similar to: Winbind => Add a local user/pass cache ?

Hi i see on my log, two informations : 1- Into my log, i see a very big quantity of : [19391]: lookupname ECTPP/root [2005/12/09 14:28:46, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) [19391]: lookupname ECTPP/root [2005/12/09 14:28:46, 3] nsswitch/winbindd_async.c:winbindd_dual_lookupname(695) 10x per s .... 600x/minutes .. it's very very big no ? It's possible

I wan't to add some winbind authorized domain users to the local unix group "uucp" to give them access to some test equipment connected to serial ports (e.g. using minicom). I tried to add their UIDs (10000...) to the uucp item in /etc/group, but this does not seem to work. "id -G" reports just the group memberships from the domain. What's the right way to configure

I am currently working on implementing unified logons between linux and win computers on an NT4 domain. I have a samba test server with winbind working properly. All is going well, except that I am concerned about the winbind idmap database stored on the local linux workstations. My current understanding of winbind is that it must be on every machine, unless an winbind samba ldap

> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: vrijdag 18 januari 2019 11:00 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Winbind, cached logons and 'user > persistency'... > > On Fri, 18 Jan 2019 10:41:10 +0100 > "L.P.H. van Belle via samba"

I am currently working on implementing unified logons between linux and win computers on an NT4 domain. I have a samba test server with winbind working properly. All is going well, except that I am concerned about the winbind idmap database stored on the local linux workstations. My current understanding of winbind is that it must be on every machine, unless an winbind samba ldap

Hi, I'm using the "ChrootDirectory" option for the sshd daemon to jail my ssh users. Additionally, I'm using the "Match group" option to only jail people belonging to a specific active directory group. Here are the relevant lines of the sshd_config file: LogLevel Debug3 Subsystem sftp internal-sftp Match group sftpusers ChrootDirectory /my/chroot/home ForceCommand

Hi anyone know this error: Mar 20 12:01:06 gw winbindd[14756]: [2009/03/20 12:01:06, 0] sam/idmap_tdb.c:db_allocate_id(106) Mar 20 12:01:06 gw winbindd[14756]: idmap Fatal Error: UID range full!! (max: 20000) Mar 20 12:01:06 gw winbindd[14756]: [2009/03/20 12:01:06, 0] sam/idmap_tdb.c:db_allocate_id(106) Mar 20 12:01:06 gw winbindd[14756]: idmap Fatal Error: UID range full!! (max: 20000)

I'm using samba 3.0.28 as distributed by SUN on solaris 10 x86_64 5_08. Samba and kerberos are configured to authenticate to a domain, and domain user authentication, and access to shares goes smoothly. I need to limit access to the samba shares to a few select groups. The problem is those groups aren't showing neither in getent groups nor in wbinfo -g. A conversation with the domain

Dear list, I'm using winbind (samba-2.2.9) on Solaris to authenticate my users against a Windows 2000 Active Directory server. Sometimes my users get locked out for various reasons (virus, etc.) and I want to prevent that. Is it possible to cache the windows password on unix server so that it doesn't have to query windows server every time? Would increasing the "winbind cache

Hi all, First of all, sorry for my english. I don't speak well english (of course I'm french! ;-) ) but I will try to do my best to explain you my problem. I have a CentOS 6.3 system running with samba 3.5.10 against an AD 2008. My goal is to build a vsftpd server authenticating with users in my AD domain. Everything is working quite fine but I have something strange : When I put

Hai Marco, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Marco Gaiarin via samba > Verzonden: vrijdag 18 januari 2019 10:03 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Winbind, cached logons and 'user > persistency'... > > Mandi! L.P.H. van Belle via samba > In chel di` si favelave...

Dear all We've been running sucessfully a 2.2.8a Fileserver, member of our NT domain, authentication with winbind, on a Solaris box. As I've experienced stability issues with winbind and some minor problems with missing unicode support, I'm very happy that these problems hopefully will be gone with version 3. Now I noticed, that it seems not to be possible any longer to have an

On Mon, 8 Oct 2018 15:26:28 +0200 Prunk Dump via samba <samba at lists.samba.org> wrote: > Hello Samba team ! > > I'm network administrator in a french high school where I store my > user/group ID using rfc2307. My client stations use Winbind to query > rfc2307 attributes. > > Each new years, as all my students move to another class, almost all > my user's

Mandi! Rowland Penny via samba In chel di` si favelave... > > Strictly speaking, why winbind cache ''PAM'' data and not ''NSS'' one > > (seems to me)? > The problem is (for myself anyway), I do not understand the difference > between 'PAM' and 'NSS' data. 'PAM' is authorization scenario (eg, «user X use the correct

Mandi! Rowland Penny via samba In chel di` si favelave... > Now this is what I do not understand, my understanding is that 'PAM' is > used to find the correct authentication system and 'NSS' just connects > to that authentication system. No. NSS, roughly, 'extend the user database': https://www.gnu.org/software/libc/manual/html_node/Name-Service-Switch.html

Context : client linux Ubuntu 12.04 SSO authentification against Microsoft 2008 AD server, Winbind 3.6.3 (Ubuntu 12.04 LTS, Linux 3.2.0-27-generic, winbind 2:3.6.3-2ubuntu2.3 ) I'have discovered that setting option "winbind normalize names = yes" cause winbind client to send LDAP search for each username/group resolution even those in cache. Setting this option to

Hello, I've set up a Samba 3.0.2a domain member server on an existing Windows NT4 domain utilizing Winbind to resolve user authentication to my server. I would like to create local groups on my Samba server containing users from the NT domain to control access to shares on the Samba server. I've googled for a couple days trying to find something that will help me do this, but the

On Tue, 29 Jan 2019 18:47:45 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > Now this is what I do not understand, my understanding is that > > 'PAM' is used to find the correct authentication system and 'NSS' > > just connects to that authentication system. >

Hai Marco, > Yesterday i've updated my main switch, disconnecting for a > brief lag of time all my ''infrastructutes''. > > My SMTP server (exim) start to complain about 'unroutable addresses': > > 2019-01-16 18:32:40 1gjp3Q-0006aw-TG <= root at sv.lnf.it > H=(3jane.sv.lnf.it) [10.5.1.13] P=esmtp S=655 > id=20190116173240.C20003CE035A

Mandi! Rowland Penny via samba In chel di` si favelave... > nscd caches certain things, as does winbind, if you want to run nscd > with winbind, you need to stop nscd caching the things that winbind > does, when you do this, nscd isn't caching very much, so you might as > well not use it. Ok. But for some ''incompatibilities'', or because double-caching some