similar to: SID mapping: Samba and SSSD

On Thu, Sep 03, 2020 at 06:43:32PM +0100, Rowland penny via samba wrote: > On 03/09/2020 18:04, Johan Hattne via samba wrote: > > Dear all; > > > > Would anybody be able to tell me what the idmap configuration is to have > > Samba do the same SID-to-user/group mapping as the SSSD defaults?? I was > > convinced I saw it on this list or the wiki not too long ago,

On 2020-09-03 10:43, Rowland penny via samba wrote: > On 03/09/2020 18:04, Johan Hattne via samba wrote: >> Dear all; >> >> Would anybody be able to tell me what the idmap configuration is to >> have Samba do the same SID-to-user/group mapping as the SSSD >> defaults?? I was convinced I saw it on this list or the wiki not too >> long ago, but I cannot seem

On Thu, Sep 3, 2020 at 2:23 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 03/09/2020 19:19, Jeremy Allison wrote: > > On Thu, Sep 03, 2020 at 06:43:32PM +0100, Rowland penny via samba wrote: > >> On 03/09/2020 18:04, Johan Hattne via samba wrote: > >>> Dear all; > >>> > >>> Would anybody be able to tell me what the

On Thu, Sep 3, 2020 at 4:45 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 03/09/2020 21:38, Robert Marcano wrote: > > On 9/3/20 4:35 PM, Rowland penny via samba wrote: > >> On 03/09/2020 21:15, Robert Marcano via samba wrote: > >>> > >>> There is an sssd provided idmapper (on RHEL/CentOS/Fedora) it is > >>> packaged

On 9/3/20 2:19 PM, Jeremy Allison via samba wrote: > On Thu, Sep 03, 2020 at 06:43:32PM +0100, Rowland penny via samba wrote: >> On 03/09/2020 18:04, Johan Hattne via samba wrote: >>> Dear all; >>> >>> Would anybody be able to tell me what the idmap configuration is to have >>> Samba do the same SID-to-user/group mapping as the SSSD defaults?? I was

On Thu, Sep 3, 2020 at 5:08 PM Jeremy Allison <jra at samba.org> wrote: > On Thu, Sep 03, 2020 at 05:05:46PM -0400, Andrew Walker via samba wrote: > > On Thu, Sep 3, 2020 at 4:45 PM Rowland penny via samba < > > samba at lists.samba.org> wrote: > > > > > On 03/09/2020 21:38, Robert Marcano wrote: > > > > On 9/3/20 4:35 PM, Rowland penny via

On 9/3/20 2:55 PM, Andrew Walker via samba wrote: > On Thu, Sep 3, 2020 at 2:23 PM Rowland penny via samba < > samba at lists.samba.org> wrote: > >> On 03/09/2020 19:19, Jeremy Allison wrote: >>> On Thu, Sep 03, 2020 at 06:43:32PM +0100, Rowland penny via samba wrote: >>>> On 03/09/2020 18:04, Johan Hattne via samba wrote: >>>>> Dear all;

Whoops, fumbled my response a bit. slice size by default is 200,000, and to clarify the SID passed into murmur3() is the domain SID, not SID of individual user. Though, manpage for sssd-ad should be consulted for precise details. My understanding though is as long as everything fits in one slice, then you can just use RID. If you have multiple slices, you're stuck with non-deterministic

On 03/09/2020 22:08, Jeremy Allison wrote: > On Thu, Sep 03, 2020 at 05:05:46PM -0400, Andrew Walker via samba wrote: >> On Thu, Sep 3, 2020 at 4:45 PM Rowland penny via samba < >> samba at lists.samba.org> wrote: >> >>> On 03/09/2020 21:38, Robert Marcano wrote: >>>> On 9/3/20 4:35 PM, Rowland penny via samba wrote: >>>>> On

On 03/09/2020 20:01, Andrew Walker wrote: > Whoops, fumbled my response a bit. slice size by default is 200,000, > and to clarify the SID passed into murmur3() is the domain SID, not > SID?of individual user. Though, manpage for sssd-ad should be > consulted for precise details. My understanding though is as long as > everything fits in one slice, then you can just use RID. If

On 03/09/2020 21:18, Robert Marcano via samba wrote: > This is what I do, if the domain start using more than the slice size, > there could be a problem because SSSD allows multiple slices. I > haven't tested sssd-winbind-idmap yet I mentioned in another response That is what was known as idmap-sss and relies on the winbind libs provided by sssd and is probably not compatible with

On Thu, Sep 3, 2020 at 5:20 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 03/09/2020 22:08, Jeremy Allison wrote: > > On Thu, Sep 03, 2020 at 05:05:46PM -0400, Andrew Walker via samba wrote: > >> On Thu, Sep 3, 2020 at 4:45 PM Rowland penny via samba < > >> samba at lists.samba.org> wrote: > >> > >>> On 03/09/2020

On Thu, Sep 03, 2020 at 05:05:46PM -0400, Andrew Walker via samba wrote: > On Thu, Sep 3, 2020 at 4:45 PM Rowland penny via samba < > samba at lists.samba.org> wrote: > > > On 03/09/2020 21:38, Robert Marcano wrote: > > > On 9/3/20 4:35 PM, Rowland penny via samba wrote: > > >> On 03/09/2020 21:15, Robert Marcano via samba wrote: > > >>>

On 03/09/2020 21:38, Robert Marcano wrote: > On 9/3/20 4:35 PM, Rowland penny via samba wrote: >> On 03/09/2020 21:15, Robert Marcano via samba wrote: >>> >>> There is an sssd provided idmapper (on RHEL/CentOS/Fedora) it is >>> packaged as sssd-winbind-idmap. IIRC it doesn't reimplement the >>> algorithm, just delegate to SSSD the mapping

On Fri, Sep 04, 2020 at 08:34:29PM +0100, Rowland penny via samba wrote: > > There is no need (in my opinion) for yet another idmap backend and I can, if > I so wish, 'NACK' any new ones. If someone was to write a tool to sync data > (along with ownership and permissions) from a machine running sssd to a > machine running winbind, then this would get my approval. Sounds

Dear all; I'm trying to use winbindd to resolve names in an AD setup. I can authenticate just fine, but I've noticed that for some users "getent passwd" returns a GECOS field populated with displayName from the LDAP servers and for others is does not. For example: $ getent passwd user1 user1:*:1111111111:2222222222:John Doe:/home/user1:/bin/bash $ getent passwd

On 9/3/20 4:36 PM, Jeremy Allison via samba wrote: > On Thu, Sep 03, 2020 at 10:20:09PM +0100, Rowland penny via samba wrote: >> >> Red-Hat could make this more obvious >> by removing sssd-winbind-idmap, their documentation says it use isn't >> supported. > > Actually on a more serious note, Red Hat could make the > messaging around this a little clearer.

Rpvs> On 04/09/2020 19:02, Gregory Sloop wrote: >> Re: [Samba] SID mapping: Samba and SSSD >> *Rpvs> On 03/09/2020 22:35, Jeremy Allison wrote: >> >> On Thu, Sep 03, 2020 at 10:20:09PM +0100, Rowland penny via samba >> wrote: >> >>> On 03/09/2020 22:08, Jeremy Allison wrote: >> >>>> Happy to review if you write it :-).

On 2020-01-31 12:30, Johan Hattne wrote: > Dear all; > > On the recent topic of Time Machine backups: when backing up a machine > running macOS Mojave to a Samba server on Debian Buster with > buster-samba410 packages from https://apt.van-belle.nl/debian, we see > our logs filling up with messages like > > ../../source3/modules/vfs_fruit.c:7001(fruit_tmsize_do_dirent)

Dear all; I?m running smbd 4.9.5-Debian and I?m struggling to get Time Machine support to work. The server is running Debian Buster, and the client is macOS High Sierra. I can mount the share just fine on its own, but as soon as I tell Time Machine to ?Back Up Now?, it says ?Preparing Backup,? ?Looking for Backup Disk,? and then nothing. The little red exclamation mark tells me that "The