similar to: Not your typical domain migration

Hi Scott, Am 12.02.2018 um 06:46 schrieb Scott Whitten via samba: > I can do Windows 2003->2012->2016 without too much trouble. Can't you join 2016 to the 2003 domain, demote 2003, and raise the functional levels? Or join a Samba AD DC and continue without MS. ;-) > I'm concerned about the Samba side. The servers are all using extended > file system permissions and

On Sun, 24 Feb 2019 19:25:14 +0100 Ralph Böhme <slow at samba.org> wrote: > > Am 24.02.2019 um 18:48 schrieb Rowland Penny via samba > <samba at lists.samba.org>: > > On Sun, 24 Feb 2019 18:28:43 +0100 Ralph Böhme <slow at samba.org> > > wrote: > >> Am 24.02.2019 um 16:42 schrieb Rowland Penny via samba > >> <samba at

On Thu, Sep 3, 2020 at 4:45 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 03/09/2020 21:38, Robert Marcano wrote: > > On 9/3/20 4:35 PM, Rowland penny via samba wrote: > >> On 03/09/2020 21:15, Robert Marcano via samba wrote: > >>> > >>> There is an sssd provided idmapper (on RHEL/CentOS/Fedora) it is > >>> packaged

On Tuesday, 5 November 2019 01:37:15 PST Rowland penny via samba wrote: > On 04/11/2019 18:52, Alexey A Nikitin wrote: > > On Sunday, 3 November 2019 01:41:18 PST Rowland penny via samba wrote: > >> As I said, you cannot use 'winbind use default domain = yes' with > >> 'autorid', it makes all users and groups members of the same domain, > >> this

On Sun, 24 Feb 2019 18:28:43 +0100 Ralph Böhme <slow at samba.org> wrote: > > Am 24.02.2019 um 16:42 schrieb Rowland Penny via samba > <samba at lists.samba.org>: > > On Sun, 24 Feb 2019 15:58:39 +0100 Ralph Böhme <slow at samba.org> > > wrote: > >> Another thing that a customer has just been bitten by, was a subtle > >> bug in

Hi, On Fri, Jun 14, 2024 at 4:44?PM Elias Pereira via samba < samba at lists.samba.org> wrote: > hi, > > Knowing the 3 idmap backends (ad, rid and autorid) available to configure > samba as a domain member, could you give examples of scenarios in which > each backend would be more suitable? > > I also wrote some documentation for the ubuntu server guide about this,

On Fri, 14 Jun 2024 17:32:30 -0300 Andreas Hasenack via samba <samba at lists.samba.org> wrote: > Hi, > > On Fri, Jun 14, 2024 at 4:44?PM Elias Pereira via samba < > samba at lists.samba.org> wrote: > > > hi, > > > > Knowing the 3 idmap backends (ad, rid and autorid) available to > > configure samba as a domain member, could you give examples

On 24.02.2019 19:25, Ralph Böhme via samba wrote: > Am 24.02.2019 um 18:48 schrieb Rowland Penny via samba <samba at lists.samba.org>: >> On Sun, 24 Feb 2019 18:28:43 +0100 Ralph Böhme <slow at samba.org> wrote: >>> Am 24.02.2019 um 16:42 schrieb Rowland Penny via samba <samba at lists.samba.org>: >>>> On Sun, 24 Feb 2019 15:58:39 +0100 Ralph Böhme

Thank you all!!!! Great content!!! Speaking of scenarios... What would be the best backend for? Scenario 1: 3 DCs and 1 fileserver 2800 users Scenario 2: 4 DCs and 2 fileserver 2800+ users On Sat, Jun 15, 2024 at 4:49?AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 14 Jun 2024 17:32:30 -0300 > Andreas Hasenack via samba <samba at lists.samba.org>

On 2016-01-10 at 17:58 +0000, Rowland penny wrote: > On 10/01/16 17:05, Partha Sarathi wrote: > > > > > This could have a lot to do with the fact that idmap_rid & > > > idmap_autorid calculate the uids differently i.e if you have RID > > > '2025000', autorid would calculate this as '1102500000' , rid > > > would calculate this as

Thanks for the reply. Now we end-up with mix uid/gid from both ranges in cache TDBs. Few user logins are denied with below error in smbd.log, *[2016/01/07 11:39:44.475960, 1, pid=5202] ../source3/auth/token_util.c:430(add_local_groups* ** SID S-1-5-21-3082371790-1274690562-2878062458-5771 -> getpwuid(10005771) failed** wbinfo --user-info=mariond mariond:*:10015138:110000513:Marion,

On Tue, 26 Feb 2019 12:49:42 +0100 Ralph Böhme via samba <samba at lists.samba.org> wrote: > On Tue, Feb 26, 2019 at 12:45:45PM +0100, Björn JACKE via samba wrote: > >On 2019-02-25 at 11:32 +0000 Rowland Penny via samba sent off: > >> > (I take it xid stands for both uid and gid?) > >> > >> No, I think it was chosen to differentiate them from uidNumber

adding samba list On Fri, Jan 8, 2016 at 10:22 AM, Partha Sarathi <parthasarathi.bl at gmail.com> wrote: > Hi, > > > We have a customer who facing security issues after changing RID idmap > backend to AUTORID. > > > The History of the issue looks as below, > > 1) When samba configured with RID idmap backend customer requested to > change few permissions,

> Am 23.02.2019 um 22:23 schrieb Rowland Penny via samba <samba at lists.samba.org>: >>>>> He also has these: >>>>> >>>>> idmap config * : rangesize = 1000000 >>>>> idmap config * : range = 1000000-19999999 >>>>> idmap config * : backend = autorid >>>>> >>>>> The '*' domain

On Sun, 2019-11-03 at 08:39 +0000, Rowland penny via samba wrote: > On 02/11/2019 23:18, Hilberg via samba wrote: > > Hi > > > > The server suddenly changed the uid + gid. this happened to times, > > yesterday and the week after. The default group at example > > The samba is a AD member where we have many users (>20 000) and we > > use > > autorid

On 2019-02-25 at 11:32 +0000 Rowland Penny via samba sent off: > > (I take it xid stands for both uid and gid?) > > No, I think it was chosen to differentiate them from uidNumber & > gidNumber attributes, they are similar but not the same. They also only > exist on DC's in Windows the owner of a file can be a group. In the unix world the main owner is always a user.

Hi, Brand new VM's running on ESXi replacing existing Samba 3 NT domain. I am not quite brand new but this is my first time for this combination. Would like to use Win Ad for authentication and Samba for 20 users and company shared data. Started with this how-to: https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member Lost my way on Choose backend for id mapping in winbindd

I'm not a sysadmin (so I don't have domain admin skills), I'm just coming at this as a user of these (flaky) hosts, but I'll try to answer the questions. If autorid is an odd/problematic setting, I can pass that info on to the sysadmins. I looked at https://lists.samba.org/archive/samba/2015-May/191544.html (since I don't really know the difference between these settings), but

On 03/09/2020 22:08, Jeremy Allison wrote: > On Thu, Sep 03, 2020 at 05:05:46PM -0400, Andrew Walker via samba wrote: >> On Thu, Sep 3, 2020 at 4:45 PM Rowland penny via samba < >> samba at lists.samba.org> wrote: >> >>> On 03/09/2020 21:38, Robert Marcano wrote: >>>> On 9/3/20 4:35 PM, Rowland penny via samba wrote: >>>>> On

On Sun, 2019-11-03 at 20:57 +0000, Rowland penny wrote: > > > G'Day Rowland, > > > > Are you really sure that is the case? > > > > The "winbind use default domain" code, which I authored, certainly > > isn't intended to do that. It changes the formatting at the nss > > interface to strip the domain\ prefix, allowing local logins