similar to: objectclass "posixAccount" missing on new created users

On Thu, 2017-08-17 at 09:08 +0100, Rowland Penny via samba wrote: > On Thu, 17 Aug 2017 09:39:07 +0200 > gizmo via samba <samba at lists.samba.org> wrote: > > > Hello, > > I made an upgrade from sernet-samba 4.3.11 to sernet-samba 4.6.7. > > With samba 4.3.11 all created users contained the objectclass > > "posixAccount". With samba 4.6.7 they

I don't played much recntly with NetApp filers but as they are supposed to work well with MS AD I expected you don't really needs posixAccount objectClass. So a google search leads me there: https://kb.netapp.com/support/s/article/ka31A0000008hesQAA/how-to-configure-ldap-on-a-filer-to-connect-to-microsoft-s-active-directory-ldap-implementation?language=en_US Perhaps it's not what you

On Thu, 17 Aug 2017 20:34:00 +1200 Andrew Bartlett via samba <samba at lists.samba.org> wrote: > On Thu, 2017-08-17 at 09:08 +0100, Rowland Penny via samba wrote: > > On Thu, 17 Aug 2017 09:39:07 +0200 > > gizmo via samba <samba at lists.samba.org> wrote: > > > > > Hello, > > > I made an upgrade from sernet-samba 4.3.11 to sernet-samba 4.6.7.

On Thu, 17 Aug 2017 09:39:07 +0200 gizmo via samba <samba at lists.samba.org> wrote: > Hello, > I made an upgrade from sernet-samba 4.3.11 to sernet-samba 4.6.7. > With samba 4.3.11 all created users contained the objectclass > "posixAccount". With samba 4.6.7 they don't. > > We have a NetApp-Storage-Server which exports nfs4-mounts (with > kerberos).

Hello, I start a new thread, because the other one meanwhile drifted far away from what the OP asked. :-) Am 27.08.2013 17:02, schrieb Luca Olivetti: >> If you provisioned your domain with "--use-rfc2307", then in >> Win7 ADUC you can see the posixAccount (UNIX Attributes) of >> the users. > > I did a classicupgrade, not a provisioning, and I can see the

Greetings, Rowland Penny! >>>>> Ok, good. >>>>> Now, how can I get RFC2307 attributes populated automatically upon >>>>> users or >>>>> groups creation? >>>> You can't :-( >>>> I'm experimenting with >>>> https://github.com/laotse/SambaPosix >>>> but it's quite buggy (at least

Greetings, Rowland Penny! >>> You are using python, which to me is a very big snake, so I bash it :-D >>> I just use these two functions in a bash script: >>> # Finds the next useable user uidNumber or group gidNumber >>> # Input : $1 >>> # $1 : msSFU30MaxUidNumber or msSFU30MaxGidNumber >>> # Output : the first free uidNumber or gidNumber

Hi fellow list users, I'm setting up a 4.0.3 DC and I am observing the following issue: - nsswitch.conf contains winbind for passwd and group - provisioned with use_rfc2307 - creating user with ADUC - creating group - adding Unix Attributes to user and group - 1st part of issue: ADUC throws error message (translated from German XP: "The object properties of the object could not be

El 09/04/15 a les 16:20, Rowland Penny ha escrit: > On 09/04/15 14:58, Luca Olivetti wrote: >> El 09/04/15 a les 14:57, Andrey Repin ha escrit: >>>> Using the RFC2307 attributes, you will get the same ID number on every >>>> Unix machine, whereas if you use the 'rid' backend, whilst you should >>>> get the same ID on each Unix machine, you will

Hi, My tests on DC server and File/print server have some problem with account management... user access right on home share is very strange. if we use ADUC and home share (not homes) for new user, it work. All howto in samba's wiki ask administrator to use windows tools for manage users and groups and share like home share so... I know that is possible to add unix tab on aduc (already

Am 10. Dezember 2014 22:26:52 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 10/12/14 21:05, Tim wrote: >> Thanks for your answer and time you offer for me. That makes it a bit > >> clearer. >> >> I searched the web and found that rsat needs to have the nis tools >> installed. > >Good luck with trying to install 'Service for

Hi, We actually have a mail hosting solutions with aprox. 100 thousand of email account, where about 90% of a customers use POP3 like email configuration. About a few mounths (we perfomed a lot of migration throught mbox email software to Maildir with dovecot) but i can see that the performance is very poor and receive complaint about delays of autentications of accounts. The solution

On 10/23/2017 10:26 AM, Rowland Penny via samba wrote: > OK, have you tried asking the Netapp company, 'how do I use this with > Active Directory' ? In this specific case no, but I already tried to open CIFS support cases but at the end they tell me that It works as expected with a MS DC and that Samba DC is not supported by them. I cannot omit that I use Samba because they always

First, some background. We have a Linux server (CentOS 7.3.1611, Samba 4.4.4, sssd 1.14.0) that is providing access vis SMB to various file systems (home folders on NetApp filer, shared data stored on SwiftStack), and joined to our Active Directory. Clients connecting to it are Windows 7 or 10 (mostly Win10), or OS X Macs running ... El Capitan or Sierra or High Sierra). Our problem is that we

Hi, we are testing a new AD domain that will replace our old NT4 one, and we are setting up a new cifs vserver of our Netapp filer (running Clustered Dataontap 9.2). The new AD domain was a clean deployment created using "samba-tool domain provision --server-role=dc --use-rfc2307 ...". All seems to work well and the Netapp filer joins the domain without errors and seems to run fine.

Mandi! Kacper Wirski via samba In chel di` si favelave... > I understand the OP, I was asking some time ago similar question, but it was > in relation to samba domain member. Thanks, Kacper. > I couldn't get backend: ad to work for > machine accounts, so i switched to idmap: rid and it solved everything. I > tried manually adding UID and GID to Domain Computer group and to

Greetings, Rowland Penny! > well tough, the smbldap-tools were written to do a job, map windows > users to unix users and vice versa. No. smbldap-tools were doing exactly the same as AD do: kept all users in one database. > So what you need now is something to do the same, except you don't have > separate Unix users any more, I never had separate unix users ever (aside from one

Sorry for eventually wrong AD terminology! > You haven't fixed the 'xidNumber:100 issue', giving 'Domain Users' the > ID of '513' is not a good idea and I think you may have just changed > '100' in idmap.ldb to '513' >From the AD DC (;-)) shell the user was missing the "Domain Users" group and we tought that could be a xidNumber

Hi all, Our migration is coming along nicely, everything seems to work like it should... I thought... Only samba-tool dbcheck reports five errors: root at dc1:~# samba-tool dbcheck Checking 1143 objects ERROR: Normalisation error for attribute 'objectClass' in 'CN=phdseminar,CN=Users,DC=my,DC=samba,DC=domain' Values/Order of values do/does not match: ['top',

I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where I'm confident in the answer, so I figure I'd just ask again here if that's ok. Here's what we have, and what we'd like to do: Storage is a Netapp (cluster mode CDOT 8.2 I believe), it's NFS exported to our linux system. Linux system is CentOS 6 and can NFS mount the