similar to: file server, AD client, no rfc2307

Hi, >Ah, I think I see the problem, If I remember correctly, you joined the >the Samba DC to a Windows DC and if you didn't have IDMU installed on >the Windows DC, you wouldn't get the required objects in AD created on >the Samba DC either. Really, IDMU was not installed. There is the file ypServ30.ldif ls /usr/share/samba/setup/ ... ypServ30.ldif But, I believe the

On Sat, 25 Nov 2023 18:58:02 +0100 mail--- via samba <samba at lists.samba.org> wrote: > Hello, > > after stumbling in almost every thread, that it makes sense to have > RFC2307 enabled, I wanted to switch an AD DC to it and follwed this > wiki page https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD > > When I try to import the modified ldif file, I get an

Let me know if I got this right. Are you saying "--use-rfc2307 ? when provisioning is no longer needed ? And the rfc2307 attributes will still be there ? Again, we are telling people how they need this if they plan to use AD mapping, but now it seems they don?t ? Correct ? If we provision without "--use-rfc2307 ?, then no ?idmap_ldb:use rfc2307 = yes? lines in smb.conf in DCs, then

Hi, >How are you trying to create the Unix (RFC2307) attributes ? I am following the article: https://wiki.samba.org/index.php/Maintaining_Unix_Attributes_in_AD_using_ADUC Open ADUC. Right-click to a user account and choose properties. Navigate to the "UNIX Attributes" tab. >Also, what do you mean by 'it doesn't bother any NIS server' ? Sorry, Google translated it

On Tue, 11 Jun 2024 17:25:59 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Me neither. AND only if you need to sync files from a DC to a member > server or viceversa, so uids and gids match. Otherwise I?d say no use. > > Why idmap_ldb:use rfc2307 = yes? by default then??when provisioning > with rfc2307 ? I have no idea, before my time. It was added in

On 25.11.2023 19:11:37, Rowland Penny via samba wrote: > On Sat, 25 Nov 2023 18:58:02 +0100 > mail--- via samba <samba at lists.samba.org> wrote: > > > Hello, > > > > after stumbling in almost every thread, that it makes sense to have > > RFC2307 enabled, I wanted to switch an AD DC to it and follwed this > > wiki page

On Sun, 26 Nov 2023 15:30:19 +0100 mail--- via samba <samba at lists.samba.org> wrote: > On 25.11.2023 19:11:37, Rowland Penny via samba wrote: > > On Sat, 25 Nov 2023 18:58:02 +0100 > > mail--- via samba <samba at lists.samba.org> wrote: > > > > > Hello, > > > > > > after stumbling in almost every thread, that it makes sense to >

Hello, Could you please give me some precision about the current state of the winbind support on a member server. I have tried to list what I understand about it. (I suppose that the libnss_winbind symlink are correct in /lib and/or lib64) * samba4 join as member join: samba-tool domain join <dnsdomain> MEMBER smb.conf should contain: idmap_ldb:use rfc2307 = yes the AD DC doesn't

Hello, after stumbling in almost every thread, that it makes sense to have RFC2307 enabled, I wanted to switch an AD DC to it and follwed this wiki page https://wiki.samba.org/index.php/Setting_up_RFC2307_in_AD When I try to import the modified ldif file, I get an error message: ERR: (Entry already exists) "Entry CN=ypServ30,CN=RpcServices,CN=System,DC=ad,DC=url,DC=de already exists"

>From my .bash_history on the schema master DC, effectively: # sed -e 's/${DOMAINDN}/dc=MYDOMAIN,dc=MY,dc=TLD/g' \ -e 's/${NETBIOSNAME}/MYDOMAIN/g' \ -e 's/${NISDOMAIN}/MYDOMAIN/g' \ /usr/local/samba/share/setup/ypServ30.ldif > ypServ30-JMH.ldif # service samba4 stop # ldbmodify -H /usr/local/samba/private/sam.ldb

On my DC at creation, i created my domain with the following line: ? samba-tool domain provision --use-rfc2307 --use-xattrs=yes --realm= ... etc etc. ? and it created smb.conf with.? idmap_ldb:use rfc2307 = yes ? But when i now look in my AD User manager, no NIS options anymore. ? Is there a possibility to add it again? and can this be caused my the zarafa schema import ? ? I use this one

Yup, strange - right! Samba 4.2.2 RFC2307 attributes were added as follows: # sed -e 's/${DOMAINDN}/dc=MYDOMAIN,dc=MY,dc=TLD/g' \ -e 's/${NETBIOSNAME}/MYDOMAIN/g' \ -e 's/${NISDOMAIN}/MYDOMAIN/g' \ /usr/local/samba/share/setup/ypServ30.ldif > ypServ30-JMH.ldif # service samba4 stop # ldbmodify -H

On Thu, 20 Jun 2024 10:06:02 +1200 Douglas Bagnall via samba <samba at lists.samba.org> wrote: > On 12/06/24 04:12, Rowland Penny via samba wrote: > > On Tue, 11 Jun 2024 17:02:58 +0100 > > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > >> In what scenario should I use idmap_ldb:use rfc2307 = yes ? For > >> what purpose ? >

hello, So the idmap_ldb:use rfc2307 = yes in smb.conf is only used on the "first" provisioned DC, and it's not necessary on the others that have joined? If another DC has taken over the FSMO roles, does only that DC need to have the entry? Thanks! On Fri, Jun 21, 2024 at 4:44?AM Marco Gaiarin via samba < samba at lists.samba.org> wrote: > Mandi! Christian Naumer via

On Tue, 11 Jun 2024 18:08:10 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Let me know if I got this right. > > Are you saying "--use-rfc2307 ? when provisioning is no longer needed > ? And the rfc2307 attributes will still be there ? Yes, the rfc2307 attributes are part of the standard AD schema. > > Again, we are telling people how they need

Me neither. AND only if you need to sync files from a DC to a member server or viceversa, so uids and gids match. Otherwise I?d say no use. Why idmap_ldb:use rfc2307 = yes? by default then??when provisioning with rfc2307 ? We are giving instructions to new users how to set up AD idmapping and it is so very complicated because of this, the documentation is confusing at times. If using AD idmap ,

On Thu, 20 Jun 2024 08:40:07 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Thu, 20 Jun 2024 10:06:02 +1200 > Douglas Bagnall via samba <samba at lists.samba.org> wrote: > > > On 12/06/24 04:12, Rowland Penny via samba wrote: > > > On Tue, 11 Jun 2024 17:02:58 +0100 > > > Luis Peromarta via samba <samba at lists.samba.org>

On Tue, 11 Jun 2024 15:51:46 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > All, > > In the past few days I have been experimenting with the mappings in > Samba servers. Today is the DC day. > > Procedure: > > In my setup, I provisioned with rfc2307 schema. In fairness everyone > should, as it?s free, and you can later use it or not. No,

Hi, I have now added rfc2307 to my domain - I extended the schema, have added UIDs to some (not all yet) of my users and groups, and have my smb.conf with this currently: idmap_ldb:use rfc2307 = yes winbind nss info = rfc2307 winbind use default domain = Yes winbind enum users = Yes winbind enum groups = Yes winbind refresh tickets = Yes

Thu, 16 Jul 2020 12:36:58 +0100 Rowland penny via samba <samba at lists.samba.org>: > On 16/07/2020 12:22, RhineDevil wrote: > > Thu, 16 Jul 2020 11:45:19 +0100 Rowland penny via samba <samba at lists.samba.org>: > >> On 16/07/2020 11:24, RhineDevil wrote: > >>> Thu, 16 Jul 2020 10:56:58 +0100 Rowland penny via samba <samba at lists.samba.org>: >