similar to: What does idmap_ldb:use rfc2307 = yes do exactly?

Hi, http://tools.ietf.org/html/rfc2307 It is used to pull down UNIX information from active directory (namely uid, gid, homedir, shell). Support is partial on domain controller since shell & homedir can only be set through * template parameters in smb.conf despite rfc2307 being used. Shell & homedir are correctly fetched on member servers. Regards, Le 04/06/2015 18:30, buhorojo a

Correct me if I'm wrong? You say that by RSAT and NIS I add a uid and gid for each user in the DC. As mentioned here: https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Check_if_RFC2307_is_used_by_your_Domain_Controllers If I do this, users are added to the passwd file on the domain controller or saved to the db sam? Im go to try this tomorrow. That big problem is not

Hello, I've finished a new HowTo this week (please proofread): https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC Regards, Marc

We just updated our configuratiosn to have multiple NIS servers, when we initiated a test of client failover, we were disapointed. It seemed that the only way to get a filaover was to /etc/init.d/ypbind restart. It behaves as indicated in http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=5084845 using ypbind-1.17.2-13 on Centos 4.5 / Linux xxxxxxxxxxxx 2.6.9-55.0.12.ELsmp #1 SMP Fri Nov

On 23/03/15 21:37, Jhon P wrote: > Correct me if I'm wrong? > > You say that by RSAT and NIS I add a uid and gid for each user in the DC. NO, you need to add a 'uidNumber' attribute to each user that you want to be visible to Unix, you also need to add a 'gidNumber' attribute to the groups that you want to be visible, at a minimum 'Domain Users'. These are

Hello all, I've just installed Samba 3.6.6 from the Debian Stable repo. I want to use this linux box as a smb file server for windows clients. I installed NSLCD to allow users in AD to authenticate against my linux server per https://wiki.samba.org/index.php/Local_user_management_and_authentication/nslcd getent passwd and getent group returns domain users with UID mappings like: tempuser

In what scenario should I use idmap_ldb:use rfc2307 = yes ? For what purpose ? I don?t see any use for it then. LP On Jun 11, 2024 at 16:56 +0100, samba at lists.samba.org <samba at lists.samba.org>, wrote: > > You could actually, but then you must never set 'idmap_ldb:use rfc2307 > = yes' on any DC. It is mutually exclusive, you either don't give > Domain Admins a

On Tue, 11 Jun 2024 17:02:58 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > In what scenario should I use idmap_ldb:use rfc2307 = yes ? For what > purpose ? Good question. The only real use could be if you are adding rfc2307 attributes to AD AND using the DC as a fileserver (not recommended) AND also running Unix domain members using the 'ad' idmap

On Tue, 11 Jun 2024 17:25:59 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Me neither. AND only if you need to sync files from a DC to a member > server or viceversa, so uids and gids match. Otherwise I?d say no use. > > Why idmap_ldb:use rfc2307 = yes? by default then??when provisioning > with rfc2307 ? I have no idea, before my time. It was added in

Me neither. AND only if you need to sync files from a DC to a member server or viceversa, so uids and gids match. Otherwise I?d say no use. Why idmap_ldb:use rfc2307 = yes? by default then??when provisioning with rfc2307 ? We are giving instructions to new users how to set up AD idmapping and it is so very complicated because of this, the documentation is confusing at times. If using AD idmap ,

Let me know if I got this right. Are you saying "--use-rfc2307 ? when provisioning is no longer needed ? And the rfc2307 attributes will still be there ? Again, we are telling people how they need this if they plan to use AD mapping, but now it seems they don?t ? Correct ? If we provision without "--use-rfc2307 ?, then no ?idmap_ldb:use rfc2307 = yes? lines in smb.conf in DCs, then

On Tue, 11 Jun 2024 18:08:10 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Let me know if I got this right. > > Are you saying "--use-rfc2307 ? when provisioning is no longer needed > ? And the rfc2307 attributes will still be there ? Yes, the rfc2307 attributes are part of the standard AD schema. > > Again, we are telling people how they need

Correct, and I have done so and explained extensively at the beginning to this thread. Question is: Should we stop telling people to provision with idmap_ldb:use rfc2307 = yes ? And if we do, Should we stop telling people not to give guiNuber to ?Domain Admins? if using AD ? Rowland, can you think how many (hundreds) of times have you had to explain the ?ID_TYPE_BOTH? thing ? Imagine putting

On 12/06/24 04:12, Rowland Penny via samba wrote: > On Tue, 11 Jun 2024 17:02:58 +0100 > Luis Peromarta via samba <samba at lists.samba.org> wrote: > >> In what scenario should I use idmap_ldb:use rfc2307 = yes ? For what >> purpose ? > > Good question. The only real use could be if you are adding rfc2307 > attributes to AD AND using the DC as a fileserver

On Thu, 20 Jun 2024 08:40:07 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Thu, 20 Jun 2024 10:06:02 +1200 > Douglas Bagnall via samba <samba at lists.samba.org> wrote: > > > On 12/06/24 04:12, Rowland Penny via samba wrote: > > > On Tue, 11 Jun 2024 17:02:58 +0100 > > > Luis Peromarta via samba <samba at lists.samba.org>

Yes. The rf2307 attributes are part of the Samba AD schema. You don?t need the line in the DC unless under very exceptional circumstances. If you are not sure if you need the line, this means you don?t need the line. It will make your life easier. LP On Jun 20, 2024 at 11:40 +0100, Olaf Fr?czyk <olaf at navi.pl>, wrote: > > The question is, if without the option "use

hello, So the idmap_ldb:use rfc2307 = yes in smb.conf is only used on the "first" provisioned DC, and it's not necessary on the others that have joined? If another DC has taken over the FSMO roles, does only that DC need to have the entry? Thanks! On Fri, Jun 21, 2024 at 4:44?AM Marco Gaiarin via samba < samba at lists.samba.org> wrote: > Mandi! Christian Naumer via

Mandi! Christian Naumer via samba In chel di` si favelave... > It is the same for the ID backends on member servers. RID should be the > one recommended for all "Newbies". Giving all those options you can use > is very "Open Source" but is also what makes it hard vor beginners. > Still at least I would like to have the information about rfc2307 still > in

The question is, if without the option "use idmap_ldb:use rfc2307 = yes"? I will be able to set the uid, uidNumber, unixHomeDirectory and gid on the DC, as I can do it now? NAVI Sp. z o.o. Promienista 5/1 60-288 Pozna? mobile: +48609769035 phone: +48616622881 fax: +48616622882 http://www.navi.pl On 2024-06-20 12:32, Luis Peromarta via samba wrote: > This looks OK, and is a member

On 2024-06-20 14:04, Rowland Penny via samba wrote: > On Thu, 20 Jun 2024 13:49:41 +0200 > Olaf Fr?czyk via samba <samba at lists.samba.org> wrote: > >> This samba uidNumbers are from times, when local linux users started >> from 500 and I assumed that starting 1000 for samba will be enough, >> this was 20 years ago or more. > Yes, some distros did start IDs