similar to: SID security

After sending the email I realized that I did not mention that while rebuilding the OS, I kept the "old" /srv/samba files. Which in turn kept the old permission settings. I think (could be wrong) that keeping the old SID are now different from the new SID's created while rebuilding to v4.12.6. To answer your DC question: root at dc1:~# wbinfo -s

Thanks to data backups I can "whip out" the /srv directory and rebuild from scratch to "get permissions correct." Doing this because, yes, I did provision a new domain. (Probably faster to wipe, reconfigure dir and restore than correct the SID mistake.) Oh well, learning the hard way or as we like to call it around here, "OJT" (on the job training.) On Mon, Oct 5,

On 8/17/2020 6:55 AM, Rowland penny via samba wrote: > wbinfo --group-info 'Domain Users' | awk -F ':' '{print $3}' > > wbinfo -i <username> | awk -F ':' '{print $3}' > > Rowland > root at mbr04:~# wbinfo --group-info 'Domain Users' | awk -F ':' '{print $3}' 10000 root at mbr04:~# wbinfo -i [username] | awk -F

Hello Roland thank for you support Il 06/11/2017 17:31, Rowland Penny via samba ha scritto: >>> There is a bug for this: >>> https://bugzilla.samba.org/show_bug.cgi?id=12164 >> are there some workarounds ? >> > Yes, do not use the DC as a fileserver;-) > If you must, don't run a backup system that relies on IDs > > A DC has no concept of 'NT

Hai, Does anyone know more if this is adressed or point me to the bug report? There should be one, but i cant find it. Im finding the following again, tested with samba 4.4.5, now samba 4.5.3. These reports go back to the year 2013. I searched in my mail samba folder for S-1-5-18 The problem. I create a "computer" Scheduled task. Now this task MUST run as : SYSTEM (S-1-5-18)

This isn't necessarily an issue (I don't think) but more so a curiosity. How are UIDs mapped to SIDs and then SIDs mapped to names in Samba4 across multiple DCs? I set up my DCs using Louis' how tos ( https://github.com/thctlo/samba4/tree/master/howtos). All of my DCs smb.confs have the line "idmap_ldp:use rfc2307 = yes" My policies folder under \sysvol\domainname\ has

On 6/19/2020 1:55 PM, Rowland penny via samba wrote: > ldbsearch -H /var/lib/samba/private/sam.ldb '(gidNumber=*)' | grep > 'gidNumber:' | sed 's/gidNumber: //' | sort | tail -n1 > > Add 1 to the output and use that. > > Rowland This is a newly setup DC and member server (both Debian 10.4 w/Samba v4.12.3). I got: root at dc01:~# ldbsearch -H

I have been working on creating users with samba-tool create. samba-tool user create tuser70 --surname="Test" --given-name="User" --initials=70 --uid-number=10070 --gid -number=10000 --description='70 user' --gecos='Test 70. User' --uid='Test 70. User' --login-shell=/bin/sh --unix-home=/h ome/SAMDOM/tuser70

Am 06.12.2017 um 10:14 schrieb Rowland Penny via samba: > On Tue, 5 Dec 2017 15:39:25 -0700 (MST) > Mariusz80 via samba <samba at lists.samba.org> wrote: > >> Well permisions are working fine but, if i create for example "new >> folder" then the owner is root and what about the main problem with >> mmc. >> > > New files/directories will be

Il 06/11/2017 16:17, Rowland Penny via samba ha scritto: > On Mon, 6 Nov 2017 15:27:13 +0100 > Giuseppe Arvati via samba <samba at lists.samba.org> wrote: > >> Hello, >> I recently set up a new software to backup samba share. >> This software ( https://github.com/borgbackup/borg ) run on file >> server as root cron script during the night and save file on

Hai Bob, Try this. First flush cache. net cache flush getent passwd username id username And run this one again for me: https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh Reply might be bit later on, im running around here. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Bob

Hi, I am running Samba 4.3.11-Ubuntu on a cluster of Ubuntu 16.04 and Samba is configured as an AD Server. I got "I have no name!" error after deleting a samba user whose username is identical to my Linux username (An AD user). Here is how this happens: The AD user is zhangyy (uid 12369). 1. We used `smbpasswd -a zhangyy` to created a new smb user. 2. We used `smbpasswd -x zhangyy`

Hi Rowland, Am 20.03.2015 um 12:45 schrieb Rowland Penny: > Try replacing the global part of your smb.conf with this: > > [global] > netbios name = PLATON > workgroup = FEE > security = ADS > realm = FEE.DE > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > server string = Web- und

On 25/09/2020 12:55, Robert Wooden wrote: > Thanks Dr, Naumer and Rowland. > > Although still not quite correct, my pam_mount.conf.xml looks like: > root at lws4:~# cat /etc/security/pam_mount.conf.xml > <debug enable="1" /> > <volume fstype="fuse" > server="mbr04.subdom.example.com <http://mbr04.subdom.example.com>" >

On 8/17/2020 7:30 AM, Rowland penny via samba wrote: > > If you run 'wbinfo -u | grep username' , do you get output ? > root at mbr04:~# wbinfo -u | grep [username] [username] Yep, username exists. (Hair worn off my head in one spot from scratching.) -- Bob Wooden

> root at graz-dc-sem.ad.tao.at# wbinfo --sid-to-name=S-1-5-11 > failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND > Could not lookup sid S-1-5-11 So how fucked is my domain? On 2017-08-25 08:09, L.P.H. van Belle via samba wrote: > Ah, yes, oeps sorry, and i did run out of the office yesterday, so didnt see this.. > > 3000002:rwx > 3000003:r-x > > wbinfo

On Thu, 3 Nov 2016 10:25:00 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 11/3/2016 9:59 AM, Marcio Demetrio Bacci wrote: > > Thanks Lingpanda101 > > > > Following the result of command: > > > > # file: Policies/{0F1E5B10-3640-4FFE-AA6B-5DE4CFF73625} > > # owner: 10060 > > # group: 30028 > > user::rwx > >

On 17/08/2020 13:18, Robert E. Wooden via samba wrote: > root at mbr04:~# wbinfo --group-info 'Domain Users' | awk -F ':' '{print > $3}' > 10000 > root at mbr04:~# wbinfo -i [username] | awk -F ':' '{print $3}' > failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND > > Could not get info for user [username] Hmm, I only get that if I

On 19/06/2020 20:09, Robert E. Wooden via samba wrote: > On 6/19/2020 1:55 PM, Rowland penny via samba wrote: >> ldbsearch -H /var/lib/samba/private/sam.ldb '(gidNumber=*)' | grep >> 'gidNumber:' | sed 's/gidNumber: //' | sort | tail -n1 >> >> Add 1 to the output and use that. >> >> Rowland > > This is a newly setup DC and

Sometimes a group sid does not get resolved to its name. Is this a settings problem? Looks like winbind deamon went dormant for a while and then woke up? I am using interface wbcLookupSid provided by the library libwbclient.so for resolving sids to names. These are the winbind related parameters in /etc/samba/smb.conf [global] # separate domain and username with '\', like