similar to: Samba4 Domain Member Server "Getent show diferents UID"

I go to answer all, here I go. Have you given your users a uidNumber attribute ? Not all, but im set it in my user and not work. Have you given 'Domain Users' (at least) a gidNumber attribute ? Not all, but im set it in my user and not work. If you have done the above, have you run 'net cache flush' on the DC ? Yes :-( Is PAM set up correctly on the DC and domain member ?

Now I realized what the documentation says, sucessfull. I returned to run the above command and these results changed. Change the settings of smb.conf, now looks: [global] workgroup = KENNEDY realm = kennedy.edu netbios name = PROTEUS server role = active directory domain controller dns forwarder = 200.40.220.245 allow dns updates = nonsecure

Ready changed what you asked me and restart the samba service. Yet I only see the UID instead of domain users. :-/ One question. I do not see the service "winbind or winbindd" running, is this correct. I can not find it in init.d Also "wbinfo -u" Show me the domain users. Thanks for helpme, sorry for noob question. > Date: Sat, 21 Mar 2015 09:00:37 +0000 >

Sorry, this is the Domain Member smb.con Im using Debian last version. Samba compiled from the sources. [global] netbios name = XXXXX security = ADS workgroup = XXXXXX realm = XXXXXXX log file = /var/log/samba/%m.log log level = 1 # idmap config used for your domain. # Click on the following links for more information # on the

Even "getent" does not show me the domain users. Yes, im rember, im install sernet version the first time, after im uninstall it. As we know? if the version of winbind is correct and if the samba daemon running. Regards > Date: Sat, 21 Mar 2015 18:36:13 +0000 > From: rowlandpenny at googlemail.com > To: samba at lists.samba.org > Subject: Re: [Samba] Samba 4.1 gentent,

On 22/03/15 21:55, Jhon P wrote: > The locate libnss_winbind.so display. > > /lib/libnss_winbind.so > /lib/libnss_winbind.so.2 > /lib/x86_64-linux-gnu/libnss_winbind.so > /lib/x86_64-linux-gnu/libnss_winbind.so.2 > /lib64/libnss_winbind.so > /lib64/libnss_winbind.so2 > /usr/lib/x86_64-linux-gnu/libnss_winbind.so > /usr/lib/x86_64-linux-gnu/libnss_winbind.so.2 >

Rowland, a question. "is to copy idmap.ldap from the first DC to all others and then keep them in sync, the other is to use RFC2307 attributes." I can do the same with my member server? Maybe it works, or not for beign a member server. Maybe i can change my Member Server to a Domain Controller and after use idmap, sync. Its ok? Analista Inf. Juan Ignacio Pazos

It will be necessary to join this PDC to the domain? I did this once and it was not me well and I had to restore the backup. The samba documentation does not say anything of this. Remember this isnt a member server this is the PDC, on samba ACDC doc say this: "We do not recommend using the Domain Controller as a file Server. This is due to issues with the winbind internal to the Domain

On 25/02/15 19:31, Brett Wynkoop wrote: > On Wed, 25 Feb 2015 10:18:04 +0000 Rowland Penny > <rowlandpenny at googlemail.com> wrote: > >> >> >> OK, going to need more info here, can you post the smb.conf you >> have tried so far. You mention that you want to use the LDAP and >> Kerberos provided by samba, this will mean that you will need to

RDP working configuration: restrict anonymous = 0 auth methods = sam winbind server services = winbindd, s3fs, rpc, nbt, wrepl, cldap, ldap, kdc, drepl, ntp_signd, kcc, dnsupdate dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, remote, winreg, srvsvc RDP

Yes im have a file: -rw-r--r-- 1 root root 19K Jan 10 2014 libnss_winbind.so.2 My pam: PAM profiles to enable: ? [*] Unix authentication ? [*] Winbind NT/Active Directory authentication ? [ ] ConsoleKit Session Management ? [ ] Inheritable Capabilities Management > Date: Fri, 20 Mar 2015 18:21:57 +0000 > From: rowlandpenny at googlemail.com > To: samba

OK, i try removing this block, and add the line. Restart samba but nothing happends. > Date: Fri, 20 Mar 2015 20:01:04 +0000 > From: rowlandpenny at googlemail.com > To: samba at lists.samba.org > Subject: Re: [Samba] Samba 4.1 gentent, ls, no display domain user name on Primary ACDC but wbinfo -u yes > > On 20/03/15 19:47, Jhon P wrote: > > > > > > Yes im

On 14/06/16 15:36, Juan Ignacio wrote: > I go to answer all, here I go. > > Have you given your users a uidNumber attribute ? > > Not all, but im set it in my user and not work. > > Have you given 'Domain Users' (at least) a gidNumber attribute ? > > Not all, but im set it in my user and not work. > > If you have done the above, have you run 'net cache

I install samba 4.1 from the sources. In Debian 7.0 "wheezy" a year ago. Thanks for responding. From: patocius at hotmail.com To: rowlandpenny at googlemail.com Subject: RE: [Samba] Samba 4.1 gentent, ls, no display domain user name on Primary ACDC but wbinfo -u yes Date: Fri, 20 Mar 2015 17:28:05 +0000 I install samba 4.1 from the sources. In Debian 7.0 "wheezy" a

On 08/05/15 19:36, Rowland Penny wrote: > On 08/05/15 18:51, bar?? tombul wrote: >> RDP working configuration: >> >> restrict anonymous = 0 >> auth methods = sam winbind >> server services = winbindd, s3fs, rpc, nbt, wrepl, cldap, ldap, >> kdc, drepl, ntp_signd, kcc, dnsupdate >> dcerpc endpoint servers =

On 14/06/16 16:16, Juan Ignacio wrote: > Sorry, this is the Domain Member smb.con > Im using Debian last version. > Samba compiled from the sources. > > [global] > netbios name = XXXXX > security = ADS > workgroup = XXXXXX > realm = XXXXXXX > > log file = /var/log/samba/%m.log > log level = 1 > > # idmap

On 08/05/15 18:51, bar?? tombul wrote: > RDP working configuration: > > restrict anonymous = 0 > auth methods = sam winbind > server services = winbindd, s3fs, rpc, nbt, wrepl, cldap, ldap, > kdc, drepl, ntp_signd, kcc, dnsupdate > dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, > netlogon, lsarpc, spoolss, drsuapi,

Im think not provisioned with provisioned with '--use-rfc2307' root at proteus:~# ldbsearch -H /usr/local/samba/private/sam.ldb -b 'dc=kennedy,dc=edu' -s sub '(objectclass=msSFU30DomainInfo)' GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend

On 01/05/15 15:29, Steve Ankeny wrote: > On Samba AD DC most of these enpoint server are already running -- > > dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, > lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, > backupkey, dnsserver, mapiproxy > > Use samba-tool testparm -v first before adding them to the smb.conf > > I say this

On 14/02/15 19:45, Steve Ankeny wrote: > answers below > > On 02/14/2015 02:10 PM, Rowland Penny wrote: >> On 14/02/15 18:05, Steve Ankeny wrote: >>> answers below >>> >>> On 02/14/2015 08:22 AM, Rowland Penny wrote: >>> >>> I've made that change with no change in the results. I've also >>> started 'winbind'