similar to: creating new users - missing uidNumber

I have a script which carefully manages uidNumber and gidNumber attributes for users and groups. We just recently put it into production. I plan to release it as open source software soon -- and get Rowland's blessing :-) On Fri, Jun 21, 2019 at 3:42 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 21/06/2019 07:49, Pisch Tam?s via samba wrote: > > Hi, >

It's really a good news :-) I also wanted to create a script like this Look forward to using this magical tool ;-) Le 21/06/2019 ? 15:38, Jonathon Reinhart via samba a ?crit?: > I have a script which carefully manages uidNumber and gidNumber attributes > for users and groups. We just recently put it into production. I plan to > release it as open source software soon -- and get

Hello, A user of my "adman" utility recently opened this issue [1]: "Add support for setting uidNumber for machine account" I was aware that computer accounts were also users in AD, but I hadn't considered assigning a uidNumber to them. It makes sense that winbind (in idmap="ad" mode) would not "see" the accounts with a uidNumber. Naturally, groups of

Hello, I'm trying to use the "notify" API of libsmbclient, testing against a Samba AD DC. The function is returning with errno=22 (mapped from NT_STATUS_REVISION_MISMATCH), and I'm getting the following error message: smb1cli_req_writev_submit: called for dialect[SMB3_11] server[dc1.example.com] It looks like libsmbclient is, for some reason, using SMB1 but needs to be

On Fri, 1 Mar 2019 08:21:54 -0500 Jonathon Reinhart via samba <samba at lists.samba.org> wrote: > Hello, > > I'm running a Samba DC on Debian 9 (version 4.5.12-Debian) in a lab > environment, set up like this: > https://jonathonreinhart.com/posts/blog/2019/02/11/setting-up-a-samba-4-domain-controller-on-debian-9/ There are a few 'not quite right' things there

In one word: DONT! Tried it once and realmd moved the DC to the Computer OU in AD. There it no longer is a DC and nothing worked for us... As it is already joind you don't need realmd at all. Just configure sssd.conf and start sssd. However, I would not recommend that. We have since switched to winbind as this is already running and with the sernet packages can not be installed alongside

Hai Jonathon, in addition to Rowlands coment.. .. He is always quicker in the resonse when im typing them.. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Jonathon Reinhart via samba > Verzonden: vrijdag 1 maart 2019 14:22 > Aan: samba at lists.samba.org > Onderwerp: [Samba] (no subject) > > Hello, > >

Hello all, A recurring question is how to assign uidNumber and gidNumber attributes to users and groups in Active Directory [1]. While it is possible to avoid this by using e.g. the "rid" idmap backend, it is sometimes desirable for Active Directory to be the single source of truth for UID / GID numbers. This is especially true if not all of your UNIX domain members can use the same

On Tue, Jul 02, 2019 at 11:24:55PM -0400, Jonathon Reinhart via samba wrote: > Hello, > > I'm trying to use the "notify" API of libsmbclient, testing against a > Samba AD DC. The function is returning with errno=22 (mapped from > NT_STATUS_REVISION_MISMATCH), and I'm getting the following error > message: > > smb1cli_req_writev_submit: called for

> > I was aware that computer accounts were also users in AD, but I hadn't > considered assigning a uidNumber to them. It makes sense that winbind > (in idmap="ad" mode) would not "see" the accounts with a uidNumber. > Naturally, groups of which the computer accounts are members would > need gidNumber assigned as well. This is interesting. I also have a

On Sat, 2 Mar 2019 17:57:41 -0500 Jonathon Reinhart via samba <samba at lists.samba.org> wrote: > On Fri, Mar 1, 2019 at 9:04 AM L.P.H. van Belle via samba > <samba at lists.samba.org> wrote: > [snip] > > few minor points. > > > > REALM="ad.onthefive.com" > > Realm always in CAPS, this prevens problems with other programs. > > Most

Hello, I'm running a Samba DC on Debian 9 (version 4.5.12-Debian) in a lab environment, set up like this: https://jonathonreinhart.com/posts/blog/2019/02/11/setting-up-a-samba-4-domain-controller-on-debian-9/ I would now like to configure this server to enable login via domain credentials. I'm aware that the Samba wiki recommends the following: -

Listening to notifications can only complement another mechanism (and then reduce latency) as otherwise you are going to loose changes during downtimes. Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Jonathon Reinhart via samba Gesendet: Tuesday, 16 July 2019 22:22 An: Rowland penny <rpenny at samba.org> Cc: sambalist <samba

On Tue, Jul 16, 2019 at 12:32 PM Rowland penny via samba <samba at lists.samba.org> wrote: > > On 16/07/2019 16:40, Jonathon Reinhart wrote: > > On Tue, Jul 16, 2019 at 9:32 AM Rowland penny via samba > > <samba at lists.samba.org> wrote: > >> On 16/07/2019 14:16, Jonathon Reinhart wrote: > >>> On Tue, Jul 16, 2019 at 9:11 AM Rowland penny via

On 05/06/2019 21:12, Jonathon Reinhart via samba wrote: > All, > > I'm working on a script to automatically assign uidNumber and gidNumber > attributes to users. I have a few questions: > > 1) Which users should be excluded from this assignment? Any you want to be visible to Unix > > I'm currently using this LDAP filter (simplified syntax used here): >

On 14/02/2020 02:54, Jonathon Reinhart via samba wrote: > Hello, > > A user of my "adman" utility recently opened this issue [1]: "Add > support for setting uidNumber for machine account" > > I was aware that computer accounts were also users in AD, but I hadn't > considered assigning a uidNumber to them. It makes sense that winbind > (in

Mandi! Jonathon Reinhart via samba In chel di` si favelave... > I understand the OP in this post [2] had the following use case: A > startup script uses the computer account to access a samba server. More specifically: if you need that ''services'' (or more generally: 'things that run on SYSTEM account') have access to your share, Windows client OS automatically

On 16/07/2019 14:16, Jonathon Reinhart wrote: > On Tue, Jul 16, 2019 at 9:11 AM Rowland penny via samba > <samba at lists.samba.org> wrote: >> On 16/07/2019 14:02, Jonathon Reinhart wrote: >>> Rowland, >>> >>> You could go another step further and run that with "notify" to >>> monitor for changes, instead of having to run it in a cron

Hi Howland, Thanks for the help, I will redo the structure. It is not complex and not large. Best regards, Gabriel Franca ----- Mensagem original ----- De: "Rowland penny via samba" <samba at lists.samba.org> Para: "sambalist" <samba at lists.samba.org> Enviadas: Quinta-feira, 19 de Dezembro de 2019 10:53:43 Assunto: Re: [Samba] NIS Domain Does Not Appear On

On 16/07/2019 16:40, Jonathon Reinhart wrote: > On Tue, Jul 16, 2019 at 9:32 AM Rowland penny via samba > <samba at lists.samba.org> wrote: >> On 16/07/2019 14:16, Jonathon Reinhart wrote: >>> On Tue, Jul 16, 2019 at 9:11 AM Rowland penny via samba >>> <samba at lists.samba.org> wrote: >>>> On 16/07/2019 14:02, Jonathon Reinhart wrote: