similar to: winbindd: getent passwd yields empty GECOS field

Dear all; Is it possible to refresh the machine password in an AD setup while also using a keytab for verifying secrets? As far as I can see machine password updates (as controlled by "machine password timeout") are disabled when a keytab is in use (in particular, when "kerberos method = secrets and keytab"), but without an up-to-date keytab e.g. single sign-on with SSH

On Thu, 2020-02-13 at 15:07 -0800, Johan Hattne via samba wrote: >> Dear all; >> >> I'm trying to use winbindd to resolve names in an AD setup. I can >> authenticate just fine, but I've noticed that for some users "getent >> passwd" returns a GECOS field populated with displayName from the LDAP >> servers and for others is does not. For

On Thu, 2020-02-13 at 15:07 -0800, Johan Hattne via samba wrote: > Dear all; > > I'm trying to use winbindd to resolve names in an AD setup. I can > authenticate just fine, but I've noticed that for some users "getent > passwd" returns a GECOS field populated with displayName from the LDAP > servers and for others is does not. For example: > > $

hey folks,   I am trying to change the fruit:model value for changing the icon in the mac os finder. After digging a little bit in the source code I saw that "source3/smbd/avahi_register.c" does not contain a line where info like <service> <type>_device-info._tcp</type> <port>0</port> <txt-record>model=RackMac</txt-record> is added to avahi. In

Dear all; I?m running smbd 4.9.5-Debian and I?m struggling to get Time Machine support to work. The server is running Debian Buster, and the client is macOS High Sierra. I can mount the share just fine on its own, but as soon as I tell Time Machine to ?Back Up Now?, it says ?Preparing Backup,? ?Looking for Backup Disk,? and then nothing. The little red exclamation mark tells me that "The

Hi. I configured a simple samba server. As I need this server to be available in macOS ?Network? list, I configured avahi. When I start smb.service and avahi-daemon.service I get two results in the ?Network? section. When I don?t use avahi I get no entry. Why are there two entries and which best practice can I use to have only one entry? Thanks! Steven ##################################### cat

I have discovered that a user who has a blank GECOS field in the passwd file under RedHat 4.0 (Colgate) is unable to change passwords. Running the passwd command goes like this: [user@host user]$ passwd Password: [entry of old passwd] New password: [entry of new passwd] [user@host user]$ echo $! 1 [user@host user]$ Setting the name field in the GECOS seems to solve this problem. [mod: While

On 08/21/2019 12:31 PM, Rowland penny via samba wrote: > Though it appears that errors have occurred, everything has worked to > here. > >> Adding 1 remote DNS records for ATHENA2.edm-inc.com >> Adding DNS A record ATHENA2.edm-inc.com for IPv4 IP: 10.10.1.15 >> Join failed - cleaning up > > It is failing whilst trying to add the new DCs A record and anything >

Has anybody run into the wierdness of the gecos info coming from winbind? Here's an example: [root@server]# getent passwd dflores dFlores:x:21509:13201:Flores, Dick:/home/DOMAIN/dFlores:/bin/bash [root@server]# finger dflores Login: dFlores Name: Flores Directory: /home/DOMAIN/dFlores Shell: /bin/bash Office: Dick Never logged in. No mail. No Plan.

This has always bothered me.. wtf does gecos mean (in the samba ldap)?

Greetings, My odd question for the week - I've been unable to figure out if/how to do this. Given an Active Directory user ID, is there a way to get the user's real name? During testing of our Samba AD member servers I have seen user's given names appearing in the log files - is there a way that I can pull that for my own use? Our site uses loginIDs for users that give no clue

On 08/21/2019 02:21 PM, Rowland penny via samba wrote: > I'm wondering if there's a better approach to this?? I only have > around 30 accounts.? Is there any way that I can just create the same > domain from scratch with a fresh Samba machine and get rid of the old > DCs completely?? Would all the workstations be able to join the new > domain even though it would have

I just installed Red Hat v. 6.2 and would like to configure SAMBA. I was wondering if you could point me to some good documentation sites that can lead me step by step through setup and configuration of SAMBA. I'll be experimenting with it in the meantime but your help will be extremely helpfull. Thank you, Jerry Lawson MCSE, MCP +Internet

Hi all, I'm using the VFS sbadow_copy2 module, and I think I've hit a bug. This config works: mattcen at adam:SambaTest$ cat works3/smb.conf [SambaTest] comment = SambaTest writable = yes path = /srv/SambaTest/share #vfs objects = shadow_copy vfs objects = shadow_copy2 shadow:snapdir = /mnt/dates shadow:basedir = /srv mattcen

Dear all; Would anybody be able to tell me what the idmap configuration is to have Samba do the same SID-to-user/group mapping as the SSSD defaults? I was convinced I saw it on this list or the wiki not too long ago, but I cannot seem to find it. // Best wishes; Johan

On 2020-01-31 12:30, Johan Hattne wrote: > Dear all; > > On the recent topic of Time Machine backups: when backing up a machine > running macOS Mojave to a Samba server on Debian Buster with > buster-samba410 packages from https://apt.van-belle.nl/debian, we see > our logs filling up with messages like > > ../../source3/modules/vfs_fruit.c:7001(fruit_tmsize_do_dirent)

On 2020-09-03 10:43, Rowland penny via samba wrote: > On 03/09/2020 18:04, Johan Hattne via samba wrote: >> Dear all; >> >> Would anybody be able to tell me what the idmap configuration is to >> have Samba do the same SID-to-user/group mapping as the SSSD >> defaults?? I was convinced I saw it on this list or the wiki not too >> long ago, but I cannot seem

On Thu, Sep 03, 2020 at 06:43:32PM +0100, Rowland penny via samba wrote: > On 03/09/2020 18:04, Johan Hattne via samba wrote: > > Dear all; > > > > Would anybody be able to tell me what the idmap configuration is to have > > Samba do the same SID-to-user/group mapping as the SSSD defaults?? I was > > convinced I saw it on this list or the wiki not too long ago,

Hello there, I'm having a weird behaviour with getent (and by extension winbind using wbinfo) when querying for specific user info. I'm running Samba 3.5.4 in Centos 5.7 (3.5.4-0.83.el5_7.2) with default options, and securty = ads Everything works fine, but now I'm working on some autoemails with reports and I want to get rid of the user names, using user's first / last names

This is a trivial request -- and not a bug, but it could really make my life easier. I don't know if other Samba users would find this useful or not. I'm using winbind to give "Windows" (samba domain) users access to Linux systems, and we need to audit, generate reports, etc. on who has access, etc. We're also using winbind groups in /etc/sudoers, so that gets audited