similar to: Big problems with samba 4.17.7 with classic domain (NT4) and LDAP

Am 18. April 2023 14:29:29 MESZ schrieb Roland Schwingel via samba <samba at lists.samba.org>: >Hi... > >We are still using NT4 classic domain with a couple of samba server but >want to upgrade step by step to AD as a distant goal. >We tried to upgrade to samba 4.17.7 as in intermediate step and keep LDAP >for now but fail as we could not find a suitable >example for

Hello Rowland and Christian Thanks for your replies... Yes ONEVISION and MYDOM are the very same here. Copy/Paste. "Christian Naumer" <christian.naumer at greyfish.net> wrote on 18.04.2023 20:12:35: > Am 18. April 2023 14:29:29 MESZ schrieb Roland Schwingel via samba > <samba at lists.samba.org>: > >Hi... > > > >We are still using NT4 classic

On Thu, Jun 29, 2017 at 3:48 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > > > Well, no it isn't actually on that page, you need to follow an > hyperlink to this page: > > https://wiki.samba.org/index.php/Idmap_config_rid > > It is really confusing. rid or tdb. I don't know what it wants because the second link has both. Here is the

On Thu, Jun 29, 2017 at 4:46 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 29 Jun 2017 16:28:38 -0300 > francis picabia via samba <samba at lists.samba.org> wrote: > > > On Thu, Jun 29, 2017 at 3:48 PM, Rowland Penny via samba < > > samba at lists.samba.org> wrote: > > > > > > > > > > > Well, no it

Hello, No it's a AD classicupgraded from a Samba 3 PDC Here's a user example from my DC uid=1116(MYDOM\begr00) gid=513(MYDOM\domain users) groupes=513(MYDOM\domain us ers),1151(MYDOM\evaluation),1214(MYDOM\procedures),12021(MYDOM\s13cadre),12041 (MYDOM\s13-grh),1264(MYDOM\zsbw),1001(MYDOM\s13),3000005(BUILTIN\users) my first user start at uid 1001 (1000 was the

Dear Rowland, our windows admin assured me that they have set uidNumber and gidNumber in the range. I have requested screenshots for confirmation. Now we are one step further: "getent passwd | grep mdecker" now lists the AD account. mdecker:*:13667:7142:Decker, Martin:/home/MYDOM/mdecker:/bin/false With "getent passwd mdecker" however, it shows

Dear List, I am trying to set up Samba 3.6.25 (solaris 11.3 packaged) to provide unix file shares to windows users. I can successfully list groups and users with wbinfo -u / wbinfo -g, but I do not get any data with "getent group" or "getent passwd". In AD, we have set "gidNumber" Attribute for Group "Domain Users" to a value in the specified range

Hi Experts, We encountered a weird issue after restarting the server. Seems everything working fine on the configuration side but the user?s not able to authenticate with the Samba server. Can you please help to investigate the issue? Our setup details and configuration file + error logs + service status. Samba:- 4.18.3-0 CentOS Linux release 8.4.2105 Authentication mechanism is SSSD [root at

Thank you for your feedback. I have changed the parameters, but still no success. winbind use default domain = yes idmap config * : range = 1000000-1999999 idmap config MYDOM : range = 100-999999 Regards, Martin 2017-08-18 15:00 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > > See inline comments: > > On Fri, 18 Aug 2017 14:40:54 +0200 >

Hello, I'm currently stuck with a QNAP NAS appliance (don't buy this !) I have a Sernet Samba 4.5 as an AD controller and my QNAP have a Samba 4.0.25 (latest update) All i want is to join the QNAP to the AD, the QNAP will act as the file server. The join in the official way is okay but the uid / gid mapping is f*cked. I tried almost everything, change the idmap,

Hello, I have a Fedora server, part of a domain, on which various shares are configured. For one share, I want to set up permissions according to the groups to which the users belong. But it doesn't work. For example, I want the share to be accessible by group A in read-write mode, and group B in read-only mode. I use setfacl for this. But neither group A nor group B have access to the

All, We have a samba3 domain which provides logon services for Windows clients, and several cifs shares, some for Windows clients and some for linux servers to mount. I am testing samba 4.5.4 in a lab to understand all that needs to happen for a migration to AD on samba4. During testing we bumped up against winbind config for linux member servers. Since we want users to authenticate against AD,

On Fri, 23 Feb 2024 08:13:08 +0100 Nicolas Boiss? via samba <samba at lists.samba.org> wrote: > Hello, > > I have a Fedora server, part of a domain, on which various shares are > configured. > > For one share, I want to set up permissions according to the groups > to which the users belong. But it doesn't work. For example, I want > the share to be accessible

On 07/10/2019 07:35, Andrea Zagli wrote: > hi > > i'm very sorry for this private mail, instead of using the mailing > list, but i cannot find anymore your reply on my mail client > > sorry again > > > > On 04/10/2019 13:59, Andrea Zagli via samba wrote: >> hi >> >> i'm using debian sid > Hmm, using experimental software >> >>

Back on February 28, 2018, I started a thread "User permissions of profile/home directory lost" describing a problem occurring with my wife's user account. Since that time the random problem has persisted so I turned on some debugging. I have been able to determine that somehow her account idmap is broken. Here is the entry for my wife's SID as found in the idmap.ldb file

I'm not able to access a samba file server that I recently created and joined to a domain. I have two domains with an external trust: BRANDLILAW and BRANDLI. The server is joined to BRANDLILAW. I am trying to access it from a user on the BRANDLI domain. This worked with the prior server that the new server is replacing. All domain controllers and the server are Debian backports (21.3).

On Mon, Aug 8, 2016 at 10:54 AM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 8 Aug 2016 10:24:03 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > I have a couple of Debian 8.5 systems set up in similar manner. > > Samba is version 4.2.10-Debian > > > > Here is the essential config... > > > > # testparm

Thank you for your prompt response, Rowland. The idmap_rfc2307 isn't working (yet) for me. I'm working down that path now, however I do need the homedir parameter from RFC 2307. ../../source3/auth/auth_util.c:1946(check_account) check_account: Failed to convert SID S-1-5-21-2286752186-3697686403-1823448917-102506 to a UID (dom_user[UNIV\someusername]) I have considered setting up a

On Thu, 6 Feb 2025 07:32:48 -0300 Edson Tadeu Almeida da Silveira via samba <samba at lists.samba.org> wrote: > Good morning everybody. > > I searched the list here but I haven't found anything close to my > problem yet. > > I'm using 2 DCs Samba 4.7 and now planning to upgrade to 4.21. So, not in a rush then, seeing as 4.7.x went EOL from the Samba point of

Hello, Lots of messages in smbd log file on a Samba file server, which is member of a Samba AD : [2018/07/24 10:30:00.822403, 0] ../source3/smbd/posix_acls.c:2080(create_canon_ace_lists)