similar to: Is Samba 4.9 and "map untrusted to domain" possible anymore?

On Thu, 4 Jun 2020, Rowland penny via samba wrote: > On 04/06/2020 13:49, Harald Hannelius via samba wrote: >> >> Question 3) >> If I would enable trust between "AD" and "SAD", would users trying to >> access files on a Samba fileserver be mapped to the uidNumber in "SAD" DS? >> Or would they be mapped to something entirely else?

On Thu, 4 Jun 2020, Rowland penny via samba wrote: > On 04/06/2020 13:49, Harald Hannelius via samba wrote: >> >> Question 2) >> Does a windows client behave differently when speaking to a NT4-domain or >> an >> AD-domain in how they try passwords? I have a feeling that users in the >> "AD"-domain didn't need to (manually at least) enter any

On Thu, 4 Jun 2020, Rowland penny via samba wrote: > On 04/06/2020 14:46, Harald Hannelius via samba wrote: >> >> So the best way for me would be to implement the RFC2307/SFU schema in the >> Windows AD "AD", add the same uidNumber for every user in "AD" as they had >> in the old "Samba" domain, and then just join the fileservers to the

On Tue, 16 Jun 2020, Rowland penny via samba wrote: > On 16/06/2020 12:41, Harald Hannelius via samba wrote: >> I have Samba AD-domain with two fileservers and two Samba DS-servers. Most >> people can authenticate OK, but one user always gets "wrong password". > What versions of Samba ? All servers are 4.9.5-Debian. >> Auth: [SMB2,(null)] user [SAD]\[username]

On Fri, 15 May 2020, Rowland penny via samba wrote: > On 15/05/2020 13:48, Harald Hannelius wrote: >> >> I created a script that looped on 'getent passwd' from the old DC. It >> called samba-tool and pdbedit to add the users; >> >> samba-tool user create $username Some2pass/e --use-username-as-cn >> --nis-domain=sad --unix-home=$home

On Tue, 8 Sep 2020, Rowland penny via samba wrote: > On 08/09/2020 13:27, Harald Hannelius via samba wrote: >> >> Hello, >> >> I have users in Samba AD with uid- and gidnumbers. I also have group >> objects with gidNumbers. >> >> I have a Samba member server (all servers Samba 4.9.5-Debian) that have one >> share and a lot of directories.

On Tue, 8 Sep 2020, Rowland penny via samba wrote: > On 08/09/2020 13:55, Harald Hannelius wrote: >> >> On Tue, 8 Sep 2020, Rowland penny via samba wrote: >>> On 08/09/2020 13:27, Harald Hannelius via samba wrote: >>>> >>>> Hello, >>>> >>>> I have users in Samba AD with uid- and gidnumbers. I also have group

Hello, I have users in Samba AD with uid- and gidnumbers. I also have group objects with gidNumbers. I have a Samba member server (all servers Samba 4.9.5-Debian) that have one share and a lot of directories. The directory permissions are set as a specific group as owner, and the group write and suid bit are set. drwxrwsr-x 2 root thegroup 4096 Sep 8 15:25 groupdir This worked fine in

I have Samba AD-domain with two fileservers and two Samba DS-servers. Most people can authenticate OK, but one user always gets "wrong password". I tried changing this user's password, and was able to connect by using smbclient, and I was also able to map this drive using the user's username and password on my own windows 10 workstation. Also; # wbinfo -a username Enter

Hi all, I have a domain member server 3.6.6 running on debian7, authenticating against another debian7 + samba 3.6.6 in DC-mode. Both servers have user-accounts and groups on LDAP and resolve posix users using libnss-ldap. The groupmap is living on LDAP as well. The domain member server serves a share with ACL enabled. I got the upgrade to 3.6.X and idmap-updates working, but the old

This has probably been discussed before, but since I'm new on the list I hope You have patience with me. I have a four brick distributed/replicated setup. The computers are multi-core 16GB memory and 2*2.0TB in raid1 SATA-disks locally. The nodes are connected by 1 GB ethernet. All nodes have glusterfs 3.3beta2 installed and they are running debian 6 64bit. The underlying filesystems are

I have succesfully migrated our users (~3900) from our Samba 3 DC/OpenLDAP, complete with passwords. I have some 300 + groups that I'm trying to get migrated to our Samba 4 AD. I can create the groups, but it looks from the domain-member's side that groups don't work as I expect them to. - Not all groups seems to be visible by using 'getent group'. It looks like groups

On Wed, 17 Jun 2020, Rowland penny via samba wrote: > On 17/06/2020 11:54, Harald Hannelius wrote: >> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>> On 17/06/2020 11:39, Harald Hannelius via samba wrote: >> >> Sorry, You lost me here. Has this been discussed recently? I'm in the >> middle of so many projects I haven't had time to sit and

On 04/06/2020 13:49, Harald Hannelius via samba wrote: > > > We have a windows domain "AD" and a samba domain "SAD" running Samba > 4.9 in AD-mode. > > We also have an old NT4 domain called "Samba" running Samba 3.6 + > OpenLDAP. > > We have the same users and passwords in all three. The user objects in > the "SAD"-domain

How do I add a user with samba-tool that has the givenname "?ke" or surname "?berg"? # samba-tool user create foobar 21asdasd// --given-name="?ke" ERROR(<type 'exceptions.UnicodeDecodeError'>): Failed to add user 'foobar': - 'ascii' codec can't decode byte 0xc3 in position 8: ordinal not in range(128) File

Two Samba AD i AD DS mode running Version 4.9.5-Debian. Three member-servers running Samba Version 4.9.5-Debian. I'm adding users to a group, and most of them look ok when I check with 'id username' on the member-servers. Also 'samba-tool group show' and 'user show' looks OK to me, the user has the correct memberOf attribute and the DN is also member of the

On Wed, 17 Jun 2020, Rowland penny via samba wrote: > On 17/06/2020 11:39, Harald Hannelius via samba wrote: >> >> >> However, on the member-server 'id username' doesn't show this group. 'id >> username' shows this group for all other users in this group. > > So, it wasn't just me ;-) Sorry, You lost me here. Has this been discussed

On Fri, 15 May 2020, Rowland penny via samba wrote: > On 15/05/2020 16:33, Harald Hannelius wrote: >> If there's a way to copy the sambaNTPassword password-hash from the LDAP >> for the Samba 3 DC with samba-tool I would have loved to find that >> information long ago :) > Why do you need the sambaNTPassword ? So the users would have the same password. I don't

On Wed, 17 Jun 2020, Harald Hannelius wrote: > On Wed, 17 Jun 2020, Harald Hannelius via samba wrote: >> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>> On 17/06/2020 11:54, Harald Hannelius wrote: >>>> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>>>> On 17/06/2020 11:39, Harald Hannelius via samba wrote: >>>>

On Mon, 31 Aug 2020, Jonathon Reinhart via samba wrote: > On Mon, Aug 31, 2020 at 9:21 AM Harald Hannelius via samba > <samba at lists.samba.org> wrote: >> On Wed, 17 Jun 2020, Harald Hannelius wrote: >>> On Wed, 17 Jun 2020, Harald Hannelius via samba wrote: >>>> On Wed, 17 Jun 2020, Rowland penny via samba wrote: >>>>> On 17/06/2020 11:54,