similar to: unix_primary_group and unix_nss_info for rfc2307 idmap backend

On Thu, Dec 19, 2019 at 10:19:28PM +0000, Rowland penny via samba wrote: > On 19/12/2019 21:46, Sebastian Lisic wrote: > >Thanks for the quick reply, Rowland! > > > >The problem I have is that the clients of each domain do not have access to the other domain's DC. Only the DCs of each domain can talk to one another. With Microsoft no longer allowing POSIX attributes to be

Am 2017-02-01 um 12:19 schrieb Rowland Penny via samba: > ADUC never added uidNumbers automatically, you had to use the Unix > Attributes tab, but this no longer exists on windows 10, you have to > use the 'attributes' tab > > The only way (that I know) to create a user with a uidNumber, is to > use samba-tool, run 'samba-tool user create --help' for more info.

The question is, if without the option "use idmap_ldb:use rfc2307 = yes"? I will be able to set the uid, uidNumber, unixHomeDirectory and gid on the DC, as I can do it now? NAVI Sp. z o.o. Promienista 5/1 60-288 Pozna? mobile: +48609769035 phone: +48616622881 fax: +48616622882 http://www.navi.pl On 2024-06-20 12:32, Luis Peromarta via samba wrote: > This looks OK, and is a member

Hi all, I know this is a little off topic (although it might not be because I'm sure there's a solution involving Samba!)... but I hope one of you fine people can advise me on the best approach to achieving an integrated directory supporting Unix/Linux as a first class citizen, storing autofs maps, as well as uid, gid and home folders for each user... and how would that be managed. I see

Hi, A account created with samba3/ldap (created before 2014-02-20): SID: S-1-5-21-XXXXXXXXXX-XXXXXXXXX-XXXXXXXXXX-3216 UidNumber : 1108 A account created with Users and computers (samba 4 AD DC) SID: S-1-5-21-XXXXXXXXXX-XXXXXXXXX-XXXXXXXXXX-5878 uidNumber : 10023 My actual config (in file-server) : idmap config XXXXXX:backend = ad idmap config XXXXXX:schema_mode = rfc2307 idmap config

On 13/06/16 11:12, lists wrote: > Hi Rowland, > > On 13-6-2016 9:46, Rowland penny wrote: >> Use ADUC and change the shell every time you add Unix attributes to a >> user (note: the latest ADUC doesn't have the Unix attributes tabs) > Latest ADUC does not have this? So, are you saying that in the future > we will no longer be able to use ADUC like we currently do?

On Thu, Jul 4, 2019 at 4:49 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 04/07/2019 21:25, Ryan via samba wrote: > > I am still trying to configure Samba to authenticate users against > > ActiveDirectory, but lookup uid and gids against a stand-alone OpenLDAP > > server. Related to a previous recommendation, I found the idmap_rfc2307 > >

On Fri, Jul 5, 2019 at 2:32 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 05/07/2019 18:50, Ryan via samba wrote: > > On Thu, Jul 4, 2019 at 4:49 PM Rowland penny via samba < > > samba at lists.samba.org> wrote: > > > >> On 04/07/2019 21:25, Ryan via samba wrote: > >>> I am still trying to configure Samba to authenticate

I am still trying to configure Samba to authenticate users against ActiveDirectory, but lookup uid and gids against a stand-alone OpenLDAP server. Related to a previous recommendation, I found the idmap_rfc2307 capability, which seems likely exactly what I what. Unfortunately, it does not seem to work. Users are not permitted to access shares for which they are in the group. Tests I found online

On 18/06/2019 17:24, Edouard Guign? via samba wrote: > "winbind refresh tickets = yes" did not help for my case. > It always has for myself, I have never had to refresh any kerberos machine tickets manually Rowland

Yes. The rf2307 attributes are part of the Samba AD schema. You don?t need the line in the DC unless under very exceptional circumstances. If you are not sure if you need the line, this means you don?t need the line. It will make your life easier. LP On Jun 20, 2024 at 11:40 +0100, Olaf Fr?czyk <olaf at navi.pl>, wrote: > > The question is, if without the option "use

On 28.01.2019 15:27, Rowland Penny via samba wrote: > On Mon, 28 Jan 2019 09:10:58 -0500 > Sonic via samba <samba at lists.samba.org> wrote: > >> Trying to use the idmap config ad on a domain member. The AD is an >> actual Windows server and when logged in the AD server running ADUC >> the NIS domain field on the UNIX attributes tab only shows a dash and >>

Hi, On a samba 4.9.4 fileserver using ad backend with rfc2307  , when i create a file from a Win10 client, it s always created with the rights user:"domain users". I ve understood that with "unix_primary_group = yes" , the file should be created with the rights user:gidNumber . Here is my config : [global]        security = ADS        workgroup = SAMBA494        realm =

Hai, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian Daré via samba > Verzonden: woensdag 6 februari 2019 11:54 > Aan: samba at lists.samba.org > Onderwerp: [Samba] unix_primary_group = yes don t work > > Hi, > > On a samba 4.9.4 fileserver using ad backend with rfc2307  , when i > create a file

On 10/12/2019 13:29, Klaus Jaensch via samba wrote: > Hi Rowland, > >>> I used the latest Ubuntu server version for testing: >>> >>> Samba version 4.10.7-Ubuntu >>> >> Here is my test smb.conf > > [global] > ? security = ads > ? realm = SAMDOM > ? workgroup = IPS > ? idmap config *:backend =tdb > ? idmap config *:range =

On 2015-11-09 at 09:05 +0000, Rowland Penny wrote: > On 09/11/15 08:03, Michael Adam wrote: > >On 2015-11-09 at 07:57 +0100, buhorojo wrote: > >>On 08/11/15 23:40, Michael Adam wrote: > >>>please submit a bug report at https://bugzilla.samba.org/ > >>There are already many. Start with 10886. > >Ah, thanks for the pointer. > >We need to follow up

Hi Rowland, Am 10.12.19 um 13:05 schrieb Rowland penny via samba: > On 10/12/2019 11:41, Klaus Jaensch via samba wrote: >> Hello all, >> >> we want to change the configuration of our Samba domain member file >> servers to use >> >> unix_primary_group=yes >> >> After some experiments I was able to get it to work, but only with >> >>

Am 10.12.19 um 15:08 schrieb Rowland penny via samba: > On 10/12/2019 13:29, Klaus Jaensch via samba wrote: >> Hi Rowland, >> >>>> I used the latest Ubuntu server version for testing: >>>> >>>> Samba version 4.10.7-Ubuntu >>>> >>> Here is my test smb.conf >> >> [global] >> ? security = ads >> ? realm =

Hello all, we want to change the configuration of our Samba domain member file servers to use unix_primary_group=yes After some experiments I was able to get it to work, but only with vfs objects = acl_xattr commented out. With acl_xattr enabled the primary group is still displayed correctly in the output of smbstatus, but new files are not created with with this primary group. The

On Sat, Jul 6, 2019 at 3:04 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 05/07/2019 20:00, Ryan via samba wrote: > > On Fri, Jul 5, 2019 at 2:32 PM Rowland penny via samba < > > samba at lists.samba.org> wrote: > > > >> On 05/07/2019 18:50, Ryan via samba wrote: > >>> On Thu, Jul 4, 2019 at 4:49 PM Rowland penny via samba