similar to: 4.5 -> 4.8 samba fails to start

> also think that Debian did a very stupid thing > when they > gave 'nobody' the ID of '65534', but you just have to work around it. Good point here, i'll drop that also at the debian samba bug list. Totaly forgot about nobody and uid 65534.. In dutch.. "Het kwartje valt...." ( A penny drops.. ) hihi.. But its "it finally makes sense" ...

On 17/12/2019 14:20, L.P.H. van Belle via samba wrote: >>> smb.conf: >>> [global] >>> security = ADS >>> realm = SAMDOM.EXAMPLE.COM (redacted) >>> workgroup = SAMDOM (redacted) >>> >>> idmap config * : backend = tdb >>> idmap config * : range = 3000-7999 >> Whilst you have read

On 10/3/18 1:09 PM, Rowland Penny via samba wrote: > On Wed, 3 Oct 2018 12:45:11 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> Hi folks, >> >> I have finally nailed down the problem with the non-functional getent >> command when using winbind on a samba member server (AD domain). >> >> The problem was the entry >>

On 03.10.2018 15:38, Rowland Penny via samba wrote: > On Wed, 3 Oct 2018 15:16:50 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> On 10/3/18 1:09 PM, Rowland Penny via samba wrote: >>> On Wed, 3 Oct 2018 12:45:11 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> Hi folks,

On Thu, 13 Dec 2018 19:10:38 -0500 Gilbert Soucy <gsoucy at 36pix.com> wrote: > Hello, > > I was able to follow most of the steps in the wiki but I seem to > have an issue with winbind : > > wbinfo --ping-dc > > is failing with: > > [root at tungsten-2 samba]# wbinfo --ping-dc > checking the NETLOGON for domain[-not available-] dc connection to

On 10/2/18 1:07 PM, Rowland Penny via samba wrote: > On Tue, 2 Oct 2018 12:40:19 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> On 10/1/18 8:40 PM, Rowland Penny via samba wrote: >>> On Mon, 1 Oct 2018 19:28:29 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> Hi Louis and

On Wed, 3 Oct 2018 16:57:07 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 03.10.2018 15:38, Rowland Penny via samba wrote: > > On Wed, 3 Oct 2018 15:16:50 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> On 10/3/18 1:09 PM, Rowland Penny via samba wrote: > >>> On Wed, 3 Oct 2018

On Wed, 3 Oct 2018 15:16:50 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > On 10/3/18 1:09 PM, Rowland Penny via samba wrote: > > On Wed, 3 Oct 2018 12:45:11 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> Hi folks, > >> > >> I have finally nailed down the problem with the

On Wed, 3 Oct 2018 12:45:11 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > Hi folks, > > I have finally nailed down the problem with the non-functional getent > command when using winbind on a samba member server (AD domain). > > The problem was the entry > >    idmap config * : range 3000-9999 No, it wasn't > I used the instructions

Hi Rowland, Thanks for your explanation. We have set up Samba to authenticate users against an external MIT Kerberos server and usernames match those in Unix password files. The setup was almost exactly like the Ubuntu help page: https://help.ubuntu.com/community/Samba/Kerberos#MIT_Kerberos There are others who have also set up Samba this way:

On Fri, 22 Feb 2019 22:40:38 +0100 Alexander Spannagel via samba <samba at lists.samba.org> wrote: > Am 22.02.19 um 17:02 schrieb Rowland Penny via samba: > > If you do have 'files sss winbind' in /etc/nsswitch.conf' and sssd > > is running, then it is highly likely that even if winbind is > > running, it will not be used. You also shouldn't use winbind

On Sat, 23 Feb 2019 00:00:32 +0100 Alexander Spannagel <aspannagel at gmx.de> wrote: > Am 22.02.19 um 23:02 schrieb Rowland Penny via samba: > > So, you are trying to use 4 different methods of authentication on > > the same Samba server, Unix, sssd, winbind and ldap, and you expect > > this to work ? > > > No. we use max. 3 auth providers: (1. and 2. on all

On 18/10/2019 15:30, John Redmond wrote: > Rowland - After re-reading wiki.samba.org/index.php/Idmap_config_ad > <http://wiki.samba.org/index.php/Idmap_config_ad>, I have these > questions (FYI, the contents of my smb.conf and nsswitch.conf files > are provided below) : > > * Running "sudo getent passwd" on the fileserver, I see the range of > local

Hi all, a PC was correctly joined to a domain but offline logon wasn't working so then I have tried to get authentication and nss using SSSD but I fail to correctly configure the logon. Then I read a message on this list that says SSSD doesn't works on samba >= 4.8. Samba installed is the 4.12 so I have followed this guide[?] to reconfigure again the PC using winbind instead of

On Sat, 23 Feb 2019 14:21:57 +0100 Remy Zandwijk via samba <samba at lists.samba.org> wrote: > > > > On 23 Feb 2019, at 14:07, Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > > On Sat, 23 Feb 2019 13:47:54 +0100 > > Remy Zandwijk via samba <samba at lists.samba.org> wrote: > > > >> > >> >

On Sat, 23 Feb 2019 15:33:17 +0100 Remy Zandwijk via samba <samba at lists.samba.org> wrote: > > > > On 23 Feb 2019, at 14:52, Rowland Penny via samba > > <samba at lists.samba.org> wrote: > > > > On Sat, 23 Feb 2019 14:21:57 +0100 > > Remy Zandwijk via samba <samba at lists.samba.org> wrote: > > > >> > >> >

> > > > Is 'idmap rid' a better choice than ad? Can I still copy files with > > rsync in that case or will file ownership be mangled? > > Quantify better ? > One isn't really better than the other, they are both usable, but in > different ways and reasons. > It might help if you read this: > >

On Wed, 2019-11-27 at 15:51 +0000, Rowland penny via samba wrote: > On 27/11/2019 15:30, S?rgio Basto wrote: > > On Wed, 2019-11-27 at 12:29 +0000, Rowland penny via samba wrote: > > > On 27/11/2019 11:03, S?rgio Basto via samba wrote: > > > > Sorry I meant man idmap_ad. But checking again man is equal of > > > >

On Mon, 26 Nov 2018 17:27:29 +0100 Mark Amundsen via samba <samba at lists.samba.org> wrote: > > > > > > Is 'idmap rid' a better choice than ad? Can I still copy files > > > with rsync in that case or will file ownership be mangled? > > > > Quantify better ? > > One isn't really better than the other, they are both usable, but in

On Wed, 8 Nov 2017 12:59:28 +0100 Johannes Engel via samba <samba at lists.samba.org> wrote: > Hello list, > > following the guidance from here > (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) > I have set up a file server which is member of a Samba 4.6.9 AD > domain. > > I have created ACLs using a Windows client with a domain admin >