similar to: getent not displaying builtin groups or users

hi everyone > Yes, but you can add these two lines to smb.conf: > > winbind enum users = yes > winbind enum groups = yes > > This will allow getent to list all users and groups, but is not > recommended if you have a lot of users. > > Rowland thanks the dc's now lists all the domain users and groups. the domain users gid is correct on both dc's the uid

> > OK, lets start with a DC, if you run getent straight after the > provision of the DC, you will only get the local Unix users. To > get anything in AD, you will need to ensure that the libnss_winbind > links exist, see here: > > https://wiki.samba.org/index.php/Libnss_winbind_Links > > Once the links exist and 'winbind' is added to 'passwd' &

hi everyone i have configured 2 domain controllers and a domain member the domain member is joined to the domain and ad and rfc2307 is configured for idmap backend, wbinfo returns domain builtins for groups and users on both the member servers an the dc's nsswitch.conf is configured with winbind, getent only returns local users and groups, is getent also suppose to return the builtins

hi everyone i'm having trouble figuring out why i'm getting NT_STATUS_NO_LOGON_SERVERS errors, i have two samba ad domain controllers running on raspberry pi's i think it a recent problem since an upgrade because i was able to list domain users on a joined member server but now getent only lists local users, i've read that the problem might be due to avahi which i stop with

hi everyone i am trying setup point n print for canon ip7250, i have downloaded the windows driver which comes as an exe file, to retrieve all the setup files from the exe i started the installation then copied the installation files from the tmp folder, then cancelled the installation, i searched through the install files and cab files for drivers and was unable to recognise them, has anyone

hi everyone i have setup and run L.v. Belle's setup-sysvol-bidirectional.sh all seems to be ok except that i cannot id or getent passwd administrator id returns no such user getent returns nothing but samba-tool user list and wbinfo -u returns Administrator in their lists id and getent reports other samba users as normal. i have sssd in my nsswitch.conf, not sure if that makes any difference

Hi everyone my sssd log shows the nsupdate command failing, how do i test ddns separately from sssd to see if the problem is in sssd or samba. shadrock /etc/sssd/sssd.conf ------------------------------------------------- (Fri Aug 1 12:18:30 2014) [sssd[be[tissisat.co.uk]]] [be_nsupdate_timer_schedule] (0x0200): Timer already scheduled (Fri Aug 1 12:18:30 2014) [sssd[be[tissisat.co.uk]]]

Hi all is there a way to retrieve the next available uid from the active directory to apply it as a rfc2307 attribute to a new user ? shadrock

hi Louis thank for the suggestion. first i tried switching back to winbind in nsswitch.conf then getent an id worked as they should so i've cornered the problem down to sssd but i had another problem with the winbind solution the home dir was not being pulled from AD, with a bit of net searching i found this from the samba mail archives Sébastien Le Ray says in smb.conf idmap_ldb:use

hi everyone could someone show me there sasl configuration section in their dovecot.conf, i have postfix and dovecot setup for virtual users (no system users) everything works fine including tls, i have tried various examples off the web for sasl but they either have obsolete parameters or are for a setup with system users, i would prefer to use dovecots sasl implementation. dovecot --version =

hi everyone should my samba 4 ad dc be configured as the local and domain master browser or does this not apply to ad dc ? i ask because using the following command nmblookup -M MYNETBIOSNAME and got a positive name query response from a domain member not the dc, i disabled the domain and local browsing on the domain member reran the nmblookup command, and got a name_query failed to find name

hi everyone installed and joined a second dc following the instructions at https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory both version are 4.8.2 when i try to reset t the Sysvol folder's file system access control lists on the new dc i get the following error sudo samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime):

> On Mon, 21 Nov 2016 13:42:57 +0100 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > >> Hi, >> >> Yes thats correct. >> But try the following. >> Make sure you use the usermapping. >> >> username map = /etc/samba/samba_usermapping >> containing: >> !root = NTDOM\Administrator NTDOM\administrator

Hi everyone following https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller#DHCP_with_dynamic_DNS_updates, on my samba dc i have installed the dhcp package and the samba-dhcpd-updateAUR package there are two unresolved errors that i cannot fix 1 -: Can't create new lease file: Permission denied 2 -: kinit for dynamic DNS failed can anyone offer any suggestions. #

Hi, Yes thats correct. But try the following. Make sure you use the usermapping. username map = /etc/samba/samba_usermapping containing: !root = NTDOM\Administrator NTDOM\administrator Administrator administrator And according to the wiki. (https://wiki.samba.org/index.php/Configuring_Point%27n%27Print_automatic_printer_driver_deployment) For POSIX ACLs: # chgrp -R "SAMDOM\Domain

> Re: [Samba] smb.conf root preexec ?.eml > > Subject: > Re: [Samba] smb.conf root preexec ? > From: > Rowland Penny <rpenny at samba.org> > Date: > 25/07/2018 08:26 > > To: > samba at lists.samba.org > > > On Wed, 25 Jul 2018 02:58:29 +0100 > niya via samba<samba at lists.samba.org> wrote: > >>> Subject: >>> Re:

Hi Rowland > The problem is that the DC just provides authentication and yes, whilst > I suppose you could place a script in netlogon to do what you require, > there are better ways of doing this, autofs, pam-mount or pam-script, > so I suggest you investigate these, I would start with the last one > first. > > Rowland > i sat back and had a think for a while and decided

> Subject: > Re: [Samba] Samba AD domain member and home directory creation > From: > Denis Cardon <dcardon at tranquil.it> > Date: > 09/02/2017 19:07 > To: > Dario Lesca <d.lesca at solinos.it>, Samba List <samba at lists.samba.org> > > Hi Dario, > > > On a Centos 7 minimal fresh install I have follow this howto: > > > >

> >/$ sudo getfacl /smb/Printer_drivers/ />/getfacl: Removing leading '/' from absolute path names />/# file: smb/Printer_drivers/ />/# owner: root />/# group: domain\040admins />/# flags: -s- />/user::rwx />/group::rwx />/other::r-x />/default:user::rwx />/default:group::rwx />/default:group:domain\040admins:rwx />/default:mask::rwx

Hi List, I am trying to setup samba PDC and samba file server for a small organization. I followed guidelines on samba wiki and Arch Linux wiki. I have two servers (10.21.0.2 PDC and 10.21.0.1 (file server) both with samba 4.10.6 installed. I joined 10.21.0.1 as domain member and decided to use idmap_ad backend and store uid and gid numbers on PDC. Now I have problems with id mapping