similar to: default idmap range in samba4

Hi, I test (replacement of nslcd ) winbind in member server. I used Samba4/Winbind howto and howto for member server. wbinfo -u and wbinfo -g work fine but getent passwd not work (getent not list user from AD) Why ? Anyone have a idea ? thx St?phane ----------------------------------- St?phane PURNELLE Admin. Syst?mes et R?seaux Service Informatique

Hi all, I have a problem during classic-upgrade : Importing groups Group already exists sid=S-1-5-21-4023731279-819928261-1073345436-512, groupname=Domain Admins existing_groupname=Domain Admins, Ignoring. Group already exists sid=S-1-5-21-4023731279-819928261-1073345436-514, groupname=Domain Guest existing_groupname=Domain Guests, Ignoring. Group already exists

Hi all, I have a question about memory usage and IPC$ share. I'am auditing the swap usage of my server because I already have a problem with a full swap. I see that the smbd process take < 200Mo on swap : Example : PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND 24429 lge 15 0 197m 39m 14m S 0.3 1.0 0:15.17 smbd but some process use more than 200Mo

Hi, I test samba4 on test server. I have an error when samb-too; try to create sysvol directory. samba-tool display a error message "FS don't support ACL" it seems that sysvol directory is created under "locks directory". What are locks directory ? How can I specify a other path for sysvol (path with ACL support) My structure is : Samba installation :

Hi, Sorry for my urgent request, but we have a problem with user who have strange displayname Yesterday (23/02/2014), we do a classic-upgrade from a ldap tree to a DC server. But user with accent have bad displayName and maybe cause problem when user try to connect to her computer. I'm unable to change displayName by ADUC, ldbmodify or ldbedit. GENSEC backend 'gssapi_spnego'

Yes, A DC can have 2 IP... bu when doing classic-upgrade or provision... only one IP must be active. Otherwise DNs config part can choice bad IP, I don't know why but.... regards St?phane Purnelle ----------------------------------- St?phane PURNELLE Admin. Syst?mes et R?seaux Service Informatique Corman S.A. Tel : 00 32 (0)87/342467

Hi all, I have a problem when I try to compil samba 4.0.6 on my test machine (suse linux enterprise server 11 SP2 32-bits). output of compilation : [3353/3781] Linking default/lib/param/libsamba-hostconfig.so [3354/3781] Linking default/lib/tdb_wrap/libtdb-wrap.so [3355/3781] Linking default/libcli/security/libsamba-security.so [3356/3781] Linking default/lib/util/libutil_tdb.so

Hi, I have a big problem. I see that samba 4 don't have bad lockout attempts and if samba don't have this, I cannot deploy samba 4. This setting is a security setting, it's very important. A virus attack can be modered by this setting (password crack) and the security bookfor IS from my compagny says : 11.1.3 User password management 11.1.3.1 Recommendations for access

Hi, I found the source of my problem with set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER (I hope). The problem is dut to winbind. In my ldap tree, I have uid and gid. Why samba 4 don't use theses informations ? In attached file : output of classic-upgrade (debug level 5) I don't want to use winbind. I just want to use pam_ldap or nslcd for have unix information

Hi, My tests on DC server and File/print server have some problem with account management... user access right on home share is very strange. if we use ADUC and home share (not homes) for new user, it work. All howto in samba's wiki ask administrator to use windows tools for manage users and groups and share like home share so... I know that is possible to add unix tab on aduc (already

Hi, My configuration: 1 server with Samba4 as a DC (dc01) 1 server with Samba4 as a file/print server DC seems to work fine. file server is connected to DC using this howto https://wiki.samba.org/index.php/Samba/Domain_Member smbd, nmbd, winbindd is running on file/print server. Bu when I try with a windows client (a windows 2003 server) to connect to file server. client ask for a user

Hi, We test a software called Safekit. This software permit to have a replicated FS and can start some apps from a particular script. We use this startup script for starting SaMBa. We make this test : NODE1 : Samba not actif (SECOND) NODE2 : Samba is running (PRIM) open a file with samba and modify it make swap I try to save and no possible to save, but if I close the file and reopen it it

Hi, I try to install a new driver on my print$ share using APW and I have this message : move_driver_to_download_area: Unable to rename [W32X86/HPDCMON.DLL] to [W32X86/3/HPDCMON.DLL] I have exacltly the same configuration (smb.conf, acl et right) than my older server. Could anyone answer to me and help me ? St?phane ----------------------------------- St?phane PURNELLE

Hi, I try to use nslcd with samba 4 for get suers and group for AD. if I do a ldapsearch, I have a message : Server not in kerberos database if I do a getent passwd, nslcd display same error message. log of samba4: [2013/08/28 10:15:47, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ Administrator at CORMANDOM.INT-CORMAN.BE from

Hi, I make a script which make some call of rsync to connect to a rsync daemon. When I run on a shell, the script work fine. When I run this scripts from a cron-job, the script fail with theses messages : rsync: failed to connect to remote-node: Connection refused (111) rsync error: error in socket IO (code 10) at clientserver.c(94) What's happen ? thanks St?phane

Hi, I have a samba server which act as file/print/wins server and PDC with ldap backend & ACL support (samba-3.0.23). I plan to start a new server which replace the old one. My question is about the samba version, my first advice is the use samba-3.0.28a. But maybe is preferable to wait samba 3.2.0. What type of bugs samba-3.0.28a have ? The new sever will act as samba/print server and

Hello, I use a server with samba 3.0.0 (with acl-support) and LDAP backend (RedHat 8.0 with XFS) . For test, I set to "0" the attribute : sambaPwdCanChange and sambaPwdMustChange When the user would like to logon, the computer propose to change password. If the user says "Yes", the w2k client display a dialog box with username, the domain name, the old password. After the

Hi ! When I create a user with samba-ldap tools, the userRid is calculated if the -x option is set. The userGroupRid is calculated too. But is the groumapping is enabled, the SambaPrimaryGroupSID not correspond with SambaSID of groupmapping Example : Groupe "Domain Users" : gidNumber 100 displayName Domain Users objectClass sambaGroupMapping sambaSID

St?phane, The book "Samba-3 by Example" is being reprinted very soon. Up to date builds of the PDF are available on the Samba web site daily. This document can be downloaded from: http://www.samba.org/samba/docs/Samba-Guide.pdf In chapter 5 I have fully documented how Samba-3 can be deployed with LDAP and using the smbldap-tools. It works perfectly for me and in many sites that

Extract of smb.conf : valid users (S) This is a list of users that should be allowed to login to this service. Names starting with '@', '+' and '&' are interpreted using the same rules as described in the invalid users parameter. If this is empty (the default) then any user can login. If a username is in both this list and the invalid