similar to: wbinfo -u / getent passwd not working

On 10.07.20 12:25, Rowland penny via samba wrote: > On 10/07/2020 11:10, basti via samba wrote: >> Hello, >> i try to setup a linux laptop for homeoffice with login for ad users. >> The last few days it work like expected. >> >> today wbinfo -u return no user, getent passwd <username> also. >> >> wbinfo -a "SAMDOM\user" >> Enter

https://web.mit.edu/kerberos/krb5-devel/doc/admin/conf_files/krb5_conf.html#libdefaults Kerberos ticket_lifetime it default 1 day. What does the auth.log show? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > basti via samba > Verzonden: vrijdag 10 juli 2020 12:29 > Aan: samba at lists.samba.org >

Hello, my samba domain member file server do some strange thinks. First of all Version 4.9.5-Debian and smb.conf is this: [global] workgroup = SAMDOM security = ADS realm = SAMDOM.EXAMPLE.COM log file = /var/log/samba/%m.log log level = 1 winbind refresh tickets = Yes vfs objects = acl_xattr map acl inherit = Yes store dos attributes = Yes dedicated keytab file =

On 10.07.20 12:39, Rowland penny via samba wrote: >>> What OS and version is this ? >> debian 10 >>> What Samba version ? >> 2:4.9.5+dfsg-5+deb10u1 >> >> only winbind installed. > So you only require authentication > > Have you tried restarting winbind ? yes, restart winbind, network and the hole system does not help I have start winbind in

On 10.07.20 13:01, Rowland penny via samba wrote: > On 10/07/2020 11:45, basti via samba wrote: >> >> On 10.07.20 12:39, Rowland penny via samba wrote: >> >>>>> What OS and version is this ? >>>> debian 10 >>>>> What Samba version ? >>>> 2:4.9.5+dfsg-5+deb10u1 >>>> >>>> only winbind installed.

cat /etc/nsswitch.conf # /etc/nsswitch.conf # # Example configuration of GNU Name Service Switch functionality. # If you have the `glibc-doc-reference' and `info' packages installed, try: # `info libc "Name Service Switch"' for information about this file. passwd: files winbind group: files winbind shadow: files gshadow: files hosts:

Just thing i notised. > idmap config * : range = 1000-2000 This might give conflicts. Output of `cat /etc/adduser.conf |grep "[G-U]ID" ` These ranges should not overlap. After how may days/hours did it stop working? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > basti via samba >

On 10.01.20 10:30, Rowland penny via samba wrote: > On 10/01/2020 09:01, basti via samba wrote: >> Hello, >> my samba domain member file server do some strange thinks. >> >> First of all Version 4.9.5-Debian and smb.conf is this: >> >> [global] >> ??? workgroup = SAMDOM >> ??? security = ADS >> ??? realm = SAMDOM.EXAMPLE.COM >>

On 10/07/2020 11:31, basti via samba wrote: > > On 10.07.20 12:25, Rowland penny via samba wrote: >> On 10/07/2020 11:10, basti via samba wrote: >>> Hello, >>> i try to setup a linux laptop for homeoffice with login for ad users. >>> The last few days it work like expected. >>> >>> today wbinfo -u return no user, getent passwd

On 10/07/2020 11:10, basti via samba wrote: > Hello, > i try to setup a linux laptop for homeoffice with login for ad users. > The last few days it work like expected. > > today wbinfo -u return no user, getent passwd <username> also. > > wbinfo -a "SAMDOM\user" > Enter SAMDOM\user's password: > plaintext password authentication succeeded > Enter

Hello, on my samba AD i have set homedir to /home/users/<username>. Now i have setup a linux client with pam-winbind and nss-winbind. getent passwd <username> show /home/users/<username> as home directory. And that's dir is create on login. Why it is use the path set on AD and not the path set in smb.conf ? grep home -r /etc/pam.d/ /etc/samba/smb.conf

hello, is there a way to map usergroups via winbind? I need 'getent passwd': testuser:x:7072:513::/home/users/testuser:/bin/bash but I get: testuser:x:7072:30000::/home/users/testuser:/bin/bash gidNumber is set to 513 in samba-ldap. cat /etc/nsswitch.conf passwd: compat winbind group: compat winbind cat /etc/samba/smb.conf [global] security = ADS

homeDirectory = unset unixHomeDirectory = /home/users/<username> I thought I could overwrite it with template homedir = /home/%U On 08.07.20 16:52, Rowland penny via samba wrote: > On 08/07/2020 15:15, basti via samba wrote: >> ? cat /etc/nsswitch.conf >> # /etc/nsswitch.conf >> # >> # Example configuration of GNU Name Service Switch functionality. >> # If

Hello, after demote and rejoun my dc2 i have problems with replication. First of all some srv records on dc1 are missing, on dc2 they are exist. root at dc2:~# dig srv _ldap._tcp.ForestDnsZones.samdom.example.com @dc2.samdom.example.com. ; <<>> DiG 9.11.5-P4-5.1+deb10u1-Debian <<>> srv _ldap._tcp.ForestDnsZones.samdom.example.com @dc2.samdom.example.com. ;; global

On Thu, 28 Dec 2023 18:18:22 +0000 bd730c5053df9efb via samba <samba at lists.samba.org> wrote: > Hi all! > > As a die hard slackware user and as a part of my learning pam process > I installed debian bookworm (12.4.0) in a vm and setup a domain > member server per the instructions in the wiki trying to figure out > how debian does it so I can correct some issues I have

I have setup an samba 4 AD DC. The Domain Administrator SAMDOM\Administrator can't create GPO (access denied). SAMDOM\Administrator is member of Domain Admins group. I have try samba-tool ntacl sysvolreset samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix samba-tool dbcheck --cross-ncs --fix without success.

Hello, is there a way to get the last uidNumber from ldap. I can do a ldapsearch like: ldapsearch -h samdom.example.com -D "administrator at samdom.example.com" -w "changeit" -b "DC=samdom,DC=example,DC=com" -x -LLL "(uidNumber=*)" uidNumber | grep -Po "(?<=uidNumber: )([0-9]{4})" | sort | tail -n1 But there is no guarantee that the last

On 23.07.20 15:23, Rowland penny via samba wrote: > On 23/07/2020 14:07, basti via samba wrote: >> hello, >> is there a way to map usergroups via winbind? >> >> I need 'getent passwd': >> testuser:x:7072:513::/home/users/testuser:/bin/bash >> >> but I get: >> testuser:x:7072:30000::/home/users/testuser:/bin/bash >> >> gidNumber

I'm using samba 4.5 on a debian jessie (Louis packages). Rarely it happen that a power outgage tear down all the stuff, here. I've noticed that if the DM start before the DC, clearly all account data are inaccessible. To prevent or minimize that, the ''offline mode'' of winbind can be safely used also on DM servers? Or is tailoread against roaming client (portables,

Am 03.11.20 um 17:46 schrieb Rowland penny via samba: > On 03/11/2020 16:24, basti via samba wrote: >> Hello, >> is there a way to get the last uidNumber from ldap. >> >> I can do a ldapsearch like: >> >> ldapsearch -h samdom.example.com -D "administrator at samdom.example.com" >> -w "changeit"? -b