similar to: getent group adgroup not showing members

On Tue, 16 Jan 2018 16:20:52 +0100 Andreas Hauffe via samba <samba at lists.samba.org> wrote: > Hi, > > no, that's my fault. I changed the UIDs and user names in my "ls -l" > to unpersonalized/example data for my mail and didn't think about > putting these values into the range. A better unpersonalized data > example would look like: > >

Am 20.07.2016 um 11:33 schrieb Rowland penny: > On 20/07/16 08:22, Timo Dachs-Wegmann wrote: >> Okay, i tried to install the server without winbind but with >> libnss-winbind. >> >> Still the same problem. Getent passwd administrator works but the >> result of getent passwd only shows local users. >> This seems to be the same bug as achims. >> We are

Ok, you are completely right. Here are the real numbers with changed user names: drwx------ 43 DOM\user1        DOM\domain-user  4096 Jan 10 08:00 user1 drwx------   5 DOM\user2        DOM\domain-user  4096 Jan 11 08:13 user2 drwx------ 92 DOM\user3        DOM\domain-user   4096 Jan 16 08:39 user3 drwx------   3        133265        DOM\domain-user   4096 Sep  7 2015 user4 drwx------   7       

Well, thank you for your support. I guess you can't tell when debian will release new packages? I think we'll work with the 4.2.10 (4.2.11) packages until debian releases the new version :) Kind regards Timo Dachs-Wegmann -EDV- -----Ursprüngliche Nachricht----- Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von Rowland penny Gesendet: Mittwoch, 20. Juli 2016 17:59

On 20/07/16 11:49, Achim Gottinger wrote: > > > Am 20.07.2016 um 11:33 schrieb Rowland penny: >> On 20/07/16 08:22, Timo Dachs-Wegmann wrote: >>> Okay, i tried to install the server without winbind but with >>> libnss-winbind. >>> >>> Still the same problem. Getent passwd administrator works but the >>> result of getent passwd only

I've spent some time updating, upgrading and generally consolidating an old Samba AD. I've managed to remove a very old unsupported (4.2) Samba AD DC following migration to a couple of new DC's - that seems to have worked out OK. Workstation logons and GPO's working fine. I'm now left with one problem after joining a new Samba (4.5.12) member server to the domain for file

On 20/07/16 08:22, Timo Dachs-Wegmann wrote: > Okay, i tried to install the server without winbind but with libnss-winbind. > > Still the same problem. Getent passwd administrator works but the result of getent passwd only shows local users. > This seems to be the same bug as achims. > We are running a Debian 4.8 with samba 4.2 packages... > > A few months ago I installed a

Many thanks Rowland. Yes, I don't understand idmaps, but I _think_ I'm getting it. I have added the gid of 60002 for Domain Admins and undertaken some 'chgrp' tasks. I've now got a domain member with shares that presents the correct ownership. All looks good. I'm still slightly confused why I have two ranges within my member smb.conf: idmap config * : backend = tdb

Unfortunately, the the Ubuntu 18.04 samba-tool package doesn't have "user show" as an option. The Windows ADUC tool shows user1 uidNumber =10001, user2 uidNumber=10002, user3 uidNumber =10003, and user4 uidNumber=10004 Here are the getent command results on the file server/ domain member: *admin at fsvr0:~$ getent passwd user1* hq-user1:*:11103:10513::/home/lan/user1:/bin/bash

On 10/3/18 1:09 PM, Rowland Penny via samba wrote: > On Wed, 3 Oct 2018 12:45:11 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> Hi folks, >> >> I have finally nailed down the problem with the non-functional getent >> command when using winbind on a samba member server (AD domain). >> >> The problem was the entry >>

On 03.10.2018 15:38, Rowland Penny via samba wrote: > On Wed, 3 Oct 2018 15:16:50 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> On 10/3/18 1:09 PM, Rowland Penny via samba wrote: >>> On Wed, 3 Oct 2018 12:45:11 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> Hi folks,

On Mon, 26 Nov 2018 17:27:29 +0100 Mark Amundsen via samba <samba at lists.samba.org> wrote: > > > > > > Is 'idmap rid' a better choice than ad? Can I still copy files > > > with rsync in that case or will file ownership be mangled? > > > > Quantify better ? > > One isn't really better than the other, they are both usable, but in

Hi Setup is samba 3.6.3 on ubuntu 12.04.1, domain member server in a Win2008R2 DC environment. Userauth is via kerberos. I have a gid collision I cannot find an answer for. Please see below. root at python:/home/DOMAIN/users# ls -la drwxr-x--- 4 user1 PYTHON\none 136 Dez 7 09:42 user1 drwxr-x--- 2 user2 PYTHON\none 6 Jan 30 11:01 user2 drwxr-x--- 2 user3 PYTHON\none 6 Jan 30 11:13 user3

On 10/2/18 1:07 PM, Rowland Penny via samba wrote: > On Tue, 2 Oct 2018 12:40:19 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> On 10/1/18 8:40 PM, Rowland Penny via samba wrote: >>> On Mon, 1 Oct 2018 19:28:29 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> Hi Louis and

On Sun, 30 Sep 2018 23:25:48 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > Hi folks, > > AD server CentOS 7-1804, Samba 4.9.1 compiled from source, only used > as AD server, with netlogon and sysvol, just like any Windows AD > server > > AD member server CentOS 7-1804, Samba 4.7.1 installed from CentOS > repositories, intended for use as a

On Wed, 3 Oct 2018 16:57:07 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 03.10.2018 15:38, Rowland Penny via samba wrote: > > On Wed, 3 Oct 2018 15:16:50 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> On 10/3/18 1:09 PM, Rowland Penny via samba wrote: > >>> On Wed, 3 Oct 2018

On Wed, 3 Oct 2018 12:45:11 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > Hi folks, > > I have finally nailed down the problem with the non-functional getent > command when using winbind on a samba member server (AD domain). > > The problem was the entry > >    idmap config * : range 3000-9999 No, it wasn't > I used the instructions

Rowland, a question. "is to copy idmap.ldap from the first DC to all others and then keep them in sync, the other is to use RFC2307 attributes." I can do the same with my member server? Maybe it works, or not for beign a member server. Maybe i can change my Member Server to a Domain Controller and after use idmap, sync. Its ok? Analista Inf. Juan Ignacio Pazos

On Wed, 3 Oct 2018 15:16:50 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > On 10/3/18 1:09 PM, Rowland Penny via samba wrote: > > On Wed, 3 Oct 2018 12:45:11 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> Hi folks, > >> > >> I have finally nailed down the problem with the

Hi, no, that's my fault. I changed the UIDs and user names in my "ls -l" to unpersonalized/example data for my mail and didn't think about putting these values into the range. A better unpersonalized data example would look like: ---------- drwx------ 43 DOM\user1        DOM\group  4096 Jan 10 08:00 user1 drwx------   5 DOM\user2        DOM\group  4096 Jan 11 08:13 user2