similar to: Member Server SeDiskOperatorPrivilege

I switched to rid module of idmapping and now winbind offers all groups and I can set SeDiskOperatorPrivilege. getent group and getent passwd are now working! Am 9. Januar 2015 15:21:32 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 13:47, Tim wrote: >> Hello all, >> >> I have a AD DC based on CentOS7 with sernet samba 4.1.14 with rfc2307

When I switch back to backend ad, getent passwd returns nothing - getent group only returns by adding a dedicated group name. There is at least one user and one group with Id set in ad. Am 9. Januar 2015 16:29:39 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 15:19, Tim wrote: >> I switched to rid module of idmapping and now winbind offers all >>

Definitely. With backend=ad only two user can be seen by getent passwd. Then changing backend=rid, all users are resolved by getent passwd Am 9. Januar 2015 17:09:19 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 15:45, Tim wrote: >> That's what I tried to say. I set the gid/uid attribs in Unix tab. >> >> Am 9. Januar 2015 16:44:28 MEZ,

That's what I tried to say. I set the gid/uid attribs in Unix tab. Am 9. Januar 2015 16:44:28 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 15:40, Tim wrote: >> When I switch back to backend ad, getent passwd returns nothing - >> getent group only returns by adding a dedicated group name. >> There is at least one user and one group with

Sorry, I have to correct: libnss_winbind.so.2 is located in /lib64 Thanks Am 9. Januar 2015 15:21:32 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 13:47, Tim wrote: >> Hello all, >> >> I have a AD DC based on CentOS7 with sernet samba 4.1.14 with rfc2307 >and function level 2008_R2. This one works so far and I can manage the >AD from a

It's definitely a problem with backend ad. I don't know what, but with ad backend I also cannot list rpc rights on the server because it cannot find the user. With rid: no problem. Bug? Am 9. Januar 2015 17:56:59 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 16:48, Tim wrote: >> Definitely. >> >> With backend=ad only two user can be

Interesting: I rebuild everything. But after setting up the DCs they had the same issue - net rpc rights grant can't connect to server 127.0.0.1. I tried the following global parameters in smb.conf: bind interfaces only = yes interfaces = lo eth0 And like magic it worked! Samba is now bind to127.0.0.1?(lo) and eth0 and net rpc rights grant works. Try this also on a member server. Give it a

On 09/01/15 15:19, Tim wrote: > I switched to rid module of idmapping and now winbind offers all > groups and I can set SeDiskOperatorPrivilege. > > getent group and getent passwd are now working! > > > > Am 9. Januar 2015 15:21:32 MEZ, schrieb Rowland Penny > <rowlandpenny at googlemail.com>: > > On 09/01/15 13:47, Tim wrote: > > Hello

On 09/01/15 15:40, Tim wrote: > When I switch back to backend ad, getent passwd returns nothing - > getent group only returns by adding a dedicated group name. > There is at least one user and one group with Id set in ad. > Yes, but do *any* of your AD users have a uidNumber attribute. Rowland > Am 9. Januar 2015 16:29:39 MEZ, schrieb Rowland Penny > <rowlandpenny at

On 09/01/15 15:45, Tim wrote: > That's what I tried to say. I set the gid/uid attribs in Unix tab. > > Am 9. Januar 2015 16:44:28 MEZ, schrieb Rowland Penny > <rowlandpenny at googlemail.com>: > > On 09/01/15 15:40, Tim wrote: >> When I switch back to backend ad, getent passwd returns nothing - >> getent group only returns by adding a dedicated

On 09/01/15 13:47, Tim wrote: > Hello all, > > I have a AD DC based on CentOS7 with sernet samba 4.1.14 with rfc2307 and function level 2008_R2. This one works so far and I can manage the AD from a windows client. > > Now I setup a member server based on CentOS7 with sernet samba 4.1.14 just like the wiki advises with the same smb.conf (realm etc is configured to my needs. I joined

On 09/01/15 16:48, Tim wrote: > Definitely. > > With backend=ad only two user can be seen by getent passwd. Then > changing backend=rid, all users are resolved by getent passwd > > Am 9. Januar 2015 17:09:19 MEZ, schrieb Rowland Penny > <rowlandpenny at googlemail.com>: > > On 09/01/15 15:45, Tim wrote: > > That's what I tried to say. I set

On 15-01-09 09:19 AM, Tim wrote: > It's definitely a problem with backend ad. I don't know what, but with ad backend I also cannot list rpc rights on the server because it cannot find the user. With rid: no problem. > > Bug? I appear to be about 12 hours behind Tim, except that I am using Debian 7.7, and (now) following Louis van Belle's script for making a member server

On 10/01/15 19:27, Tim wrote: > Interesting: > > I rebuild everything. But after setting up the DCs they had the same issue - net rpc rights grant can't connect to server 127.0.0.1. > I tried the following global parameters in smb.conf: > bind interfaces only = yes > interfaces = lo eth0 > > And like magic it worked! Samba is now bind to127.0.0.1 (lo) and eth0 and net

Hello list, I'm stuck since 2 days and I have no clue how to troubleshoot and solve that problem. Any help really really appreciated. Scenario: ========= I am using Samba 4.1.12/sernet on DC1 (172.19.100.1) and DC2 (172.19.100.2) with default [netlogon] and [sysvol] share only. I installed an additional samba4 server with fileserving role which is called MEMBERSRV1 (172.19.100.3), which is

Tim, Thanks for the hint. Usermap for root applied, locally made requests fail now systematically with "Could not connect to server <server address> Connection failed: NT_STATUS_LOCK_NOT_GRANTED" It is kind of improvement :) Random things scare me. -Tom On Tue, Mar 24, 2015 at 7:40 PM, Tim <lists at kiuni.de> wrote: > Hi Tom, > > have a look at this: >

Mark, Below xxx.yyy. is my network prefix. [global] workgroup = DOMAIN realm = DOMAIN.LOCAL server string = Server %v security = ADS client signing = auto client use spnego = yes kerberos method = secrets and keytab log file = /var/log/samba/log.%m log level = 3 max log size = 50 load printers = No printcap name = /dev/null idmap config * :

On 25/03/15 19:40, Tim wrote: > Don't be scared and take the challenge! :-) > > Reduce your smb.conf to the minimum as seen in the member server wiki and try it again. It should work then. > > Am 25. M?rz 2015 14:47:16 MEZ, schrieb "Tom S?derlund" <tom.k.soderlund at gmail.com>: >> Tim, >> >> Thanks for the hint. Usermap for root applied,

Hello, I may have a problem with winbind setup. -with wbinfo -g and wbinfo -u I get all group/user from AD/DC. -with getent group "Domain Users" and getent passwd "remote_user" I can see the info about the specific group and specific user. -with getent group and getent passwd I only see my local group/users. -I believe that using "getent group" and "getent

We’ve just recently moved over to Samba 4. It looks as if “force directory security mode” doesn’t work in samba 4. So I’m trying to setup the Windows ACLs on our groups share. I’ve been working on this for a few days. I’ve read over the docs, it seems like all the google links are purple and I’m still stuck. Hopefully someone here will have an idea. We’re running Windows 2008R2 for our AD