similar to: BUG : ldif "dn" prefixes case sensitivity (and primaryGroupID module)

Hi Coming from Linux, I'm struggling my way through this stuff. e.g. on my domain, the group suseusers has a SID of: S-1-5-21-1463437245-1224812800-863842198-1128 Could anyone give me a yes/no/probably/absolutely-ridiculous on any of these? -User steve has a primaryGroupID: 1128 -steve is a member of suseusers -suseusers was the 128'th SID to be allocated -given only the SID above, you

Hello, I can't get Kerberos authentication works with my Linux clients. Server : samba 4.1.4 (compiled from source) Client : Debian Wheezy with sernet-samba 4.0.17-8 Without Kerberos authentication, everything works : -> the domain users can log with pam_winbind (with ssh, gdm ....). -> "kinit myuser at MYREALM" works fine. -> "wbinfo -K MYDOM\\myuser" works.

Currently, when CIFS users create files these get "Domain Users" as their group. I would appreciate a different group in general and yet another group for some selected users. Googling until my fingers bled I learned that this group is somehow magically encoded in the RID 513 set as primaryGroupID for all users. With Samba3 there used to be commands like 'net groupmap' to

My tool is growing fast and it takes me to the finishing line for setting up my new user database. But nw I came across another strange issue: I'd like to change the primaryGroupID. It is currently set to 513, which simply does not exist. I wanted to set to 100, which exists and actually the user is a member of this group, but then I get the following exception: ldap.UNWILLING_TO_PERFORM:

Hi Samba Team ! My Samba AD DC server run an NFSv4 server so I need correct RFC2307 id mapping between the server and the clients. On the client side it's very easy with the new smb.conf options : idmap config SAMDOM:unix_nss_info = yes idmap config SAMDOM:unix_primary_group = yes But on the server side winbind use the gidNumber of the group corresponding to the user's primaryGroupID.

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Prunk Dump via samba > Verzonden: dinsdag 20 augustus 2019 10:20 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] winbind on DC : how use gidNumber > instead of primaryGroupID as user's primary group > > Le lun. 19 ao?t 2019 ? 12:37, Rowland penny via samba

I try to set up Samba 2.2.4 / LDAP as a PDC and it almost works. The only thing I don't understand is why a domain user can't have a primaryGroupID of 513 (which looks like it should be a safe default). But if I set it, login is denied with an error C0000078 on the client, and something like [2002/06/03 10:32:28, 3] smbd/sec_ctx.c:set_sec_ctx(314) setting sec ctx (65534, 65534) -

On 20/08/2019 11:16, L.P.H. van Belle via samba wrote >> The problem with that is, 'id' gets its info from the same place that >> 'getent' does, so the OP will still get the wrong group ;-) >> >> Rowland > Maybe i did not understand the question then. > In: id username |awk -F"=" '{ print $2 }'|cut -d"(" -f1 > $2 = GID

Le lun. 19 ao?t 2019 ? 11:01, L.P.H. van Belle via samba <samba at lists.samba.org> a ?crit : > > Hai, > > Fist of all, i must say it not very wise to have you NFS server on the AD-DC. > > I do about the same but my NFS server is on a member. > > Have you configured /etc/nsswitch.conf ? > If not do that. > > If you run : id username > I see :

Hello, I am trying to get all the members of a given group. I run this command: #ldbsearch -H /var/lib/samba/private/sam.ldb memberOf=CN=Administrators,CN=Builtin,DC=ejemplo,DC=cu And it works fine. BUT: problems arise when the group name contains spaces, e.g 'Domain Controllers' Then, I run: #ldbsearch -H /var/lib/samba/private/sam.ldb memberOf=CN=Domain

Le mer. 21 ao?t 2019 ? 14:34, Rowland penny via samba <samba at lists.samba.org> a ?crit : > On 21/08/2019 09:04, Prunk Dump via samba wrote: > > Le mar. 20 ao?t 2019 ? 14:30, L.P.H. van Belle via samba > > <samba at lists.samba.org> a ?crit : > >> Hai, > >> > >>> In short. My network design previously work with Debian Stretch >

Le mar. 20 ao?t 2019 ? 14:30, L.P.H. van Belle via samba <samba at lists.samba.org> a ?crit : > > Hai, > > > > > In short. My network design previously work with Debian Stretch > > Servers and clients and some Windows clients (not many). > > > > Debian Stretch use Samba 4.5.16 so there is no unix_primary_group > > option for the clients. So I have

Le mer. 21 ao?t 2019 ? 17:04, Rowland penny via samba <samba at lists.samba.org> a ?crit : > > On 21/08/2019 15:14, Prunk Dump via samba wrote: > > Le mer. 21 ao?t 2019 ? 14:34, Rowland penny via samba <samba at lists.samba.org> > > a ?crit : > > > >> On 21/08/2019 09:04, Prunk Dump via samba wrote: > >>> Le mar. 20 ao?t 2019 ? 14:30, L.P.H.

Mandi! Rowland Penny via samba In chel di` si favelave... > > I'm again a bit confused... ;-((( > Yes I can see that ;-) ;-) Sorry for the late answer, but i was busy on other things... > Hope this helps, but feel free to ask any questions. I try to summarize: a) as i supposed 'RFC2307 group membership' are totally ignored by samba, so i can use RFC2307 schema to

Hi, I've done samba-tool domain classicupgrade from Samba 3.0.9 NT-style domain to Samba 4.3.11 and have issues with SIDs. I have an old SUSE 9 server with Samba 3.0.9 NT-style domain (only this PDC, no BDC). I migrated this samba configuration to Ubuntu 16.04.1 with Samba 4.3.11 and it worked very well. Then I did inplace upgrade to Samba AD DC domain using the following command:

I am setting up a test domain to learn bind, and how it,s working. The master domain is bbb.ttt.domene 10.11.12.13 the child domain ftp.bbb.ttt.domene 10.11.55.77 The thing I don't understand is, why don't the query report additional info (ip address)? Her is two queries(the first the one that troubles me), cut of named.conf, test of zone file, the zone file and cut from log file.

I seem to be having a problem with B3 on my ISDN line, as you can see from the dial string I am having to have asterisk generate ringing else there is no progress indication. -- Executing Dial("SIP/0014A8ACCB83-fd9f", "CAPI/g1/142392203000/ b|40|r") in new stack -- Called g1/142392203000/b -- CAPI/ISDN1/142392203000-0 is proceeding passing it to SIP/

On 21/08/2020 21:40, vincent at cojot.name wrote: > On Fri, 21 Aug 2020, Rowland penny via samba wrote: > >> This works for me: >> >> rowland at devstation:~$ sudo ldapsearch -H >> ldaps://dc01.samdom.example.com -D 'SAMDOM\Administrator' -w >> 'xxxxxxxxxx' -b 'dc=samdom,dc=example,dc=com' >>

Hai, Fist of all, i must say it not very wise to have you NFS server on the AD-DC. I do about the same but my NFS server is on a member. Have you configured /etc/nsswitch.conf ? If not do that. If you run : id username I see : uid=10002(NTDOM\username) gid=10000(NTDOM\domain users) groups=10000(NTDOM\domain users) So my GID and Primary group id are the same. > -----Oorspronkelijk

On 19/08/2019 11:13, Prunk Dump via samba wrote: > Le lun. 19 ao?t 2019 ? 11:01, L.P.H. van Belle via samba > <samba at lists.samba.org> a ?crit : > > > This is a little bit off-thread but why it is not safe to run an NFSv4 > server on a DC ? I know that with a samba file server you have some > restrictions like using only encrypted communication. > > But the NFS