similar to: Man page for idmap_rid

On Mon, Aug 8, 2016 at 5:06 PM, Michael Adam <obnox at samba.org> wrote: > On 2016-08-08 at 16:31 -0300, francis picabia wrote: > > I'm reading the man page for idmap_rid over and over and I can't > understand > > it. I think it needs a rewrite so a normal user can understand. Using a > > practical example. > > I admit it is a little terse. > But

On 2016-08-08 at 16:31 -0300, francis picabia wrote: > I'm reading the man page for idmap_rid over and over and I can't understand > it. I think it needs a rewrite so a normal user can understand. Using a > practical example. I admit it is a little terse. But in principle, assuming a little bit of general knowledge about how idmap backends are configured (see man smb.conf),

On Tue, Aug 9, 2016 at 10:21 AM, Rowland Penny <rpenny at samba.org> wrote: > On Tue, 9 Aug 2016 09:37:13 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > Thanks for the detailed response. > > > > It is very extensive for my purposes, but it still feels over > > analytical for what we need. I believe the Unix UID doesn't exceed >

On Tue, Aug 9, 2016 at 2:48 PM, Michael Adam <obnox at samba.org> wrote: > On 2016-08-09 at 11:58 -0300, francis picabia via samba wrote: > > On Tue, Aug 9, 2016 at 10:21 AM, Rowland Penny <rpenny at samba.org> wrote: > > > > > On Tue, 9 Aug 2016 09:37:13 -0300 > > > francis picabia <fpicabia at gmail.com> wrote: > > > > > >

On Tue, Aug 9, 2016 at 3:07 PM, Jeremy Allison via samba < samba at lists.samba.org> wrote: > On Tue, Aug 09, 2016 at 07:50:12PM +0200, Michael Adam via samba wrote: > > On 2016-08-09 at 17:58 +0100, Rowland Penny via samba wrote: > > > On Tue, 9 Aug 2016 13:37:18 -0300 > > > francis picabia <fpicabia at gmail.com> wrote: > > > > > > >

On Wed, Aug 10, 2016 at 11:04 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Wed, 10 Aug 2016 10:42:11 -0300 > francis picabia via samba <samba at lists.samba.org> wrote: > > > > > On a few dozen systems running Linux and Solaris and in production, > > MYDOM\username = username as far as we are concerned. It isn't > > unique

On Tue, Aug 9, 2016 at 4:56 PM, Steve Ankeny via samba < samba at lists.samba.org> wrote: > On 08/09/2016 03:29 PM, francis picabia via samba wrote: > >> We've modified our smb.conf shares about 10 years ago to have >> valid users with MYDOM\user and it has worked very well. It is >> still working well for the most part. >> > > 10 years ago Samba was

On Tue, 9 Aug 2016 09:37:13 -0300 francis picabia <fpicabia at gmail.com> wrote: > Thanks for the detailed response. > > It is very extensive for my purposes, but it still feels over > analytical for what we need. I believe the Unix UID doesn't exceed > 65534. If this is a constant, why don't we just produce an example > for that? Out of the box, this is what

On 2016-08-09 at 17:58 +0100, Rowland Penny via samba wrote: > On Tue, 9 Aug 2016 13:37:18 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > > > > getent passwd username > > > > (or "theusername") is not the literal command. I substitute > > 'username' here to protect the user id. > > genent passwd on the user

On Mon, 8 Aug 2016 16:31:09 -0300 francis picabia <fpicabia at gmail.com> wrote: > I'm reading the man page for idmap_rid over and over and I can't > understand it. I think it needs a rewrite so a normal user can > understand. Using a practical example. > > Step 1: determine the highest UID in use for your /etc/passwd file > (can we assume everyone has a passwd

On 2016-08-09 at 11:58 -0300, francis picabia via samba wrote: > On Tue, Aug 9, 2016 at 10:21 AM, Rowland Penny <rpenny at samba.org> wrote: > > > On Tue, 9 Aug 2016 09:37:13 -0300 > > francis picabia <fpicabia at gmail.com> wrote: > > > > > Thanks for the detailed response. > > > > > > It is very extensive for my purposes, but it

On Tue, Aug 9, 2016 at 12:29 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 11:58:42 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > > > $ smbclient -L //debian2 -U username > > Enter username's password: > > session setup failed: NT_STATUS_UNSUCCESSFUL > > > > > > > When I do a

On Wed, Aug 10, 2016 at 12:17 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Wed, 10 Aug 2016 11:36:45 -0300 > francis picabia via samba <samba at lists.samba.org> wrote: > > > On Wed, Aug 10, 2016 at 11:04 AM, Rowland Penny via samba < > > samba at lists.samba.org> wrote: > > > > > On Wed, 10 Aug 2016 10:42:11 -0300 >

Hello, I've inherited a set of servers running Red Hat Enterprise Linux Server release 5.9. They have some variant of samba 3.3 on them (e.g. Version 3.3.8-0.52.el5_5.2). These servers are using Samba and Winbind as a way to bind to our Active Directory environment as domain members. We also have a domain member file server running the following: Red Hat Enterprise Linux Server release 5.6

Hi, I don't think that rid backend will work, because when we start samba (samab 2.2.8a) lower uid was 1000, but when we moved to samba 4, power uid was put to 10000. That's mean new user and group use uidNUmber or groupNUmber > 10000. But we have old account and group with uid or gid < 10000 regards Stéphane Purnelle "samba" <samba-bounces at

On Tue, Aug 9, 2016 at 3:35 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 15:21:53 -0300 > francis picabia via samba <samba at lists.samba.org> wrote: > > > I've been working with the third statement being true and exercising > > the rid option. > > Can I suggest you put it back, or add the RFC2307 attributes and use

On Thu, Jun 29, 2017 at 2:36 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > > > Your problems lie here: > > idmap config * : range = 16777216-33554431 > idmap config * : backend = rid > > Why use the range '16777216-33554431' ? > On a working Debian system with Samba 4.1, we have things working OK with: idmap config MYDOM : range

Hi, A account created with samba3/ldap (created before 2014-02-20): SID: S-1-5-21-XXXXXXXXXX-XXXXXXXXX-XXXXXXXXXX-3216 UidNumber : 1108 A account created with Users and computers (samba 4 AD DC) SID: S-1-5-21-XXXXXXXXXX-XXXXXXXXX-XXXXXXXXXX-5878 uidNumber : 10023 My actual config (in file-server) : idmap config XXXXXX:backend = ad idmap config XXXXXX:schema_mode = rfc2307 idmap config

On Tue, Aug 9, 2016 at 1:58 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 13:37:18 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > > > > getent passwd username > > > > (or "theusername") is not the literal command. I substitute > > 'username' here to protect the user id.

On 08/09/2016 03:18 PM, Rowland Penny via samba wrote: > On Tue, 9 Aug 2016 16:04:04 -0300 > francis picabia via samba <samba at lists.samba.org> wrote: > >> On Tue, Aug 9, 2016 at 3:35 PM, Rowland Penny via samba < >> samba at lists.samba.org> wrote: >> >>> On Tue, 9 Aug 2016 15:21:53 -0300 >>> francis picabia via samba <samba at