similar to: Getent passwd doesn't show Domain Members

On 20/07/16 08:22, Timo Dachs-Wegmann wrote: > Okay, i tried to install the server without winbind but with libnss-winbind. > > Still the same problem. Getent passwd administrator works but the result of getent passwd only shows local users. > This seems to be the same bug as achims. > We are running a Debian 4.8 with samba 4.2 packages... > > A few months ago I installed a

On 20/07/16 11:49, Achim Gottinger wrote: > > > Am 20.07.2016 um 11:33 schrieb Rowland penny: >> On 20/07/16 08:22, Timo Dachs-Wegmann wrote: >>> Okay, i tried to install the server without winbind but with >>> libnss-winbind. >>> >>> Still the same problem. Getent passwd administrator works but the >>> result of getent passwd only

Okay, i tried to install the server without winbind but with libnss-winbind. Still the same problem. Getent passwd administrator works but the result of getent passwd only shows local users. This seems to be the same bug as achims. We are running a Debian 4.8 with samba 4.2 packages... A few months ago I installed a test environement for samba with samba version 4.1.17. There the getent command

We already tried this without success... Kind regards Timo Dachs-Wegmann -EDV- -----Ursprüngliche Nachricht----- Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von Rowland penny Gesendet: Dienstag, 19. Juli 2016 16:30 An: samba at lists.samba.org Betreff: Re: [Samba] Getent passwd doesn't show Domain Members On 19/07/16 13:28, Timo Dachs-Wegmann wrote: > Dear

Well, thank you for your support. I guess you can't tell when debian will release new packages? I think we'll work with the 4.2.10 (4.2.11) packages until debian releases the new version :) Kind regards Timo Dachs-Wegmann -EDV- -----Ursprüngliche Nachricht----- Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von Rowland penny Gesendet: Mittwoch, 20. Juli 2016 17:59

Am 20.07.2016 um 11:33 schrieb Rowland penny: > On 20/07/16 08:22, Timo Dachs-Wegmann wrote: >> Okay, i tried to install the server without winbind but with >> libnss-winbind. >> >> Still the same problem. Getent passwd administrator works but the >> result of getent passwd only shows local users. >> This seems to be the same bug as achims. >> We are

Yes I did setup libnss_winbind. wbinfo -u and -g on the domain member both work: [root at testfsrv ~]# wbinfo -u SAMDOM\testakin SAMDOM\testsina SAMDOM\testigein SAMDOM\administrator SAMDOM\krbtgt SAMDOM\guest [root at testfsrv ~]# wbinfo -g SAMDOM\allowed rodc password replication group SAMDOM\enterprise read-only domain controllers SAMDOM\denied rodc password replication group SAMDOM\read-only

I have an issue that "getent passwd SAMDOM\usrname" returns a blank response. Running "getent passwd" returns all the local users. I cannot determine if the libnss-winbind symbolic links exist. This is a member server running Debian 10 with Samba v4.12.5 via Louis' repos. The Sambawiki /Libnss winbind Links/ page shows Debian x86_64 source location as

Thanks Rowland! My current configs are: DC: # Global parameters [global] dns forwarder = 8.8.8.8 netbios name = TESTBOX realm = SAMDOM.TESTING.COM server role = active directory domain controller workgroup = SAMDOM idmap_ldb:use rfc2307 = yes log file = /var/log/samba/%m.log log level = 3 tls enabled = yes vfs

Hi Rowland, I followed your suggestions and changed the smb.conf file. Currently my smb.conf file looks like below. [global] workgroup = SAMDOM security = ADS realm = SAMDOM.LOCAL wins server = SAMDOM.LOCAL password server = SAMDOM.LOCAL domain master = no local master = no preferred master = no idmap backend = tdb idmap config *:range =

There are two ubuntu 16.04 samba 4.5 servers. Ubuntu ADDC and a Member (ubuntu-dm1) >From Member "wbinfo -u" shows shows users of ADDC >From Member "net ads join -U administrator" was successfull with no errors. The dns A record was added in ADDC. But getent passwd <user> shows no results. DMember's /etc/nsswitch.conf passwd: compat winbind group:

Following the guidance here, https://wiki.samba.org/index.php/Idmap_config_ad, I added idmap lines to my smb.conf file on my Samba 4.7 AD-DC server on Ubuntu 18.04. Samba no longer starts and testparm reports that the idmap ranges for the default * domain and the AD domain are overlapping. Here's my smb.conf file (FWIW, if I don't comment security = ADS, server role is set to Member

I've joined a samba 4.48 (debian stretch) to a Windows 2008R2 AD domain according to https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member It joins OK but I cannot get idmap rid (or autorid) to work idmap config * : backend = autorid idmap config * : range = 1000000-1199999 Nothing is returned for getent "SAMDOM\user" log.winbindd shows: [2017/08/07

On 8/14/20 3:40 PM, Rowland penny via samba wrote: > Hmm, I use Louis's repo and mine is here: > > /lib/x86_64-linux-gnu/libnss_winbind.so.2 > > Try running 'pam-auth-update' as root, it will show the PAM profiles > in use, I have: > > [*] Kerberos authentication > [*] Unix authentication > [*] Winbind NT/Active Directory authentication > [*] Mount

On 29.10.2015 18:49, Rowland Penny wrote: > On 29/10/15 17:27, Viktor Trojanovic wrote: >> >> >> On 29.10.2015 17:54, Rowland Penny wrote: >>> On 29/10/15 16:21, Viktor Trojanovic wrote: >>>> >>>> >>>> On 27.10.2015 16:16, Rowland Penny wrote: >>>>> On 27/10/15 14:58, Viktor Trojanovic wrote: >>>>>>

On 27.10.2015 16:16, Rowland Penny wrote: > On 27/10/15 14:58, Viktor Trojanovic wrote: >> >> >> On 27.10.2015 13:54, Rowland Penny wrote: >>> [...] >>>> Yes, I meant the administrator. I did your suggested change on my >>>> member server and restarted it. 'getent passwd administrator' is >>>> still not returning anything,

On Mon, 8 Jan 2018 20:55:22 +0100 Andrea Rossetti <andy.ros at gmail.com> wrote: > I’ve re-changed > > root at SRVLNXWINTRA01:/home/data# nano /etc/samba/smb.conf > > idmap config COM_SPOLETO : backend = ad > to > idmap config COM_SPOLETO : backend = rid > > root at SRVLNXWINTRA01:/home/data# systemctl restart smbd nmbd winbind > root at

Hi, I just installed a new AD-DC as described in the wiki. Administrator can log on and see the two default-shares. Then I used ADUC from RSAT to create an OU and a user. User can see the shares (and can map them to a drive letter), but is denied to look inside. Same for another share which I added. Even when administrator grants permission to everybody. I read more wiki, which made me to add a

> > If you run getent passwd administrator on a DC, you should get > something like this: > root at dc1:~# getent passwd administrator > SAMDOM\administrator:*:0:10000::/home/administrator:/bin/bash On my DC getent passwd administrator show nothing. :( Is it necessary to map the root user to ADDC as well? There is however a gotcha, on any domain > joined windows machine there

> On 29 Oct 2015, at 20:52, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > >> On 29/10/15 19:27, Viktor Trojanovic wrote: >> >> >>> On 29.10.2015 18:49, Rowland Penny wrote: >>>> On 29/10/15 17:27, Viktor Trojanovic wrote: >>>> >>>> >>>>> On 29.10.2015 17:54, Rowland Penny wrote: