similar to: auto_private_groups analogue?

On 28/02/2020 13:24, chriscox--- via samba wrote: > Manually.? Direct edit of passwd and group.Sent from my Sprint Phone.------ Original message------From: Rowland penny via sambaDate: Fri, Feb 28, 2020 2:04 AMTo: samba at lists.samba.org;Cc: Subject:Re: [Samba] auto_private_groups analogue?On 28/02/2020 00:00, Christopher Cox via samba wrote: >> Maybe a workaround?? We use winbind and

SSSD has auto_private_groups setting which effectively automatically creates a private user group when getting users from AD that either don't have gidNumber set for them or have gidNumber set to be the same as uidNumber. Is there any option in Winbind that could help achieve a similar result? Say, I have a user 'alexey' with uidNumber 1174235, when I run `id alexey` I want to get

What I'm offering is a solution. Again, what I proposed is a functional workaround. It's actually pretty natural and obvious when you get right down to it. On 2/28/20 8:00 AM, Rowland penny via samba wrote: > On 28/02/2020 13:24, chriscox--- via samba wrote: >> Manually.? Direct edit of passwd and group.Sent from my Sprint Phone.------ >> Original message------From:

On 2/28/20 11:29 AM, Rowland penny via samba wrote: > On 28/02/2020 17:18, Christopher Cox via samba wrote: >> What I'm offering is a solution. >> >> Again, what I proposed is a functional workaround.? It's actually pretty >> natural and obvious when you get right down to it. >> > No it isn't. If you try to add a local user to a domain joined Unix

On 21/03/15 18:08, Jhon P wrote: > Ready changed what you asked me and restart the samba service. > Yet I only see the UID instead of domain users. :-/ > > One question. > > I do not see the service "winbind or winbindd" running, is this correct. > I can not find it in init.d > > Also "wbinfo -u" Show me the domain users. > > Thanks for helpme,

On 21/03/15 00:10, Jhon P wrote: > Now I realized what the documentation says, sucessfull. > > I returned to run the above command and these results changed. > > Change the settings of smb.conf, now looks: > > [global] > workgroup = KENNEDY > realm = kennedy.edu > netbios name = PROTEUS > server role = active directory domain

On 20/03/15 20:39, Jhon P wrote: > OK, i try removing this block, and add the line. > Restart samba but nothing happends. > > > > Date: Fri, 20 Mar 2015 20:01:04 +0000 > > From: rowlandpenny at googlemail.com > > To: samba at lists.samba.org > > Subject: Re: [Samba] Samba 4.1 gentent, ls, no display domain user > name on Primary ACDC but wbinfo -u yes >

The locate libnss_winbind.so display. /lib/libnss_winbind.so /lib/libnss_winbind.so.2 /lib/x86_64-linux-gnu/libnss_winbind.so /lib/x86_64-linux-gnu/libnss_winbind.so.2 /lib64/libnss_winbind.so /lib64/libnss_winbind.so2 /usr/lib/x86_64-linux-gnu/libnss_winbind.so /usr/lib/x86_64-linux-gnu/libnss_winbind.so.2 /usr/local/samba/lib/libnss_winbind.so /usr/local/samba/lib/libnss_winbind.so.2

On 20/03/15 19:47, Jhon P wrote: > > > Yes im have a file: > > -rw-r--r-- 1 root root 19K Jan 10 2014 libnss_winbind.so.2 > > My pam: > PAM profiles to enable: > ? [*] Unix authentication > ? [*] Winbind NT/Active Directory authentication > ? [ ] ConsoleKit Session Management > ? [ ] Inheritable Capabilities Management > > >>

On 20/03/15 21:19, Jhon P wrote: > Im think not provisioned with provisioned with '--use-rfc2307' > > root at proteus:~# ldbsearch -H /usr/local/samba/private/sam.ldb -b > 'dc=kennedy,dc=edu' -s sub '(objectclass=msSFU30DomainInfo)' > GENSEC backend 'gssapi_spnego' registered > GENSEC backend 'gssapi_krb5' registered > GENSEC backend

On 20/03/15 17:32, Jhon P wrote: > I install samba 4.1 from > the sources. In Debian 7.0 "wheezy" > a year ago. > > > > > > Thanks for responding. > > > > > From: patocius at hotmail.com > To: rowlandpenny at googlemail.com > Subject: RE: [Samba] Samba 4.1 gentent, ls, no display domain user name on Primary ACDC but wbinfo -u yes > Date:

Done. Since I restarted samba service but not yet showing users. : - ( Maybe there is something else I have to do. > Date: Sun, 22 Mar 2015 22:24:49 +0000 > From: rowlandpenny at googlemail.com > To: samba at lists.samba.org > Subject: Re: [Samba] Samba 4.1 gentent, ls, no display domain user name on Primary ACDC but wbinfo -u yes > > On 22/03/15 21:55, Jhon P wrote: > >

Hello friends: I hope you can help me with this I'm struggling a year ago After breaking my head migrating a server with Samba Samba 2.1 to 4.1 all stay perfect and functional. All files are in this domain controller for now, and then be moved to a domain member, "the file server". I configure the server as ADDC Samba 4.1 and up here all went well, the shares, the users, winbind,

I am having issues integrating a FC3 system with AD running on W2k3. I can not figure out why the user ID mappings and Group ID mappings are going stale. This is a generic FC3 install with all of the latest updates. login as: jgallagh Sent username "jgallagh" jgallagh@linman's password: Last login: Fri May 6 08:14:23 2005 from 192.168.168.2 id: cannot find name for group ID

On 23/03/15 12:51, Jhon P wrote: > One ADDC with linux Debian 7 and Samba4.1 working.} > Im test "NIS" and works fine after we expand the samba 4 schema. ;-) > > This is the DC with the problem of getent and can give domain users > infoonly "wbinfo -u". > > When list directories with "ls" also display UID instead Domain User > ID in the

On 12/04/15 11:19, jd at ionica.lv wrote: > > Cit?ju jd at ionica.lv: > >> Hi! >> >> the previous problems were solved (thank you, Rowland!), but few >> issues remains: >> >> I get such msg in log: >> 0. Is it possible to tell samba to output messages in logs as one >> line per message (even if it is long one?) >> >> 1.

On 23/03/15 15:18, Jhon P wrote: > Yes im see the same as you on the member, but not in the ADDC. > > A question, do you have idmap configs on the smb.conf of the ADDC? > > No, I basically have what the provision provided, just the addition of the template lines, the idmap config lines are only of use on a member server, as far as I can see, that do nothing on a DC. > >

On 23/03/15 11:42, Jhon P wrote: > Thanks for the clarification. > > They are around 80 clients. > All windows 7 and Xp pro. > > One member server linux with Debian 7 for testing the future file > server. All on this works fine. > > Other servers that are not in the domain > > Thanks. > > Date: Mon, 23 Mar 2015 09:26:08 +0000 > > From: rowlandpenny at

On 23/03/15 13:15, Jhon P wrote: > Yes its correct. > > > Date: Mon, 23 Mar 2015 13:09:26 +0000 > > From: rowlandpenny at googlemail.com > > To: samba at lists.samba.org > > Subject: Re: [Samba] Samba 4.1 gentent, ls, no display domain user > name on Primary ACDC but wbinfo -u yes > > > > On 23/03/15 12:51, Jhon P wrote: > > > One ADDC with

On 23/03/15 00:55, Jhon P wrote: > It will be necessary to join this PDC to the domain? Firstly, it is a 'DC' not a 'PDC', there really is no concept of a Primary Domain Controller in active directory, other than one of the FSMO roles. These FSMO roles are the only differences between DCs , other than this, all DCs are the same (or should) You do not join a DC to the domain