similar to: Samba AD and NIS integration

On Thu, 16 Nov 2017 10:08:32 +0000 Stephen Parry via samba <samba at lists.samba.org> wrote: > Thanks for your reply Rowland. > > > The id ranges are what you choose, reading this may help: > > > > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Setting_up_a_Basic_smb.conf_File > > > > >/Is there any working way of controlling

>> idmapping does not work for AD Domain Controllers. > >It does ;-) > Does that mean that the warning in the docs is out of date? Does it work on the version of Samba in the Stretch repository (Samba 4.5.12), or do I need to find a repo with a more recent build? >>Other pages >> suggest many of the winbind parameters are simply ignored and I can >> confirm this

I have questions regarding the operation of AD and integrating NIS or LDAP with it. I have a small heterogenous network consisting of various computing devices running either Windows 10 pro or a flavour of Linux. I am setting up a NAS box running Debian Stretch and Samba 4.5.12 to be the central file server and authenticator for the network, including LDAP aware software such as owncloud. I have

Rowland, I was just reading over another thread on this list about the inability to access group policy from client machines. The user did not have the symlinks setup (I do) but one thing you mentioned was using the NIS attributes to set UID/GID numbers for the domain. You said we should not do this for certain users and groups, but there is no mention of this in the guides to setting up an AD DC,

Hi, I have a question again about my test environment. I have dc1, dc2, fileserver1, and dc3. dc3 is on an another site, and is functioning as fileserver too. As I read in the documentation, I cannot (shouldn't) use idmap config parameters in the smb.conf on my dc3. Unfortunately, first I copied that parameters too from fileserver1 (I use rid backend on fileserver1). So, I removed the idmap

OK, so since it appears our only recourse is to build a new domain from scratch, how can we prevent this from happening again? We have several Gentoo workstations, a bunch of Windows 7 workstations, and a few NAS devices which run Linux of some flavor. How do we use NIS attributes without killing our domain? The Samba guide even has instructions for using ADUC to set the UID/GID for users and

Thanks for your answer and time you offer for me. That makes it a bit clearer. I searched the web and found that rsat needs to have the nis tools installed. Does it create Unix uid/gid automatically then? Without rfc2307 information it makes no sense to me to have a *nix machine for file services and another one for backup purposes, when uid and gid are not same (due to preserve acls). And for

Am 10. Dezember 2014 22:26:52 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 10/12/14 21:05, Tim wrote: >> Thanks for your answer and time you offer for me. That makes it a bit > >> clearer. >> >> I searched the web and found that rsat needs to have the nis tools >> installed. > >Good luck with trying to install 'Service for

On 10/09/2016 02:51 AM, Rowland Penny via samba wrote: > Have you by any chance got another 3001108 'xidNumber' in idmap.ldb ? > If you give a user a 'uidNumber' attribute, the contents of this will be > used instead of the 'xidNumber' in idmap.ldb, hence you do not need to > (and probably shouldn't) use numbers in the '3000000' range. I managed to

At the moment numbers start at 3000000 and counting. In my eyes it would make sense, that these number be stored in the AD when provisioned with rfc2307. Or it should be replicated by drs. https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC#Configuring_RFC2307_and_NIS_Extensions_in_a_Samba_AD says the following: No need for manual ID counting when using the default Microsoft tools. E. g.

>On Wed, 06 Sep 2017 11:24:17 +0200>Jiří Černý via samba <samba at lists.samba.org ( https://lists.samba.org/mailman/listinfo/samba) > wrote:>>> I feel this all has something to do with the classicupgrade, the>> command works for me, does 'wbinfo --sid-to-gid="S-1-5-32-544"'>> work ?>> Yes. Take a look:wbinfo

Well I upgraded from 4.4.6 to 4.5.0 and discovered that one of my user accounts is completely borked. What is very strange is that everything in Samba looks okay. Here is the first problem symptom. The data is from the DC. total 80 drwxr-xr-x. 7 root root 4096 Oct 9 01:15 . drwx------+ 77 SAMDOM\prg-11868bg SAMDOM\domain users 20480 Oct 9 00:55

Am 2017-10-09 um 21:57 schrieb Rowland Penny via samba: > On Mon, 9 Oct 2017 21:35:39 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> Am 2017-10-09 um 21:04 schrieb Rowland Penny via samba: >> >>> It isn't supposed to work like this and it didn't used to work like >>> this. >> >> Then the

On Thu, 27 Oct 2016 15:52:09 -0400 Ryan Ashley via samba <samba at lists.samba.org> wrote: > Slightly off-topic, but I thought setting those set the limits for > going into the NIS attributes tab in Windows. I understood the Samba > wiki to explain that using those lines is how you set the upper and > lower limits that Windows sees and uses. Is this incorrect? > > Lead

> I feel this all has something to do with the classicupgrade, the command works for me, does 'wbinfo --sid-to-gid="S-1-5-32-544"' work ?Yes. Take a look:wbinfo --sid-to-gid="S-1-5-32-544" 15538wbinfo --gid-info=15538 BUILTIN\administrators:x:15538: > I haven't received it yet, but will examine and comment on it when I do.I sent it to <rpenny at

On Tue, 27 Jun 2017 16:32:22 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai Carlos, > > I suggest start here : > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Setting_up_a_Basic_smb.conf_File > > Which says.. > > # Default ID mapping configuration for local BUILTIN accounts > # and groups on

Hi all, We're in the process of finally moving from our aging Samba3-based infrastructure across to Samba4. Rather than trying to migrate, we're just making a clean break so that we can do it properly from day one, as there were likely some mistakes that were made years ago we want to leave behind. The machines under test are virtual machines running Ubuntu 14.04 LTS AMD64. I've

Good afternoon friends, I made a FSMO transfer from a samba 4.0 to a 4.10 and then I demoted the server 4.0 then added another server with samba 4.10 and so I got two DCs. I tried to put a centos 8 with samba 4.9 as file server. Now comes the problem: When I go to user / group properties and go to the "Unix Attributes" tab and select NIS Domain it shows nothing but <none>. I

Hi Howland, That is precisely what I cannot do. I do this by windows using Rsat, and when I select the NIS domain to be able to assign the gid or uid it does not appear, so I can't use samba just as a file server. Do you know if there is a way to reset or show NIS Domain? Is there any way to assign uidNumber & gidNumber attributes via console? Best regards, Gabriel Franca -----

Hello All, I've bitten the bullet and upgraded from sernet-samba-4.2 to 4.6.4-SerNet-RedHat-7.el7. Now my AD users don't show up in Linux, with the result that the [homes] share fails to connect. Other shares work fine, it's just the homes share. There doesn't appear to be any uidNumber mapping going on. I used to be able to use the unix command 'id' to show user info,