Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread steve
On 02/08/12 20:57, NdK wrote: Il 02/08/2012 18:42, steve ha scritto: The shares are mounted via kerberized nfs on the client and _did_ map correctly before this thread started. Are you sure you updated /etc/nnsswitch.conf to use winbind after purging the old Samba install? BYtE, Diego.

[Samba] User administration

2012-08-03 Thread Urs Forster
Hi Using usrmgr.exe, the domain user manager from XP on a W7, I try to admin users in a domain. What I can do: - list users and groups - change existing users What I cannot: - add a user or a group - make a user a groupmember. Error: No permission What settings do I need to change? How can I

Re: [Samba] documentation for configuring folder redirection

2012-08-03 Thread Daniel Müller
You think about something like this (it is tricky beware with windows 7 it is quiet different), done with kixtart, redirect all folders for clients other than windows 7: EX: ;we redirect folders tot he server ;wir setzen ein reg eintrag um zu prüfen ob wir schon was kopiert haben ;zunächst

Re: [Samba] User administration

2012-08-03 Thread Daniel Müller
Forget about usrmgr on windows 7!!! --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: muel...@tropenklinik.de Internet: www.tropenklinik.de

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread NdK
Il 03/08/2012 08:01, steve ha scritto: getent passwd/group works fine. I get the names and coresponding uid:gid numbers within the range specified in smb.conf but all I get when I list files on the nfs share, are numerical uid:gid values. I want those values to be DOMAIN\username DOMAIN\group

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread steve
On 03/08/12 09:01, NdK wrote: Il 03/08/2012 08:01, steve ha scritto: getent passwd/group works fine. I get the names and coresponding uid:gid numbers within the range specified in smb.conf but all I get when I list files on the nfs share, are numerical uid:gid values. I want those values to be

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread steve
On 03/08/12 10:22, steve wrote: On 03/08/12 09:01, NdK wrote: Il 03/08/2012 08:01, steve ha scritto: It looks as though it's this: https://bugzilla.samba.org/show_bug.cgi?id=8676 Ubuntu 12.04 ships with 3.6.3 :-( -- To unsubscribe from this list go to the following URL and read the

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread Jonathan Buzzard
On 03/08/12 07:01, steve wrote: On 02/08/12 20:57, NdK wrote: Il 02/08/2012 18:42, steve ha scritto: The shares are mounted via kerberized nfs on the client and _did_ map correctly before this thread started. Are you sure you updated /etc/nnsswitch.conf to use winbind after purging the old

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread Gémes Géza
2012-08-03 10:22 keltezéssel, steve írta: On 03/08/12 09:01, NdK wrote: Il 03/08/2012 08:01, steve ha scritto: getent passwd/group works fine. I get the names and coresponding uid:gid numbers within the range specified in smb.conf but all I get when I list files on the nfs share, are

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread steve
On 03/08/12 11:03, Gémes Géza wrote: 2012-08-03 10:22 keltezéssel, steve írta: On 03/08/12 09:01, NdK wrote: Il 03/08/2012 08:01, steve ha scritto: getent passwd/group works fine. I get the names and coresponding uid:gid numbers within the range specified in smb.conf but all I get when I

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread NdK
Il 03/08/2012 10:22, steve ha scritto: It doesn't seem to matter. I can have the same id range on both server and client. What is uid 327 on the server becomes uid 302 on the client. Remember to delete all .tdb files and rejoin the machine between tests w/ different backends, or you'll

[Samba] idmap confusion

2012-08-03 Thread steve
Three unfathormable questions: 1. What's the difference between: idmap_ldb : use rfc2307 = Yes and idmap config * : backend = ad 2. Do the terms in (1) above apply equally to Samba4 beta6 and Samba 3.6.3? 3. If I specify either in (1) then idmap config : range = abc-xyz becomes meaningless.

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread steve
On 03/08/12 13:07, NdK wrote: Il 03/08/2012 10:22, steve ha scritto: It doesn't seem to matter. I can have the same id range on both server and client. What is uid 327 on the server becomes uid 302 on the client. Remember to delete all .tdb files and rejoin the machine between tests

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread NdK
Il 03/08/2012 13:18, steve ha scritto: Thanks for the tip. In fact, Samba4 defaults to 30-40 which I think is pretty safe? Only for a small domain... In our tree it would be WAY too small (could contain no more than about 20% of the groups we have in a single domain...). My main

Re: [Samba] idmap confusion

2012-08-03 Thread Gémes Géza
2012-08-03 13:07 keltezéssel, steve írta: Three unfathormable questions: 1. What's the difference between: idmap_ldb : use rfc2307 = Yes It is a samba4 winbind setting, so you need it on the Samba4 AD controller only and idmap config * : backend = ad the correct form is: idmap config

Re: [Samba] winbind: uid range is ignored

2012-08-03 Thread steve
On 03/08/12 13:54, NdK wrote: Il 03/08/2012 13:18, steve ha scritto: Thanks for the tip. In fact, Samba4 defaults to 30-40 which I think is pretty safe? Only for a small domain... In our tree it would be WAY too small (could contain no more than about 20% of the groups we have in a

[Samba] Samba4: idmap config DOMAIN : backend = ad

2012-08-03 Thread steve
Hi I (deliberately for test purposes) have only one object with: posixAccount uidNumber gidNumber and only one object with: posixGroup gidNumber The gidNumbers are the same for both. getent passwd and getent group still however list all users and all groups regardless. Is there a cache I

Re: [Samba] Win7 Joining Domain, LDAP Profile Created but Join Fails

2012-08-03 Thread Anthony Boccia
On Sat, Jul 28, 2012 at 9:06 AM, John Drescher dresche...@gmail.com wrote: I am back with yet another issue. I am currently running a Samba 3.5.10-125 PDC on RHEL 6.2. My backend is LDAP, and I am using the smbldap scripts for dealing with ldap profiles related to my samba instance.

Re: [Samba] idmap confusion

2012-08-03 Thread steve
On 03/08/12 13:39, Gémes Géza wrote: 2012-08-03 13:07 keltezéssel, steve írta: Three unfathormable questions: 1. What's the difference between: idmap_ldb : use rfc2307 = Yes It is a samba4 winbind setting, so you need it on the Samba4 AD controller only and idmap config * : backend = ad the

Re: [Samba] Win7 Joining Domain, LDAP Profile Created but Join Fails

2012-08-03 Thread Roland Kaeser
Hello Since SP1 of Windows 7, the Registry Settings of: HKLM\System\CCS\Services\Netlogon\Parameters DWORD RequireSignOrSeal = 1 DWORD RequireStrongKey = 1 Are not longer required to set to 0 and back 1 after join. This symptoms seems the me comming more from a

[Samba] Samba4 and Linux/ldap_default_bind_dn

2012-08-03 Thread Steve Thompson
Samba4 4.0.0beta4, CentOS 6.3 I have a 3*DC Samba4 domain in which everything tested so far appears to be working OK: ldap, kerberos, dns, windows client joins, replication, etc. My question concerns binding Linux clients (CentOS 6) to the Samba4 LDAP server using sssd. If in

[Samba] GPO

2012-08-03 Thread sandy . napoles
Hello list, Iam using samba 4 beta6, I have problem with my GPO in my BDC, I create a GPO in my PDC and I update with rsync this GPO to my BDC, when the client windows xp under my BDC try to update the GPO, say me Denied Access to .INI, I think the cause is my client windows xp try to search the

Re: [Samba] Samba 3.6.x: smbd receives sigpipe and crashes

2012-08-03 Thread Jeremy Allison
On Fri, Jul 27, 2012 at 04:11:53PM +0200, Arkadiusz Bubała wrote: Hello, I've got problems with Samba 3.6.0 up to 3.6.6. Forked smbd processes are closing unexpectedly and sometimes smbd server exits. (In Samba 3.5.16 everything works). When invoke smbd from gdb and turn off SIGPIPE passing

Re: [Samba] idmap confusion

2012-08-03 Thread Gémes Géza
2012-08-03 18:46 keltezéssel, steve írta: On 03/08/12 13:39, Gémes Géza wrote: 2012-08-03 13:07 keltezéssel, steve írta: Three unfathormable questions: 1. What's the difference between: idmap_ldb : use rfc2307 = Yes It is a samba4 winbind setting, so you need it on the Samba4 AD controller

[Samba] Video interview with Eben Moglen.

2012-08-03 Thread Jeremy Allison
Hi all, Hope this isn't off-topic, but I thought the lists might be interested in a video interview I did with Eben Moglen, the head of the Software Freedom Law Center. Eben has given legal advice and help for Samba for many years, and is a very interesting person to listen to. Hope

[SCM] Samba Shared Repository - branch master updated

2012-08-03 Thread Stefan Metzmacher
The branch, master has been updated via d12831d docs-xml: fix pid directory example via 5beb345 docs-xml: fix dfree cache time example via 8dafdb5 s4:dsdb:replicated_objects: do not move 'instanceType' to the end of msg-elements on RODC replication via d642831 s4:

[SCM] Samba Shared Repository - branch master updated

2012-08-03 Thread Stefan Metzmacher
The branch, master has been updated via cff3ad4 lib/dbwrap: rewrite lock order check to ease debugging from d12831d docs-xml: fix pid directory example http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log -

autobuild: intermittent test failure detected

2012-08-03 Thread autobuild
The autobuild test system has detected an intermittent failing test in the current master tree. The autobuild log of the failure is available here: http://git.samba.org/autobuild.flakey/2012-08-03-1359/flakey.log The samba3 build logs are available here:

[SCM] Samba Shared Repository - branch master updated

2012-08-03 Thread Christian Ambach
The branch, master has been updated via 764f2f9 s3-ctdb: return proper exit code via 0a45e9c s3-ctdb: adjust a loglevel via 6cfe6e9 s3-ctdb: Fix ctdb_serverids_exist for target nodes that died via 6d83e35 s3-ctdb: Add debugs to ctdb_serverids_exist from