similar to: Samba4 Domain Member Server "Getent show diferents UID"

On 13/06/16 20:14, Rowland penny wrote: > On 13/06/16 19:37, Juan Ignacio wrote: >> Rowland: >> >> I'll use this email from now, the other does not work well. >> >> A few years ago around 2. >> >> We did everything that could be used for NIX and it worked. >> The main DC_AD had been provisioned without rfc2307 and we did later. >>

On 14/06/16 15:36, Juan Ignacio wrote: > I go to answer all, here I go. > > Have you given your users a uidNumber attribute ? > > Not all, but im set it in my user and not work. > > Have you given 'Domain Users' (at least) a gidNumber attribute ? > > Not all, but im set it in my user and not work. > > If you have done the above, have you run 'net cache

On 14/06/16 16:16, Juan Ignacio wrote: > Sorry, this is the Domain Member smb.con > Im using Debian last version. > Samba compiled from the sources. > > [global] > netbios name = XXXXX > security = ADS > workgroup = XXXXXX > realm = XXXXXXX > > log file = /var/log/samba/%m.log > log level = 1 > > # idmap

On 13/06/16 19:37, Juan Ignacio wrote: > Rowland: > > I'll use this email from now, the other does not work well. > > A few years ago around 2. > > We did everything that could be used for NIX and it worked. > The main DC_AD had been provisioned without rfc2307 and we did later. > > The problem is that at that time by not having infrastructure had to > be used

I go to answer all, here I go. Have you given your users a uidNumber attribute ? Not all, but im set it in my user and not work. Have you given 'Domain Users' (at least) a gidNumber attribute ? Not all, but im set it in my user and not work. If you have done the above, have you run 'net cache flush' on the DC ? Yes :-( Is PAM set up correctly on the DC and domain member ?

Sorry, this is the Domain Member smb.con Im using Debian last version. Samba compiled from the sources. [global] netbios name = XXXXX security = ADS workgroup = XXXXXX realm = XXXXXXX log file = /var/log/samba/%m.log log level = 1 # idmap config used for your domain. # Click on the following links for more information # on the

On 14/06/16 18:36, Juan Ignacio wrote: > Traducir del: Inglés > Ok, I have correctly configured the option to use RFC2307 in the > Actide Directory Domain Controller and the option on the member server. > > But anyway still showing bad UIDs. > > Here we show how both configurations are actualemente. > > Within RSAT I can place the UID attribute for example uanaco. >

Rowland, a question. "is to copy idmap.ldap from the first DC to all others and then keep them in sync, the other is to use RFC2307 attributes." I can do the same with my member server? Maybe it works, or not for beign a member server. Maybe i can change my Member Server to a Domain Controller and after use idmap, sync. Its ok? Analista Inf. Juan Ignacio Pazos

On 14/06/16 17:32, Juan Ignacio wrote: > Rowland, a question. > > > "is to copy idmap.ldap from the first DC to all others and then keep > them in sync, the other is to use RFC2307 attributes." > > I can do the same with my member server? Maybe it works, or not for > beign a member server. > > Maybe i can change my Member Server to a Domain Controller and

On 15/06/16 14:49, Juan Ignacio wrote: > Are there any test I can do to see if need to configure something in > the member server? > If you have set up a domain member as show here: https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member If you have given your users a uidNumber attribute and 'Domain Users' a gidNumber attribute, 'getent passwd username'

Traducir del: Inglés Ok, I have correctly configured the option to use RFC2307 in the Actide Directory Domain Controller and the option on the member server. But anyway still showing bad UIDs. Here we show how both configurations are actualemente. Within RSAT I can place the UID attribute for example uanaco. AD Domain Controller wbinfo --user-info = uanaco KENNEDY \ uanaco: *: 3000783: 100:

Yes, im run ´´net cache flush´ on ADDC and MEMBER SERVER. Im using Win10, And Win7 2016-06-14 14:40 GMT-03:00 Rowland penny <rpenny at samba.org>: > On 14/06/16 18:36, Juan Ignacio wrote: > >> Traducir del: Inglés >> Ok, I have correctly configured the option to use RFC2307 in the Actide >> Directory Domain Controller and the option on the member server. >>

The UID of the users in the command output: "getent passwd" remain different in the member server. I give to the user uanaco a gid and a uid throw RSAT. root at memberserver:/usr/local/samba/etc# getent passwd | less uanaco:*:100642:100008:uanaco:/home/ADSERVER/uanaco:/bin/false There is a service besides winbindd need to be running on the member server? I'm currently running all

On 14/06/16 18:46, Juan Ignacio wrote: > Yes, im run ´´net cache flush´ on ADDC and MEMBER SERVER. > > Im using Win10, And Win7 > > > OK, if you are running RSAT on a windows 10 machine, can I suggest you use a windows 7 machine instead, it is my understanding that win10 no longer has the Unix attributes tab. If you use ADUC on a win7 machine, you can install IDMU, this will

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I just set up a Domain with two DCs. I use Debian jessie the debian-pakages. And bind9 also from the debian repositories. After setting up the first DC everything was working fine. The nameresolution of hosts ans SRV-records worked. Then I set up a second DC also everything aut of the debian-box with bind9 as nameserver. The

Hi, I'm doing some tests of samba DC 4.12.0 + MIT (experimental) Kerberos + Bind DNS + Dhcpd + Chronyd on Fedora 32 beta. All work fine except this issue: The dhcp work, and the script for record the name of clients into dns is disable (like Rowland suggest). https://lists.samba.org/archive/samba-technical/2020-February/134875.html If I join a new windows client to domain all work fine and

On 13/06/16 18:01, Jhon P wrote: > > I already have it: > > > # Global parameters > [global] > workgroup = xxxxx > realm = xxxxxxxx > netbios name = TITAN > server role = active directory domain controller > dns forwarder = 200.40.220.245 > allow dns updates = nonsecure and secure > #server services =

Are there any test I can do to see if need to configure something in the member server? 2016-06-14 15:00 GMT-03:00 Rowland penny <rpenny at samba.org>: > On 14/06/16 18:46, Juan Ignacio wrote: > >> Yes, im run ´´net cache flush´ on ADDC and MEMBER SERVER. >> >> Im using Win10, And Win7 >> >> >> >> > OK, if you are running RSAT on a windows

On 14/06/16 16:42, Juan Ignacio wrote: > The structure is as follows. > > AD DC (Samba 4.1)------------------- Member DC (Samba 4.4) > > private/idmap.ldb ----------------- not private/idmap.ldb > > > The idmap.ldb file you found, was this on a secondary AD DC ? > > -No the idmap.ldb i found was in the primary AD DC, im not have a > secondary AD DC, i

Anyway everything seems to work well. The shares are correctly and users recognize them without problems. getent and wbinfo. The main problem is that apparently the Member DC does not get the UID properly containing the user in the ADDC. There is something that can change in the smb.conf the Member DC, I remember a few years ago with the same AD DC we get the UID correctly. 2016-06-14 12:58