/nsswitch.conf are equal in DC's. > I found difference in the smb.conf of DC's. > The DC2 shows the name of winbind groups. The DC1

On Fri, 12 Aug 2016 10:42:54 -0700 (PDT) rawi via samba <samba at lists.samba.org> wrote: > > > Just provisioning with --rfc2307 isn't enough, you personally need > > to add any required RFC2307 attributes. > > But you see my test user has his attributes. From samba-tool. Do you > mean the basic objects, the templates for the user and group? If yes, > how to

Hi, My question is that I don't know if I'm using builtin winbind... we use samba 4.4.5 from sources.. I'm using builtind winbind or not, and I have to make tdbbackup...? Thanks 2016-10-02 10:25 GMT+02:00 Rowland Penny <rpenny at samba.org>: > On Sun, 2 Oct 2016 08:20:33 +0200 > Trenta sis via samba <samba at lists.samba.org> wrote: > > > Hi, > >

Hello all... Im trying to fix a idmap setup with winbind where the idmaps are stored in openldap. We have had this system working before, but it managed to break :-) All systems running Samba (3.0.13 on FC2) Problem: group id's and uid's (specificly uid's) are inconsistent between clients (our two test clients). Both machines are using idmap backend to talk to our ldap server and

Hi, I would have filed this as a bug but bugs.xiph.org doesn't seem to work (despite quite enthusiastically claiming to :)). So here goes: I'm seeing quite a few wakeups/sec in icecast2 2.3.2 on Debian Testing. In fact, whether icecast is doing anything or not, powertop reports 44.3 wakeups per second. This is pretty big number, on my laptop it means icecast alone is responsible for

On 10/12/14 16:33, Tim wrote: > I think I will only need uid and gid due to fs stuff. There are only > Windows clients in that domain. > So when the IDs are the same on both DCs, all will be fine I think. > > In RSAT there are no Unix attributes set. As an example: user1 has uid > 3000021 on DC1 (first provisioned one). DRS seems fine. On DC2 user1 > gets uid 3000017. >