similar to: objectClass:posixAccount missing

El 09/04/15 a les 18:31, Rowland Penny ha escrit: > > If your tools rely on the posix objectclasses being there, then they are > broken. The posix objectclasses are auxiliaries of other AD > objectclasses and as such, no windows tools will add them. but, e.g., samba-tool with --uid will: luca at ubutest:~$ sudo samba-tool user add tararo tarari --use-username-as-cn

Greetings, Rowland Penny! >>> You are using python, which to me is a very big snake, so I bash it :-D >>> I just use these two functions in a bash script: >>> # Finds the next useable user uidNumber or group gidNumber >>> # Input : $1 >>> # $1 : msSFU30MaxUidNumber or msSFU30MaxGidNumber >>> # Output : the first free uidNumber or gidNumber

Greetings, Rowland Penny! > On 10/04/15 08:54, Luca Olivetti wrote: >> El 09/04/15 a les 18:31, Rowland Penny ha escrit: >> >>> If your tools rely on the posix objectclasses being there, then they are >>> broken. The posix objectclasses are auxiliaries of other AD >>> objectclasses and as such, no windows tools will add them. >> but, e.g.,

El 09/04/15 a les 18:39, Rowland Penny ha escrit: > If you want your Unix users to have the same IDs everywhere, you need to > use the RFC2307 attributes, at the moment, how the attributes get into > AD is up to you, use ADUC, samba-tool or write your own scripts. The problem that both Andrey and me are facing (and I'm sure we're not the only ones) is that to manage users with

I don't played much recntly with NetApp filers but as they are supposed to work well with MS AD I expected you don't really needs posixAccount objectClass. So a google search leads me there: https://kb.netapp.com/support/s/article/ka31A0000008hesQAA/how-to-configure-ldap-on-a-filer-to-connect-to-microsoft-s-active-directory-ldap-implementation?language=en_US Perhaps it's not what you

On Thu, 2017-08-17 at 09:08 +0100, Rowland Penny via samba wrote: > On Thu, 17 Aug 2017 09:39:07 +0200 > gizmo via samba <samba at lists.samba.org> wrote: > > > Hello, > > I made an upgrade from sernet-samba 4.3.11 to sernet-samba 4.6.7. > > With samba 4.3.11 all created users contained the objectclass > > "posixAccount". With samba 4.6.7 they

Greetings, Rowland Penny! >> I've added a few domain users/groups for test, but they don't have ?idNumber, >> even though the relevant schema is loaded? >> How can I tell it to include relevant schema for all newly created >> users/groups? >> >> > Well, you could try walking up to the DC and giving it a good talking to > :-D > But seriously,

El 10/05/16 a les 16:03, Maxnux ha escrit: > attribute gecos does not exist > Violación de segmento (`core' generado) > https://bugzilla.samba.org/show_bug.cgi?id=11530 Bye -- Luca Olivetti Wetron Automation Technology http://www.wetron.es/ Tel. +34 93 5883004 (Ext.3010) Fax +34 93 5883007

Hi fellow list users, I'm setting up a 4.0.3 DC and I am observing the following issue: - nsswitch.conf contains winbind for passwd and group - provisioned with use_rfc2307 - creating user with ADUC - creating group - adding Unix Attributes to user and group - 1st part of issue: ADUC throws error message (translated from German XP: "The object properties of the object could not be

El 09/04/15 a les 16:20, Rowland Penny ha escrit: > On 09/04/15 14:58, Luca Olivetti wrote: >> El 09/04/15 a les 14:57, Andrey Repin ha escrit: >>>> Using the RFC2307 attributes, you will get the same ID number on every >>>> Unix machine, whereas if you use the 'rid' backend, whilst you should >>>> get the same ID on each Unix machine, you will

Hello, I made an upgrade from sernet-samba 4.3.11 to sernet-samba 4.6.7. With samba 4.3.11 all created users contained the objectclass "posixAccount". With samba 4.6.7 they don't. We have a NetApp-Storage-Server which exports nfs4-mounts (with kerberos). Yesterday I wanted to change the owner of a directory and "chown" threw an error "invalid argument". It was

Hi!Is it possible to get the samba authenticate a user and map to his homedirectory only using posixaccount or are there some attributes that windows absolutely require like in the samba-objectclasses?Any configuration examples if this is possible.I have been experimenting with pam.d/samba using pam_ldap.so module, but no success so far.Currently I have setup the server so it can authenticate a

Greetings, Rowland Penny! >>>>> well tough, the smbldap-tools were written to do a job, map windows >>>>> users to unix users and vice versa. >>>> No. smbldap-tools were doing exactly the same as AD do: kept all users in one >>>> database. >>>> >>> Similar, but not the same, with smbldap-tools you had Unix and ldap

Hi Luca, thank you very much for the tip. I’ve tried to run it with the filter the web page suggests and I got an empty set. I took a look at one of the user objects and I couldn’t see any samAccountType there. > On 04 Apr 2017, at 19:54, Luca Olivetti via samba <samba at lists.samba.org> wrote: > > El 04/04/17 a les 16:17, Juan García-Pardo via samba ha escrit: >> The

Hi all, I'm new on this list and I'm french, so my english could be worst !;) My question is about sambaSamAccount and posixAccount objectClasses. I want the user "test" be mapped to user root (uid=0, gid=0) when logged into pam over ldap mechanism (such as ssh) And I want the same user "test" be mapped to user test (uid=1003, gid=513) when logged to Samba server.

El 11/10/19 a les 16:59, Luca Olivetti via samba ha escrit: > El 11/10/19 a les 16:12, Rowland penny via samba ha escrit: >> Try running this on a DC: >> >> samba-tool ldapcmp ldap://DC1 ldap://DC2 >> --filter='whenChanged,dc,DC,cn,CN,ou,OU' >> >> Replace 'DC1' and 'DC2' with your actual DC short hostnames >> >> It should

samba 3.0.2 smbldap-tools 0.8.4 RH 9 nss_ldap configured pam_ldap NOT configured LDAP passwd backend winxp pro domain member Hello, i've configured smbldap-tools in smb.conf to manage users from usrmgr.exe. It works at group creation but have a strange behavior in user creation. In the LDAP there are two manually created accounts; Administrador & invitado, both posixAccount and

El 3/9/18 a les 17:13, Rowland Penny via samba ha escrit: > Yes, but it depends on how you run Samba. If you run Samba as a > standalone server you only need to run 'smbd', but running 'nmbd' as > well would be a good idea. > > If you run Samba as a PDC or BDC, the same as a standalone server goes. > > Anything else needs both smbd and winbind running. It

On 01/04/15 18:56, Luca Olivetti wrote: > El 01/04/15 a les 17:59, buhorojo ha escrit: > >> The poster reported that nss doesn't work. Try it. Both getent and id >> return errors with winbind. That's an error with sernet, not sssd. Many >> of the questions on this list are about errors with nss. sssd makes >> those errors go away. > Actually I reported that

Hello, I am doing a samba pdc with ldap. When I try to login to the domain, or access some shares I get this in my ldap logs: Mar 7 16:46:16 localhost slapd[3588]: conn=25 op=4 SRCH base="ou=People,dc=test,dc=org" scope=1 filter="(&(objectClass=posixAccount)(uid=DOMAIN\5CTD))" Mar 7 16:46:16 localhost slapd[3588]: conn=25 op=4 SEARCH RESULT tag=101 err=0 text= My