Hi Steve,
I'm running AD on Windows Server 2008 R2. Once you have the AD domain services
role installed, there's a feature you can install called something like,
"Server for NIS". See:
http://technet.microsoft.com/en-us/library/cc755221.aspx, amongst many other
postings from Microsoft.
regard
On 18/07/12 03:52, Nick Triantos wrote:
It looks like uidNumber is the attribute that gets set (I've queried it with
ldapsearch). This is what AD Users & Computers sets when I use their GUI to
configure a user.
Hi
How do you get ADUC to display a field where you can enter uidNumber? We
can
On 18/07/12 03:52, Nick Triantos wrote:
It looks like uidNumber is the attribute that gets set (I've queried it with
ldapsearch). This is what AD Users & Computers sets when I use their GUI to
configure a user.
Hi
How do you get ADUC to display fields where you can enter uidNumber?
Cheers,
S
Thanks Steve.
I don't have an 'objectClass: posixAccount' set, though I'm unclear whether
that's needed. My nsswitch.conf is set as:
passwd: files winbind
I'm not trying to use the generic LDAP mechanism.. I'm trying to get Winbind to
talk to AD. I suspect it will look for different attributes
It looks like uidNumber is the attribute that gets set (I've queried it with
ldapsearch). This is what AD Users & Computers sets when I use their GUI to
configure a user.
thanks,
-Nick
On Jul 17, 2012, at 6:00 PM, Rob Townley wrote:
> Precisely what ldap attribute are you setting user id numbe
On 18/07/12 03:00, Rob Townley wrote:
Precisely what ldap attribute are you setting user id numbers in AD? You
may want to check. There are numerous attribute names that include uid and
gid, but you need the correct one.
Hi
In AD we have:
objectClass: posixAccount
and
uidNumber: xyz
with /et
Precisely what ldap attribute are you setting user id numbers in AD? You
may want to check. There are numerous attribute names that include uid and
gid, but you need the correct one.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mail
Just a quick confirmation:
If I set the idmap config CORP : range parameter, I always get no result for
getent passwd , and the winbind log shows "Could not get unix
ID", whether the range overlaps with my "*" range or not.
I do have one suspicion what could be failing, from inspecting the cod
Thanks Heather.
It was my understanding, from reading one of the doc pages, that the range
acted as a filter, and would invalidate any users who didn't match the range,
so I purposely made it cover a broader range (from 900 onward). In AD, my first
user maps at 1001. On the local machine, all u
Thanks Jonathan, but it didn't work for me. I updated my config to look like
this:
security = ADS
realm = CORP.mycompany.COM
allow trusted domains = yes
winbind use default domain = yes
winbind nested groups = YES
winbind enum groups = yes
winbind enum users = yes
winbind n
I noticed you tried to comment out the default idmap section. The range
also starts very low, (too low). I think you might be running into
uid/gid collisions because of that.
Something like this is more preferrable (in addition to setting your
ranges):
idmap config * : backend = tdb
On 14/07/12 17:50, Nick Triantos wrote:
Hi,
I'm still having trouble getting Samba 3.6.3 / Winbind to fetch UIDs from AD
2008 R2 with the Services for Unix feature installed. My users have uidNumber
fields which contain the UIDs I want. I'm on Ubuntu 12.04
The global part of my smb.conf. I've
Hi,
I'm still having trouble getting Samba 3.6.3 / Winbind to fetch UIDs from AD
2008 R2 with the Services for Unix feature installed. My users have uidNumber
fields which contain the UIDs I want. I'm on Ubuntu 12.04
The global part of my smb.conf. I've tried changing 'winbind nss info' and
's
13 matches
Mail list logo
