Re: [cifs-discuss] AD config (prior to joining domain)

2010-05-19 Thread Jordan Brown
sundeep dhall wrote: Jordan, Appreciate. In the doc, "ldapclient" is used to setup the solaris server as an ldap client (to AD) The cmd includes the basic setup (lines 1-6) + attribute mapping (remaining lines) dsee% ldapclient -v manual \ -a credentialLevel=self \ -a authenticationMethod=s

Re: [cifs-discuss] AD config (prior to joining domain)

2010-05-19 Thread sundeep dhall
Jordan, Appreciate. In the doc, "ldapclient" is used to setup the solaris server as an ldap client (to AD) The cmd includes the basic setup (lines 1-6) + attribute mapping (remaining lines) dsee% ldapclient -v manual \ -a credentialLevel=self \ -a authenticationMethod=sasl/gssapi \ -a defaul

Re: [cifs-discuss] idmap and SFU

2010-05-19 Thread Jordan Brown
Michael Anderson wrote: We're migrating from a BSD Samba/NFS server to OpenSolaris CIFS/NFS, using a W2k3 AD Server with MS SFU for auth and user database. What build are you running? Setting up LDAP with the SFU attributes works fine for NFS, but I cannot figure out the CIFS side of things.

[cifs-discuss] idmap and SFU

2010-05-19 Thread Michael Anderson
Hello, We're migrating from a BSD Samba/NFS server to OpenSolaris CIFS/NFS, using a W2k3 AD Server with MS SFU for auth and user database. Setting up LDAP with the SFU attributes works fine for NFS, but I cannot figure out the CIFS side of things. I thought that something like: svccfg -s svc:/sy

Re: [cifs-discuss] AD config (prior to joining domain)

2010-05-19 Thread Jordan Brown
sundeep dhall wrote: All, Is this the appropriate alias for the question below. Not really. We know a fair amount about the subject, and might well be the company experts on Active Directory, but we're not the authorities on either LDAP or Kerberos. Here's an article that describes how to

Re: [cifs-discuss] AD config (prior to joining domain)

2010-05-19 Thread sundeep dhall
All, Is this the appropriate alias for the question below. Else, can I be pointed to the correct group for help on naming service and setup of solaris as an ldap client to Active Directory Intent. - demonstrate opensolaris interop with AD. -- user login via console, via SSH - All users in AD -

Re: [cifs-discuss] URGENT no users can access CIFS

2010-05-19 Thread Jordan Brown
John Ryan wrote: I got around the initial problem, but I'd still be very interested to find out what went wrong. To get out of trouble, I first rebooted, and it seemed to work for a while, but then after about an hour, all connection attemps failed, and the logs were ful of idmap errors. I th

Re: [cifs-discuss] URGENT no users can access CIFS

2010-05-19 Thread John Ryan
I got around the initial problem, but I'd still be very interested to find out what went wrong. To get out of trouble, I first rebooted, and it seemed to work for a while, but then after about an hour, all connection attemps failed, and the logs were ful of idmap errors. I then stopped idmap,