similar to: Samba and AD based home shares are visible but not accessible

On Tue, 11 Jul 2017 17:20:05 +0000 "Cybulski, Adam M" <acybulski at albany.edu> wrote: > That’s a very discouraging answer. I'm really struggling to get the > hang of this server, and doing a lot of reading and research, I'm > using SSSD because it seemed to be the best method for allowing an AD > group log in privileges on the machine, it's recommended by

On Tue, 11 Jul 2017 20:03:33 +0000 "Cybulski, Adam M" <acybulski at albany.edu> wrote: > Thanks Roland, I'm giving it a go with winbind. Do I have to remove > SSSD and drop off the domain to make it work? I would do both. > I've tried following > the steps to join as a member server, but it's not gone that > smoothly. I may try from the beginning with

Thank you for your prompt response, Rowland. The idmap_rfc2307 isn't working (yet) for me. I'm working down that path now, however I do need the homedir parameter from RFC 2307. ../../source3/auth/auth_util.c:1946(check_account) check_account: Failed to convert SID S-1-5-21-2286752186-3697686403-1823448917-102506 to a UID (dom_user[UNIV\someusername]) I have considered setting up a

Hello all, We have been working on the idmap_rfc2307 solution for this. Packet traces on the Samba server and the LDAP server don't show any communication between Samba and the LDAP server at any point. (Configuration below). Samba logs are set at 10 and the error message is consistent: ../../source3/auth/auth_util.c:1946(check_account) check_account: Failed to convert SID

I had a side suggestion from a list member whether nslcd was a possibility, using winbind for the authentication and nslcd to get the rfc2307 attributes. This was essentially my approach since nslcd and SSSD are performing the same role - connecting to an LDAP server for RFC2307. I have SSSD working with RHEL. RHEL has dropped NSLCD packages in favor of SSSD, but they are still available in

I have this working using "idmap_script" for the idmapping (homegrown script). I authenticate vs Active Directory and use SSSD to talk to OpenLDAP on the backend for group membership and posix attributes (homedir mostly). My nsswitch.conf looks like this: passwd: sss files systemd group: sss files systemd ID mapping is done very simply (my script is VERY short and for now

Thanks for your response, Andrew. I haven't had success with the NSS idmap (yet). My Samba server is using SSSD for passwd and group: passwd: sss files systemd group: sss files system This works on the local system and for NFS mappings, but Samba won't pick up the initial userid. Which packages are you using to provide LDAP in your nsswitch.conf? Failed to convert SID

Shannon, We run Samba similar to what you describe. Here are excerpts from our smb.conf: [global] security = ads allow trusted domains = no idmap config * : backend = tdb idmap config * : range = 1000000-1999999 idmap config ONID : backend = nss idmap config ONID : range = 1000-999999 # our users in LDAP have uidnumbers in this range

I'm using the libnss-ldapd, libpam-ldapd, and nslcd packages. These replaced the old nss-ldap and pam-ldap software from a long time ago. Andy ________________________________ From: Shannon Price <pricesw at auburn.edu> Sent: Wednesday, May 14, 2025 2:34 PM To: Morgan, Andrew J <morgan at oregonstate.edu>; samba at lists.samba.org <samba at lists.samba.org> Subject: RE:

On Fri, 2 May 2025 21:40:38 +0000 Shannon Price via samba <samba at lists.samba.org> wrote: > > > We do not run our campus Active Directory, but our Linux clients > authenticate against it. There are several different Unix-based > environments on campus, so we cannot use the RFC2307 fields from AD > anyway since the answers would not be the same for each group. We >

Is all of your authentication vs an actual Active Directory server, separate from the LDAP server? Also, what type of LDAP server (OpenLDAP? FreeIPA? Other?) and is the LDAP server also Debian? -- Shannon From: Morgan, Andrew J <morgan at oregonstate.edu> Sent: Wednesday, May 14, 2025 4:40 PM To: Shannon Price <pricesw at auburn.edu>; samba at lists.samba.org Subject: Re: [Samba]

Hi, Each time i try tou use vhost_net, i'm facing a kernel bug. I do a "modprobe vhost_net", and start guest whith vhost=on. Following is a trace with a kernel 2.6.37, but i had the same problem with 2.6.36 (cf https://lkml.org/lkml/2010/11/30/29). The bug only occurs whith vhost_net charged, so i don't know if this is a bug in kvm module code or in the vhost_net code. Feb

Hi, Each time i try tou use vhost_net, i'm facing a kernel bug. I do a "modprobe vhost_net", and start guest whith vhost=on. Following is a trace with a kernel 2.6.37, but i had the same problem with 2.6.36 (cf https://lkml.org/lkml/2010/11/30/29). The bug only occurs whith vhost_net charged, so i don't know if this is a bug in kvm module code or in the vhost_net code. Feb

Dear all, Since some weeks, look like the following CRAN mirrors are no longer accessible for package update: http://cran.univ-lyon1.fr http://mirror.ibcp.fr/pub/CRAN/ > update.packages(ask='graphics',checkBuilt=TRUE) Warning: unable to access index for repository http://cran.univ-lyon1.fr/bin/windows/contrib/2.14 update.packages(ask='graphics',checkBuilt=TRUE) Warning:

On Tue, 6 May 2025 15:39:34 +0000 Shannon Price <pricesw at auburn.edu> wrote: > > > Hello all, > > We have been working on the idmap_rfc2307 solution for this. Packet > traces on the Samba server and the LDAP server don't show any > communication between Samba and the LDAP server at any point. > (Configuration below). Well there wouldn't be. > Samba

Hello all, We're having the following issue: when in UEFI mode, any output/errors from a lua script is invisible! This occurs even just running 'lua -v'. It runs and returns to a (visible) 'boot:' prompt, but there is simply no output visible from lua! (It does do a linefeed, but no visible text appears.) Has anyone encountered this? And/or know of a solution? For

Hi list, Some years ago, here at University of Poitiers, we used something called Netware. But it was expensive, so it was decided to abandonned it : some services migrated to samba and OpenLDAP, and others migrated to Windows Server. So now, Win7 is coming, and unfortunately we can't use Samba2 anymore. So the solution should be to use Samba3, wich supports Win7. But (yes there is

Hi all, I use samba 3.0.20 the ldap paramaters into the smb.conf are: passdb backend = ldapsam:ldap://localhost smbpasswd guest ldap suffix = dc=univ,dc=fr ldap machine suffix = ou=Hosts ldap user suffix = ou=People ldap group suffix = ou=Group ldap idmap suffix = ou=Idmap Into my ldap tree i've got 3 domains samba defined some uid exists into 2 of 3 domains (toto01 exists twice but into

Hello, I'd like to remove the individual pairs of square brackets along with their content - plus the space directly behind it - from address strings such as this: [Swidsinski, Alexander; Loening-Baucke, Vera; Lochs, Herbert] Charite Humboldt Univ, Innere Klin, D-10098 Berlin, Germany; [Hale, Laura P.] Duke Univ, Med Ctr, Dept Pathol, Durham, NC 27710 USA I'd like get the

Dear Mag. Ferri Leberl, I'm using something like: ----------------------- tex.tex --------------------------- \documentclass{article} \usepackage{graphicx} \usepackage{fancyvrb} \newcommand{\Rlogo}{\protect\includegraphics[height=1.8ex,keepaspectratio]{Rlogo.pdf}} \newcommand{\myinput}[1] {\begin{scriptsize} \VerbatimInput[frame=single,label=#1]{#1} \end{scriptsize}} \title{The R logo,