similar to: groups with cn similar to domain

Hello, i try to create a samba server for more then one trusted domain. I know there were some issues with samba 3.5, and in the internet i always read, i should use samba 3.4. So i wanted to give 3.6 a chance. I first tried autorid with a config like this: winbind enum users = yes winbind enum groups = yes idmap backend = autorid idmap gid = 100000-1499999

yeah > /var/lib/samba/sysvol/hq.kontrast/scripts was i typo hq.internal was correct. uidNumber and gidNumber is set for our own users and group, but not Administrator or Administrators. Today it was an issue again on a member so i test command wbinfo --group-info=group_intern and got the error failed to call wbcGetgrnam: WBC_ERR_DOMAIN_NOT_FOUND Could not get info for group

Am 25.02.20 um 14:30 schrieb Rowland penny via samba: > On 25/02/2020 13:24, Stefan G. Weichinger via samba wrote: >> Am 25.02.20 um 14:16 schrieb Rowland penny via samba: >> >>> Do you have a user.map line in smb.conf ? >>> >>> Something like this: >>> >>> username map = /etc/samba/smb.conf >> It should be more like: >>

Hi everybody, I've searched deeply into the samba wiki and the list for some working examples, but I cannot find my way out, I'm a kind of rough samba user (let's say almost newbie).. so asking help here: This is my setup: DC (samba.my.domain.com <http://samba.my.domain.com/>): CentOS 6.5 with sernet-samba 4.1.6 started in "ad" mode (upgraded successfully from

Am 25.02.20 um 14:51 schrieb Rowland penny via samba: > On 25/02/2020 13:37, Stefan G. Weichinger via samba wrote: >> right now, will retest. >>> OK, I give in, I will alter the wiki page, if you use the 'rid' or >>> 'autorid'? backend, you can use Domain Admins, just do not give Domain >>> Admins a gidNumber. >> 1) why and how could I have

Hi all, I'm using Ubuntu 14.04 samba 4.1.6 packages, attempting to set up a server for file shares AD clients can use. My previous setup was a simple AD join with a user map file (1 to 1 AD to unix user) that i've been migrating for approximately 7 years, and with the last 2003 AD server removed from the network it stopped working (2008 R2 DC's now). After approximately 2 weeks of

net groupmap list ntgroup='Domain Users' Domain Users (S-1-5-21-2934682428-5134513513-42425326-513) -> NTDOM\domain users But i did assign a GID myself. ( GID 10000 ) I noticed this. wbinfo --group-info='Domain Users' NTDOM\domain users:x:10000: wbinfo --gid-info 10000 NTDOM\domain users:x:10000: wbinfo --gid-info 100 NTDOM\domain users:x:100: So i have 2 GID for Domain

On 10/07/17 17:05, Rowland Penny via samba wrote: > On Mon, 10 Jul 2017 14:17:42 +1000 > Tom Robinson via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> I've done a classic upgrade to from samba 3.6.23 to samba 4.6.5 >> bringing across all the user accounts. The samba 3.6.23 we set up >> with smbldap as an NT Domain with OpenLDAP. After a

2015-05-04 13:01 GMT+02:00 Rowland Penny <rowlandpenny at googlemail.com>: > On 04/05/15 04:02, Carl Gherardi wrote: > >> Hi all, >> >> I'm using Ubuntu 14.04 samba 4.1.6 packages, attempting to set up a server >> for file shares AD clients can use. My previous setup was a simple AD join >> with a user map file (1 to 1 AD to unix user) that i've

He did not test : getent passwd username result ? He did test : getent passwd result ok He could test with : wbinfo --own-domain Results: NTDOM And this should show: wbinfo --all-domains Results: BUILDIN HOSTNAME NTDOM Im guessing, the last one wil fail. Things to check. samba idmap setup. nsswitch.conf idmap.conf pam setup. So best option lookt to me upgrade to 4.6.5 and run

> Op 3 jun. 2017 om 23:07 heeft Rowland Penny via samba <samba at lists.samba.org> het volgende geschreven: > > On Sat, 3 Jun 2017 21:49:15 +0100 > Alex Matthews via samba <samba at lists.samba.org> wrote: > >> I feel you have missed the point of my original post, or maybe I >> wasn't clear enough. This is not a freshly provisioned install, this

> That would be idmapd.conf, not idmap.conf Oeps, you correct. Typo there.. And you only might need this when you use nfs. But i dont know if he uses that. # wbinfo --all-domains Yes, the COMPUTERNAME only shows on the member servers. Thanks for the corrections. ;-) Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens

( copy the parts from Rowlands mail ) > I do not have an idmap.conf? it is part of smb.conf A small mixup here, See below. There are 2 idmap definitions ( smb.conf and idmap.conf ) idmap.conf is/should normaly not be needed, this all depends on the setup. More comment below. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Alex >

Hi, I've done a classic upgrade to from samba 3.6.23 to samba 4.6.5 bringing across all the user accounts. The samba 3.6.23 we set up with smbldap as an NT Domain with OpenLDAP. After a lot of effort the classic upgrade worked well but now I'm a bit stuck with idmapping. The new AD DC is running 4.6.5 on CentOS7 and I can connect using ADUC. I set up a separate AD DM on a another CentOS7

On Wed, 7 Jun 2017 17:01:03 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > He did not test : > getent passwd username > result ? > > He did test : > getent passwd > result ok > > He could test with : > wbinfo --own-domain > Results: > NTDOM > > And this should show: > wbinfo --all-domains > Results:

On Thu, 8 Jun 2017 10:41:39 +0100 Alex Matthews via samba <samba at lists.samba.org> wrote: > Rowland - please, don't get in the way of others being constructive to > solving this issue. I do not need to know your opinions. I was being constructive. I will also reply to this and try to be constructive. > > Louis - thanks for your responses. I have just updated to 4.6.4

Hiya, I've run into a problem on a Samba 4.5.8 active directory domain controller. The domain controller seems to work to authenticate against (I have a couple of domain members). However wbinfo throws an error when used locally. My configs are posted at the bottom of the page. # wbinfo -t checking the trust secret for domain SMC via RPC calls succeeded # wbinfo -u <list of domain

On 25/02/2020 13:37, Stefan G. Weichinger via samba wrote: > right now, will retest. >> OK, I give in, I will alter the wiki page, if you use the 'rid' or >> 'autorid'? backend, you can use Domain Admins, just do not give Domain >> Admins a gidNumber. > 1) why and how could I have done that? Sorry, but I cannot remember just what backend everybody uses, in

On 25/02/2020 13:59, Stefan G. Weichinger via samba wrote: > Am 25.02.20 um 14:51 schrieb Rowland penny via samba: >> On 25/02/2020 13:37, Stefan G. Weichinger via samba wrote: >>> right now, will retest. >>>> OK, I give in, I will alter the wiki page, if you use the 'rid' or >>>> 'autorid'? backend, you can use Domain Admins, just do not

After sending the email I realized that I did not mention that while rebuilding the OS, I kept the "old" /srv/samba files. Which in turn kept the old permission settings. I think (could be wrong) that keeping the old SID are now different from the new SID's created while rebuilding to v4.12.6. To answer your DC question: root at dc1:~# wbinfo -s