On Sun, 03 Apr 2011 11:36:05 -0700, Bob Miller wrote:
I am not familiar with joining active directory or offline caching,
but
I do know that the pdbedit command allows to manipulate the account
lockout mechanism. perhaps that will help in your case...
Hello,
thanks for the tip. I played aroun
Hi,
> So I'd like to ask
> - if it's possible to unlock a cached domain account locally (as root,
> without connection to the domain controllers)
I am not familiar with joining active directory or offline caching, but
I do know that the pdbedit command allows to manipulate the account
lockout
very little info on the credentials caching in
samba/winbind. I even tried to look at the TDB databases of which I
think netsamlogon_cache.tdb holds the cached account info and the
lockout flag, to see if I could unlock the account manually in there,
but I just couldn't make out anything useful
amba 3.5.8 logging in
>> without typing in the default domain does not work any more.
>>
>>
>> Original-Nachricht
>>> Datum: Mon, 28 Mar 2011 16:34:19 +1300
>>> Von: Marco Huang
>>> An: samba@lists.samba.org
>>> Betref
On Mon, Mar 28, 2011 at 05:26:30PM +1300, s f wrote:
> Google as I might, I cannot find any recent discussions on solving this
> problem, many times asked, but no solutions have worked for me.
Try "username map script = /bin/echo".
Volker
--
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone:
domain does not work any more.
>
>
> Original-Nachricht
>> Datum: Mon, 28 Mar 2011 16:34:19 +1300
>> Von: Marco Huang
>> An: samba@lists.samba.org
>> Betreff: [Samba] winbind is not taking default domain
>
>> Hi,
>>
>> We ha
Similar Problem here: Since Upgrading to Sernet Samba 3.5.8 logging in without
typing in the default domain does not work any more.
Original-Nachricht
> Datum: Mon, 28 Mar 2011 16:34:19 +1300
> Von: Marco Huang
> An: samba@lists.samba.org
> Betreff: [Samba] wi
Quoting Marco Huang (marco.hu...@auckland.ac.nz):
> We are using sernet-samba-3.5.8-27, but I've tried samba/winbind packages
> from debian squeeze, same result, and the problem appears on centos5.5 as
> well. We've been running these file servers for quite a long time, not
authenticated
to AD, and is in a local linux group for the share can connect.
Thanks again,
Steve.
On , Werner Durgarten wrote:
Hi,
Original-Nachricht
> Why does samba+winbind ignore the local unix groups ?
>
> I have joined my samba server to W
We are using sernet-samba-3.5.8-27, but I've tried samba/winbind packages from
debian squeeze, same result, and the problem appears on centos5.5 as well.
We've been running these file servers for quite a long time, not sure if
there's any recent update on windows AD related whic
Hi,
Original-Nachricht
> Why does samba+winbind ignore the local unix groups ?
>
> I have joined my samba server to Windows AD.
>
> I have configured a share with the values:
> [public_share]
> #Perms are 777
> path= /
Quoting Marco Huang (marco.hu...@auckland.ac.nz):
> Hi,
>
> We have been running samba file server about 2 years without this problem.
> The problem appeared at the same time on our debian and centos servers. Not
> sure if it's related to any updates on our windows AD servers.
This seems to be
threads I find are quite old, hopefully things have changed, or
maybe I am wasting time and it is not possible ? Please let me know if this
is the case.
Why does samba+winbind ignore the local unix groups ?
I have joined my samba server to Windows AD.
I have configured a share with the values
Hi,
We have been running samba file server about 2 years without this problem. The
problem appeared at the same time on our debian and centos servers. Not sure if
it's related to any updates on our windows AD servers.
Debian Squeeze
sernet-samba-3.5.8-27
Centos 5.5
samba3-3.5.5-43.el5
Use Act
Quoting markus hansen (hansenmar...@gmx.de):
> Hi List,
>
> I Upgraded my samba Installation from 3.3.8 (centos packages) to 3.5.8
> (sernet packages). Now logging in does not work without providing the domain
> any more - before the upgrade it worked. Does someone knows what has changed
> in
> Datum: Fri, 11 Mar 2011 11:33:13 +
> Von: Geoff Winkless
> An: samba
> Betreff: Re: [Samba] winbind use default domain = Yes -> doesn\'t work since
> upgrade
> 2011/3/11 markus hansen :
> > I Upgraded my samba Installation from 3.3.8 (centos packa
2011/3/11 markus hansen :
> I Upgraded my samba Installation from 3.3.8 (centos packages) to 3.5.8
> (sernet packages).
> Now logging in does not work without providing the domain any more - before
> the upgrade
> it worked. Does someone knows what has changed in 3.5.8?
What do you get in the l
Hi List,
I Upgraded my samba Installation from 3.3.8 (centos packages) to 3.5.8 (sernet
packages). Now logging in does not work without providing the domain any more
- before the upgrade it worked. Does someone knows what has changed in 3.5.8?
Regards
Markus
--
Schon gehört? GMX hat einen ge
: RE: [Samba] Winbind & user ID's on multiple servers
> -Original Message-
> From: samba-boun...@lists.samba.org
[mailto:samba-boun...@lists.samba.org]
> On Behalf Of Javier Conti
> Sent: Wednesday, March 09, 2011 4:28 PM
> To: TAKAHASHI Motonobu
> Cc: samba@l
> -Original Message-
> From: samba-boun...@lists.samba.org
[mailto:samba-boun...@lists.samba.org]
> On Behalf Of Javier Conti
> Sent: Wednesday, March 09, 2011 4:28 PM
> To: TAKAHASHI Motonobu
> Cc: samba@lists.samba.org; Mike Auleta
> Subject: Re: [Samba] Winbind &a
On Mar 10, 2011 12:16 AM, "TAKAHASHI Motonobu" wrote:
>
> 2011/3/10 Javier Conti :
> > On 9 March 2011 20:13, Mike Auleta wrote:
> >> We're looking at setting up Linux Authentication to our AD servers
using
> >> winbind and need to know if there is a way to keep all the user IDs in
> >> sync acro
2011/3/10 Javier Conti :
> On 9 March 2011 20:13, Mike Auleta wrote:
>> We're looking at setting up Linux Authentication to our AD servers using
>> winbind and need to know if there is a way to keep all the user IDs in
>> sync across the Linux servers. The way I see it now, the user ID is
>> assi
On 9 March 2011 20:13, Mike Auleta wrote:
> We're looking at setting up Linux Authentication to our AD servers using
> winbind and need to know if there is a way to keep all the user IDs in
> sync across the Linux servers. The way I see it now, the user ID is
> assigned numerically depending on t
We're looking at setting up Linux Authentication to our AD servers using
winbind and need to know if there is a way to keep all the user IDs in
sync across the Linux servers. The way I see it now, the user ID is
assigned numerically depending on the order users log in to a server.
Could make for i
Hi all,
I have a problem that started last week with winbind on a member
server. The network consists of the following:
Openldap/Bind/DHCP Server (No Samba)
PDC - CentOS Linux - Samba 3-3.5.6-43.el5 (sernet package)
BDC - CentOS Linux - Samba 3-3.0.31-36
Proxy Server (with NTLM Auth) - Mandri
On Fri, Feb 18, 2011 at 02:36:21PM +0100, Danilo Godec wrote:
> Here is my setup.
>
> samba+winbind on OpenSuse 11.3 (samba 3.5.4).
>
> Using winbind to auth to another samba+ldap server.
While I don't remember the exact versions, this is
essentially a bug in Samba 3.0 when
Here is my setup.
samba+winbind on OpenSuse 11.3 (samba 3.5.4).
Using winbind to auth to another samba+ldap server.
Authentication works until first failed login:
host:~ # wbinfo -a prod\\user%goodpass
plaintext password authentication succeeded
challenge/response password authentication
Hi Takahashi,
thank you for your swift reply.
>
> > The actual Problem is the Following: There Are different users (from one
> unix group) which should write to this share - and they should be able to
> delete files which are written by other users from the same group, which is
> actually not w
2011/2/2 marius klausen :
> My Problem is as follows: uid/gid information is stored /etc/passwd and
> /etc/group local on my samba Server, passwords are stored in Active
> Directory. In order to let winbind fetch uid/gid information from local files
> i put the following in my smb.conf:
>
> idm
Hi list,
I am still struggeling with some winbind/idmap Problem for some time, and
still got no clue what is going wrong. I already asked on this list but maybe
my previous description was unprecise so i want to start a new attempt:
My Problem is as follows: uid/gid information is stored /etc/
On 17/01/11 16:33, Gaiseric Vandal wrote:
I started on samba 3.0.x and upgrades to 3.4.x.Still having only
partial success myself.I have different "ou" objects in ldap for
the allocation range and each trusted domain .
My smb.conf (editted somewhat) is below.
I would that the idmappi
I started on samba 3.0.x and upgrades to 3.4.x.Still having only
partial success myself.I have different "ou" objects in ldap for the
allocation range and each trusted domain .
My smb.conf (editted somewhat) is below.
I would that the idmapping would be created in the correct OU for e
Hi,
We have just managed to get winbind behaving correctly in a Samba domain
with Samba member servers with help from Sernet. It is now not adding
spurious entries for the "own domain".
However, a member server keeps trying to add group mappings that already
exist in the LDAP idmap ou. This
Apologies, typo in the below corrected (was trying to hide the real ldap
suffix in my post and failed!):
Here is the relevant part of the DMS smb.conf:
idmap backend = ldap:ldap://pdc
idmap uid = 1-2
idmap gid = 1-2
ldap admin dn = cn=manager,dc=my,dc=net
ldap suffix = dc=my,dc=n
Hello all.
I'm trying to investigate a problem that occur every days and force me to
restart samba.
I'm using samba 3.5.6 (last stable) è winbind joining windows ads.
Every day, at unpredictable time, the logs show me:
Jan 17 08:24:53 xxx winbindd[13585]: Kinit failed: Preauthentication failed
2011/1/11 Dan Burkland :
>I have everything
> working however I have noticed when I boot a RHEL client or restart the
> Samba & Winbind services (in that order) I get a bunch of log entries in
> /var/log/messages like the following:
>
> Jan 11 08:04:27 mn4s34052 wi
Hello all,
I am upgrading some clients on my network to the RHEL 5.5 versions of the
Samba/Winbind packages (samba3x-3.3.8-0.52) and have a few questions
regarding them. I just upgraded my AD domain controller to the 2008
functional level thus requiring an upgrade of the Samba/Winbind clients so
> however when I list the shares, all permissions list like so:
>
> dom\bob.mil...@test5:~/Departments$ ls -aln
> d---rws--- 14 15000 150000 2010-12-29 13:22 Finance
> d---rws--- 9 15000 150000 2011-01-04 23:10 IT
>
> dom\bob.mil...@test5:~/Departments$ i=$(wbinfo -G 15000); wbinfo -s $
> If you look at the man page for wbinfo, you will see there is an
> option to allocate uid's and gid's, and to manually set a uid-to-sid
> or gid-to-sid mapping. You may want to manually try creating a
> gid-to-sid mapping for one group and seeing if that group shows up in
> "getent group
That sounds like a pretty good description of winbind and nsswitch.
The tricky party, depending on your configuration, is that one "real"
user can end up with two uid's- one from the "unix" account (e.g.
/etc/passwd, nis or ldap) and one from winbind.Your DC's should not
be using winbind
On 4 January 2011 05:50, Bob Miller wrote:
> Gaiseric,
> thank you sooo much for the reply
> I will make comments inline:
>
> On Mon, 2011-01-03 at 20:06 -0500, Gaiseric Vandal wrote:
>> Winbind is used for allowing unix things like file system access, getent
>> passwd and getent group to hand
In my environment, I also support NFS services so keeping uid/gid's consistent
between machines for both unix/nfs and samba/winbind users is key. If a
windows user "jsmith" connected to a samba server, unix permissions for
"jsmith" were enforced appropriately (samb
Gaiseric,
thank you sooo much for the reply
I will make comments inline:
On Mon, 2011-01-03 at 20:06 -0500, Gaiseric Vandal wrote:
> Winbind is used for allowing unix things like file system access, getent
> passwd and getent group to handle windows users (windows users and groups
> get unix u
's allocated, but it you have users
working but not groups , at least winbind allocation is generally working.
-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of Bob Miller
Sent: Monday, January 03, 2011 5:13 PM
To: samba@lis
Hello,
I have spent the last week and a bit searching google and reading
documentation trying to get this figured. At this point, I have read
the same things so many times, I am not even sure I would notice the
answer any more time to ask for some help.
Having gone through what seems like h
On 12/20/2010 11:17 AM, Eric A. Hall wrote:
>
> On 12/15/2010 4:19 PM, Eric A. Hall wrote:
>
>> First issue is that I would like to filter out the local (LABS) users and
>> groups in winbind if possible.
> Anything else I could try?
I experimented with pam_access a little bit but that did not
On 12/15/2010 4:19 PM, Eric A. Hall wrote:
> First issue is that I would like to filter out the local (LABS) users and
> groups in winbind if possible.
I tried using "winbind: ignore domains = LABS" but this causes winbindd to
completely ignore its own domain, which in turn causes it to freak ou
On 15 December 2010 18:11, Andre Fonseca de Oliveira
wrote:
>
> On 12/13/2010 11:48 AM, Michael Wood wrote:
>>
>> On 13 December 2010 12:38, Andre Fonseca de Oliveira
>> wrote:
>>>
>>> Appreciate your reply.
>>>
On 6 December 2010 14:54, Andre Fonseca de Oliveira
wrote:
>
>
On Thu, Dec 2, 2010 at 3:13 PM, Shirish Pargaonkar
wrote:
> On Tue, Nov 16, 2010 at 10:19 AM, Shirish Pargaonkar
> wrote:
>> On Sat, Nov 13, 2010 at 5:34 PM, Michael Wood wrote:
>>> On 14 November 2010 01:16, Shirish Pargaonkar
>>> wrote:
On Sat, Nov 13, 2010 at 4:52 PM, Michael Adam wrot
On 12/15/2010 4:19 PM, Eric A. Hall wrote:
> First issue is that I would like to filter out the local (LABS) users and
> groups in winbind if possible. I am using LDAP for Posix/Samba accounts,
> and adding winbind to nsswitch.conf results in PAM calling LDAP for users
> and groups then calling w
I have two domains, one called CORP (which is 2003 AD) and the other is
called LABS (which is running Samba 3.5.4-5.1.2). I have established
bi-directional trust between them and most of the basic tests show
apparent success. However there are a couple of issues left that I am
trying to chase down
On 12/13/2010 11:48 AM, Michael Wood wrote:
On 13 December 2010 12:38, Andre Fonseca de Oliveira
wrote:
Appreciate your reply.
On 6 December 2010 14:54, Andre Fonseca de Oliveira
wrote:
Hello,
I have samba 3.3.8 installed on CentOS 5.5 on a production server.
Winbind is filling up t
On 13 December 2010 12:38, Andre Fonseca de Oliveira
wrote:
> Appreciate your reply.
>
>> On 6 December 2010 14:54, Andre Fonseca de Oliveira
>> wrote:
>>>
>>> Hello,
>>>
>>> I have samba 3.3.8 installed on CentOS 5.5 on a production server.
>>>
>>> Winbind is filling up the logs with these mess
Appreciate your reply.
On 6 December 2010 14:54, Andre Fonseca de Oliveira
wrote:
Hello,
I have samba 3.3.8 installed on CentOS 5.5 on a production server.
Winbind is filling up the logs with these messages:
[2010/12/06 10:43:28, 0] winbindd/winbindd_passdb.c:sid_to_name(159)
Possible d
I have a RedHat 5.2 and I have some problem with a Windows 2003 Domain.
I have configured winbind (the configuration is the same and works in
other installation) if I use as a password server a Windows 2000 Domain
Server always works, if I use as password server a Windows 2003 Domain
Server it is
Hi list,
Okay, I have mostly got the disabling errors of samba 3.5.4 on
Openindiana sorted. Things like child smbd processes core dumping/dying
(max groups set to 16 only by default in opensolaris kernel) and being
unable to create sid-uid/sid-gid mappings.
What remains is finding out why wi
Hello,
I have samba 3.3.8 installed on CentOS 5.5 on a production server.
Winbind is filling up the logs with these messages:
[2010/12/06 10:43:28, 0] winbindd/winbindd_passdb.c:sid_to_name(159)
Possible deadlock: Trying to lookup SID
S-1-5-21-2106371596-187675891-3351287853 with passdb bac
On Tue, Nov 16, 2010 at 10:19 AM, Shirish Pargaonkar
wrote:
> On Sat, Nov 13, 2010 at 5:34 PM, Michael Wood wrote:
>> On 14 November 2010 01:16, Shirish Pargaonkar
>> wrote:
>>> On Sat, Nov 13, 2010 at 4:52 PM, Michael Adam wrote:
Hi Shirish,
Shirish Pargaonkar wrote:
> On Mo
The doc is here:
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html
The short answer:
1. not reading this doc will "cause pain, agony, and desperation."
2. 'net' map domain-to-unix ID's and interacts with domain security.
net rpc = for Windows Group Management operations.
Hi John,
The same smb and winbind configuration ( same SUSE box ) works good other
Windows AD servers.
"#wbinfo -u" and "#wbinfo -g" returns the users and groups respectively.
Thanks for your great help !!!
what is the difference between "#net rpc" and "#net ads" ?..if you have
time, give some
On Sat, Nov 13, 2010 at 5:34 PM, Michael Wood wrote:
> On 14 November 2010 01:16, Shirish Pargaonkar
> wrote:
>> On Sat, Nov 13, 2010 at 4:52 PM, Michael Adam wrote:
>>> Hi Shirish,
>>>
>>> Shirish Pargaonkar wrote:
On Mon, Nov 8, 2010 at 1:47 PM, Jeremy Allison wrote:
> On Mon, Nov 0
Hi John,
Thanks for your reply.
# net ads testjoin
[2010/11/15 06:40:27, 0] libads/sasl.c:819(ads_sasl_spnego_bind)
kinit succeeded but ads_sasl_spnego_krb5_bind failed: Invalid credentials
[2010/11/15 06:40:29, 0] libads/sasl.c:819(ads_sasl_spnego_bind)
kinit succeeded but ads_sasl_spnego
"Invalid credentials" points to a problem, thought I'm guessing, with
the domain membership.
I'm really not sure what it means.
Does 'ads testjoin' show anything?
Would it be too much trouble to remove the system from the domain and
add it back, assuming that was the the problem?
1. remove the
Hi John,
Thanks for your reply.
This is the result :-
#wbinfo -u
Connected to LDAP server EIS.squid.biz
ads_sasl_spnego_bind: got OID=1.2.840.48018.1.2.2
ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2
ads_sasl_spnego_bind: got OID=1.2.840.113554.1.2.2.3
ads_sasl_spnego_bind: got OID=1.3.6.1
You could try to run winbindd manually (winbindd -d 3 -i), and from
another console run 'wbinfo -u', and see if any errors present them
selves in the console where you ran winbindd. First make sure no other
winbind daemon is running, by testing, as root, with: lsof -i tcp -nP |
grep winbind
On S
Hi John,
Thanks for your reply.
I have modified the nsswitch.conf file and smb.conf as per your suggestions.
Still wbinfo does not list the users... I have rebooted the server after
modification.
and #rm -rf /var/lib/samba/* and restart the services and joined the domain
again. but no luck..
Does /etc/nsswitch.conf hold winbind?
Something like this:
passwd: compat winbind
group: compat winbind
Hi Guys,
I have configured SAMBA with Windows 2003 AD. But "#wbinfo -u" and
"#wbinfo -g" does not list the users
1. Domain joined successfully.
# net rpc testjoin -U Administrator
Join to 'DOMAIN' is OK
2. wbinfo -a works ( User authentication )
# wbinfo -a 'DOMAIN\user'
Enter DOMAIN\user's p
On 14 November 2010 01:16, Shirish Pargaonkar
wrote:
> On Sat, Nov 13, 2010 at 4:52 PM, Michael Adam wrote:
>> Hi Shirish,
>>
>> Shirish Pargaonkar wrote:
>>> On Mon, Nov 8, 2010 at 1:47 PM, Jeremy Allison wrote:
>>> > On Mon, Nov 08, 2010 at 01:21:30PM -0600, Shirish Pargaonkar wrote:
>>> >> So
On Sat, Nov 13, 2010 at 4:52 PM, Michael Adam wrote:
> Hi Shirish,
>
> Shirish Pargaonkar wrote:
>> On Mon, Nov 8, 2010 at 1:47 PM, Jeremy Allison wrote:
>> > On Mon, Nov 08, 2010 at 01:21:30PM -0600, Shirish Pargaonkar wrote:
>> >> Sometimes a group sid does not get resolved to its name.
>> >>
>
Hi Shirish,
Shirish Pargaonkar wrote:
> On Mon, Nov 8, 2010 at 1:47 PM, Jeremy Allison wrote:
> > On Mon, Nov 08, 2010 at 01:21:30PM -0600, Shirish Pargaonkar wrote:
> >> Sometimes a group sid does not get resolved to its name.
> >>
> >> Is this a settings problem? Looks like winbind deamon
> >>
Thanks for the replies. I did get it figured out. The domain
controllers were not replicating properly and causing issues.
On Tue, Nov 9, 2010 at 9:29 AM, Joe Stuart wrote:
> I'm sorry. That was changed to domain from me testing. When I switch
> it to ads, it still fails with the same message.
>
I'm sorry. That was changed to domain from me testing. When I switch
it to ads, it still fails with the same message.
On Tue, Nov 9, 2010 at 9:03 AM, Volker Lendecke
wrote:
> On Tue, Nov 09, 2010 at 09:01:22AM -0600, Joe Stuart wrote:
>> Here is the smb.conf
>>
>> [global]
>>
>> # Global paramete
On Tue, Nov 09, 2010 at 09:01:22AM -0600, Joe Stuart wrote:
> Here is the smb.conf
>
> [global]
>
> # Global parameters
> workgroup = MYDOMAIN.QA
> realm = MYDOMAIN.QA
> preferred master = no
> server string = Samba file and print server
> security = domain
Have you tried "security=ads"? Not sur
> Sent: Montag, 8. November 2010 18:20
> To: samba@lists.samba.org
> Subject: [Samba] Winbind - Domain Join Failed
>
> Hi,
> I'm trying to setup winbind on Solaris 10 update 6 and am having an issue
> joining the domain. I'm running this command
>
> net ads joi
Hey stuart, can you maybe post you smb.conf?
-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] On
Behalf Of Joe Stuart
Sent: Montag, 8. November 2010 18:20
To: samba@lists.samba.org
Subject: [Samba] Winbind - Domain Join Failed
Hi,
I'm t
On Mon, Nov 8, 2010 at 1:47 PM, Jeremy Allison wrote:
> On Mon, Nov 08, 2010 at 01:21:30PM -0600, Shirish Pargaonkar wrote:
>> Sometimes a group sid does not get resolved to its name.
>>
>> Is this a settings problem? Looks like winbind deamon
>> went dormant for a while and then woke up?
>> I am
On Mon, Nov 08, 2010 at 01:21:30PM -0600, Shirish Pargaonkar wrote:
> Sometimes a group sid does not get resolved to its name.
>
> Is this a settings problem? Looks like winbind deamon
> went dormant for a while and then woke up?
> I am using interface wbcLookupSid provided by the
> library libwb
Sometimes a group sid does not get resolved to its name.
Is this a settings problem? Looks like winbind deamon
went dormant for a while and then woke up?
I am using interface wbcLookupSid provided by the
library libwbclient.so for resolving sids to names.
These are the winbind related parameters
Hi,
I'm trying to setup winbind on Solaris 10 update 6 and am having an
issue joining the domain. I'm running this command
net ads join -U admin -d10
Here is the last paragraph or so of the debug output.
[2010/11/08 11:12:37, 3] libsmb/cliconnect.c:1176(cli_session_setup)
SPNEGO login failed:
Anyone,
I have registered a bug for this, #7763.
I am also now suffering from #7066, have followed all the suggestions
and have no resolution.
Is it the case that Samba in as a domain controller with member server
in NT4-style domains should only be used with 3.2.x (which is not
ostensibly
Just reinstalled my webserver, no ssl, so image URL is:
http://www.nanogherkin.com/ldap.png
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
On 26/10/10 17:28, Gaiseric Vandal wrote:
I may have indeed forgot to clear the cache files after upgrading
from samba 3.0x to 3.4.x.
I had various issues with samba servers as member servers - mostly in
keeping idmap entries consistent across machines. The solution in
the end had been to
I may have indeed forgot to clear the cache files after upgrading from
samba 3.0x to 3.4.x.
I had various issues with samba servers as member servers - mostly in
keeping idmap entries consistent across machines. The solution in the
end had been to covert the member servers to BDC's and hav
On 26/10/10 16:32, Gaiseric Vandal wrote:
You may need to specify separate idmap sections for each domain, as
well as general settings. Samples of my smb.conf (samba 3.4.x ) are
below.
When I was on samba 3.0.x, idmap entries would populate for each
domain in the correct OU. It would use th
You may need to specify separate idmap sections for each domain, as well
as general settings. Samples of my smb.conf (samba 3.4.x ) are below.
When I was on samba 3.0.x, idmap entries would populate for each domain
in the correct OU. It would use the general idmap range, not domain
specific
Apologies, forgot the list stripped attachements.
Please see:
https://www.nanogherkin.com/ldap.png
Apologies for self-signed cert.
Cheers
Alex
--
This message is intended only for the addressee and may contain
confidential information. Unless you are that person, you may not
disclo
Hi,
I have recently upgraded a system with a Samba BDC, PDC and a couple of
member servers from 3.2.14 to 3.4.9 (and also tested with 3.5.6).
There appears to be some problem with Winbind (we need to run it on all
servers as we have a trust relationship to a domain at another office).
I hav
ba version is just too old.
-Original Message-
From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
On Behalf Of Steven Moyse
Sent: Thursday, October 21, 2010 8:52 PM
To: samba@lists.samba.org
Subject: [Samba] Winbind user authentication (-a) fails, but kerberos
auth
onntag, 24. Oktober 2010 17:20
To: Oliver Weinmann
Cc: samba@lists.samba.org
Subject: Re: [Samba] Samba-winbind 3.5.4 primary group is always
domainusers!!!???
On Sun, Oct 24, 2010 at 2:46 PM, Andrew Lyon wrote:
>> -Original Message-
>> From: Andrew Lyon [mailto:andrew.l
On Sun, Oct 24, 2010 at 2:46 PM, Andrew Lyon wrote:
>> -Original Message-
>> From: Andrew Lyon [mailto:andrew.l...@gmail.com]
>> Sent: Freitag, 22. Oktober 2010 11:50
>> To: Oliver Weinmann
>> Cc: samba@lists.samba.org
>> Subject: Re: [Samba] Samba-w
> -Original Message-
> From: Andrew Lyon [mailto:andrew.l...@gmail.com]
> Sent: Freitag, 22. Oktober 2010 11:50
> To: Oliver Weinmann
> Cc: samba@lists.samba.org
> Subject: Re: [Samba] Samba-winbind 3.5.4 primary group is always
> domainusers!!!???
>
> On We
version is just too old.
>>
>> -Original Message-
>> From: samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org]
>> On Behalf Of Steven Moyse
>> Sent: Thursday, October 21, 2010 8:52 PM
>> To: samba@lists.samba.org
>> Sub
ilto:samba-boun...@lists.samba.org]
> On Behalf Of Steven Moyse
> Sent: Thursday, October 21, 2010 8:52 PM
> To: samba@lists.samba.org
> Subject: [Samba] Winbind user authentication (-a) fails, but kerberos
> authentication succeeds
>
> I am having trouble setting up winbind auth
samba@lists.samba.org
Subject: Re: [Samba] Samba-winbind 3.5.4 primary group is always
domainusers!!!???
On Wed, Oct 20, 2010 at 12:36 PM, Oliver Weinmann
wrote:
> Hi,
>
> Any news regarding this problem? I have testet samba 3.5.6 and the
> problem still persists. I had to downgrad
age-
> From: samba-boun...@lists.samba.org
> [mailto:samba-boun...@lists.samba.org] On Behalf Of Oliver Weinmann
> Sent: Donnerstag, 9. September 2010 13:13
> To: samba@lists.samba.org
> Subject: [Samba] Samba-winbind 3.5.4 primary group is always
> domainusers!!!???
>
> Dear All,
&
@lists.samba.org
Subject: [Samba] Winbind user authentication (-a) fails, but kerberos
authentication succeeds
I am having trouble setting up winbind authentication.
I have successfully joined the domain
winbind -t OK
winbind -u OK
winbind -g OK
winbind -K 'DOMAIN\user%password' OK
winbind -a &#
I am having trouble setting up winbind authentication.
I have successfully joined the domain
winbind -t OK
winbind -u OK
winbind -g OK
winbind -K 'DOMAIN\user%password' OK
winbind -a 'DOMAIN\user%password' FAIL
For winbind -a:
Plaintext authentication is attempted, and fails with
NT_STATUS_ACCE
Sent: Donnerstag, 9. September 2010 13:13
To: samba@lists.samba.org
Subject: [Samba] Samba-winbind 3.5.4 primary group is always
domainusers!!!???
Dear All,
I stepped over a strange issue today. I have one installation of samba
winbind 3.3.2 on a Ubuntu machine. Changing the primary unix group of a
W dniu 19.10.2010 16:50, Adrian Graham pisze:
> Folks,
>
> Having some fun with winbind on Samba 3.5.5 on RHEL5 and/or Centos5.
> I’ve got it working so ssh logins work correctly and file permissions
> are seemingly correct with created files etc. Backend authentication
> is from a Win2K3R2 box ru
301 - 400 of 2521 matches
Mail list logo
