similar to: Choosing a backend idamp and example scenarios for each one

Thank you all!!!! Great content!!! Speaking of scenarios... What would be the best backend for? Scenario 1: 3 DCs and 1 fileserver 2800 users Scenario 2: 4 DCs and 2 fileserver 2800+ users On Sat, Jun 15, 2024 at 4:49?AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 14 Jun 2024 17:32:30 -0300 > Andreas Hasenack via samba <samba at lists.samba.org>

On Fri, 14 Jun 2024 17:32:30 -0300 Andreas Hasenack via samba <samba at lists.samba.org> wrote: > Hi, > > On Fri, Jun 14, 2024 at 4:44?PM Elias Pereira via samba < > samba at lists.samba.org> wrote: > > > hi, > > > > Knowing the 3 idmap backends (ad, rid and autorid) available to > > configure samba as a domain member, could you give examples

Hi, On Fri, Jun 14, 2024 at 4:44?PM Elias Pereira via samba < samba at lists.samba.org> wrote: > hi, > > Knowing the 3 idmap backends (ad, rid and autorid) available to configure > samba as a domain member, could you give examples of scenarios in which > each backend would be more suitable? > > I also wrote some documentation for the ubuntu server guide about this,

Found it! :) I thought in make a script more or less that way. #!/bin/bash # GROUP=ADM GUID=10000 # Domain Users UID=10000 # get the next ID ? for USER in $(samba-tool group listmembers $GROUP) do samba-tool user edit $USER -H ldap://samdom.example.com \ -U administrato --nis-domain=samdom \ --unix-home=/home/$USER \ --uid-number=${NEXTID} \

These are my notes. I?d rather use xattr and configure shares from windows. http://samba.bigbird.es/doku.php?id=samba:configuring-shares Also, have you assigned privileges ? http://samba.bigbird.es/doku.php?id=samba:server-privileges Using autorid as the idmap backend has some limitations. I recommend using rid. Regards. On 27 Oct 2023 at 20:08 +0100, Greg Dickie via samba <samba at

Rowland, I found something related that you were doing. "[PATCH] samba-tool: Easily edit a users object in AD" Did you finish the script? On Fri, Dec 1, 2017 at 3:24 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 1 Dec 2017 15:00:39 -0200 > Elias Pereira <empbilly at gmail.com> wrote: > > > Thanks Rowland for the quick answer!! :)

Can you share with me? :) On Fri, Dec 1, 2017 at 4:43 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 1 Dec 2017 16:27:11 -0200 > Elias Pereira <empbilly at gmail.com> wrote: > > > Rowland, > > > > I found something related that you were doing. > > > > "[PATCH] samba-tool: Easily edit a users object in AD" >

On Sat, 2 Dec 2017 10:21:07 -0200 Elias Pereira <empbilly at gmail.com> wrote: > Correcting! :) > > #!/bin/bash > # > GROUP=ADM > GUID=10000 # Domain Users > UID=10000 # get the next ID ? > > for USER in $(samba-tool group listmembers $GROUP) > do > samba-tool user edit $USER --nis-domain=samdom \ > --unix-home=/home/$USER \ >

Hello friends, My doubts are as follows. In an environment where we have, for example, 1000 users, I believe that rid would be the best choice in a fileserver environment, because we don't need to manually configure via RSAT a unix attribute for each user. Is that more or less the thought, or am I wrong? -- Elias Pereira

Thanks Rowland for the quick answer!! :) If you are going to use more > than one Unix domain member as a fileserver, then you will probably be > better off using the winbind ad backend, this way you can ensure your > users and groups have the same ID everywhere. Maybe in the near future I'll set up a new fileserver. That way, I believe that ad as a backend is the best choice. I

On Sat, 2 Dec 2017 12:13:08 -0200 Elias Pereira via samba <samba at lists.samba.org> wrote: > > > > Sorry, but that isn't going to work with 'samba-tool user edit' > > You would need to write an 'editor' script to do what you would > > need to do. > > > Ok. > > Bit busy, just now, give me some time, I have a script somewhere that

Hi, We have a rat's nest of windows servers all sharing little bits of storage which I'm trying to consolidate on one biggish linux server. I've install a fresh Ubuntu 22.04 and samba 4.15 that comes standard. I've also joined the domain using autorid as the backend and users are getting UID and GIDs correctly as evidenced by wbinfo -i USER and id USER. I've also mapped a

On Thu, 16 May 2024 15:44:43 +0200 Khalid via samba <samba at lists.samba.org> wrote: > Hi everyone, > > I am trying to set up a SAMBA print server as an AD domain member. > In the SAMBA Wiki there's a section about idmap and I have to admit I > don't understand what the correct choice for my case would be. I have > a domain controller where all users of the AD

Correcting! :) #!/bin/bash # GROUP=ADM GUID=10000 # Domain Users UID=10000 # get the next ID ? for USER in $(samba-tool group listmembers $GROUP) do samba-tool user edit $USER --nis-domain=samdom \ --unix-home=/home/$USER \ --uid-number=${NEXTID} \ --login-shell=/sbin/nologin \ --gid-number=$GUID done Of course that script is very simple, but is a beginning. :)

> > Sorry, but that isn't going to work with 'samba-tool user edit' > You would need to write an 'editor' script to do what you would need to > do. Ok. Bit busy, just now, give me some time, I have a script somewhere that > should do what you want. Of course Rowland. Work on what you're working on. I do not want to disturb you. :) I'll give a

Hello list, I tried to set up a folder on our fileserver domain member, so I can deploy software for users' machines, but is not working. If I put the software inside "netlogon" it installs correctly. \\172.16.1.7\storage\programs Auth Users - read & execute, list folder contents, read and write Do I need other permissions? -- Elias Pereira

Hey Luke, thanks for the help!!! It's working now!!! God bless you and your family!! :D Remember that GPOs need to run as the context of either the computer or the > user. Computers typically do not have access to many folders on a file > server, even as "Everyone". That is why the NETLOGON folder works. > > If you're deploying as a USER configuration, then it

Which GPO? Computer or User Configuration? Remember that GPOs need to run as the context of either the computer or the user. Computers typically do not have access to many folders on a file server, even as "Everyone". That is why the NETLOGON folder works. If you're deploying as a USER configuration, then it should run as the context of the user, meaning the Everyone permission

hello guys, In my tests lab did the migration ldap base of the old samba3 to Samba4 ADCD. It's possible to migrate directories and files from users of the old samba3 to Samba4 ADDC? -- Elias Pereira

Hello Morillo, I have reviewed the steps described again. In fact, I had already done this several times. :D Even so, it does not map. The shared folder is mapped, but the printer is not. On windows 7 it works correctly. On Tue, Mar 3, 2020 at 12:33 PM MORILLO Jordi via samba < samba at lists.samba.org> wrote: > Hello Elias, > > Printing is working well for us. > Carrefully