Re: [Samba] ????: Could not build Samba with ADS support on Solaris 10 [SEC=UNCLASSIFIED]

2011-07-06 Thread Wilkinson, Alex
0n Wed, Jul 06, 2011 at 11:13:54PM +0800, youngjohn04 wrote: With these environment variables set, same error appeared. To avoid using bundled ldap, I removed SUNWlldap, keep only Openldap, but this also made no difference. I also tried using Sun Studio12, failed too.

[Samba] winbindd(8)- groups: cannot find name for group ID ... [SEC=UNCLASSIFIED]

2010-12-08 Thread Wilkinson, Alex
Hi all, On one of my Linux AD clients (Ubuntu 10.04.1 LTS - 2.6.32-24-generic) when i log in via ssh i get the following errors: groups: cannot find name for group ID 1 groups: cannot find name for group ID 10001 groups: cannot find name for group ID 10002 groups: cannot find

Re: [Samba] Share permission problem if user is member in more than 16 groups on AD [SEC=UNCLASSIFIED]

2010-07-15 Thread Wilkinson, Alex
0n Thu, Jul 15, 2010 at 12:26:05AM +0300, M??rcis Lielturks wrote: Can anybody share experience on compiling samba on OpenSolaris? What's the most painless way? I'm considering to use latest 3.5.5 but maybe I should use same version Sun (Oracle) is using - 3.0.37? I have to set

[Samba] Changing ACLs via windows dialgue box ? Is it possible ? [SEC=UNCLASSIFIED]

2010-06-20 Thread Wilkinson, Alex
Hi all, so im scratching my head wondering if i have ever had this working before ... (usually i go all changes on the unix side with chown(1) or setfacl(1)). Is it possible to accurately add/remove/modify acls via the windows dialgue box on a samba share ? When i do and then hit apply the

Re: [Samba] Changing ACLs via windows dialgue box ? Is it possible ? [SEC=UNCLASSIFIED]

2010-06-20 Thread Wilkinson, Alex
0n Sun, Jun 20, 2010 at 04:43:13PM -0400, Gaiseric Vandal wrote: Which platform? The idmap suggestion seems to make sense. I had the same problem with member servers until I set up idmap (even though the unix id's were consistent between all machines.) I did not have

Re: [Samba] ads_sasl_spnego_krb5_bind failed: Program lacks support for encryption type [SEC=UNCLASSIFIED]

2010-02-17 Thread Wilkinson, Alex
0n Wed, Feb 17, 2010 at 07:49:25AM -0600, Dale Schroeder wrote: Reply to list/user gets me again! Anyway, we are at 2008 functional level, so I don't think our domain is even accepting DES. It looks like Debian has a fix in libkrb5 that has another two days in sid,

Re: [Samba] ads_sasl_spnego_krb5_bind failed: Program lacks supportfor encryption type [SEC=UNCLASSIFIED]

2010-02-14 Thread Wilkinson, Alex
0n Sat, Feb 13, 2010 at 06:57:52PM -0800, Jeremy Allison wrote: In Samba 3.5.0 there is a parameter create krb5 conf that controls if this private krb5.conf file is created or not. Would it be helpful for this to be back ported to earlier versions ? Would this parameter work in

Re: [Samba] ads_sasl_spnego_krb5_bind failed: Program lacks support for encryption type [SEC=UNCLASSIFIED]

2010-02-12 Thread Wilkinson, Alex
Anyone ? -Alex 0n Thu, Feb 11, 2010 at 08:00:57PM +0800, Wilkinson, Alex wrote: Hi all, According to this bug report: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977 This particular error is actually a bug in the samba code. Does anyone know

[Samba] ads_sasl_spnego_krb5_bind failed: Program lacks support for encryption type [SEC=UNCLASSIFIED]

2010-02-11 Thread Wilkinson, Alex
Hi all, According to this bug report: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566977 This particular error is actually a bug in the samba code. Does anyone know if there are patches that fix this ? Adding allow_weak_crypto = true to /etc/krb5.conf does not solve this for me :( Has

Re: [Samba] Winbind problem

2007-10-04 Thread Wilkinson, Alex
0n Fri, Oct 05, 2007 at 06:45:21AM +0800, mail wrote: I have a Centos 4.4 Linux server that setup Winbind with windows 2003AD integration, the winbind suddenly can't receive AD accounts, I can use wbinfo -u to show AD user name and group etc, but getent passwd isn't

[Samba] winbind enum = yes ... oreilly samba books says turn off ... but things break. confused :-(

2007-08-15 Thread Wilkinson, Alex
Hi all, In the Oreilly Using Samba book pg 292 it is recommended to turn off Winbindd(8) user and group enumeration (very expensive operation). However, when doing this on FreeBSD -CURRENT the groups that users are in are not recognised. When I enable user and group enumeration group permissions

Re: [Samba] AD + winbindd(8): group permissions being ignored ? WTF ?

2007-08-15 Thread Wilkinson, Alex
0n Tue, Aug 14, 2007 at 05:13:10PM -0700, Doug VanLeuven wrote: I don't use FreeBSD, but it looks like the make first applies FreeBSD patches against the main samba release. What's failing is the patch against the very same file that you patched with group_fix_patch.txt. You

Re: [Samba] AD + winbindd(8): group permissions being ignored ? WTF ?

2007-08-13 Thread Wilkinson, Alex
0n Mon, Aug 13, 2007 at 01:44:19AM -0700, Doug VanLeuven wrote: Have a look and see if this report is relevant in your case (it's fairly long): https://bugzilla.samba.org/show_bug.cgi?id=3990 This is my *exact* problem. I am using version 3.0.25a,1.1. And looking at

[Samba] AD + winbindd(8): group permissions being ignored ? WTF ?

2007-08-12 Thread Wilkinson, Alex
Hi all, I am successfully authenticating FreeBSD 7.0-CURRENT #1: Wed Jul 25 17:31:15 WST 2007 against AD. Users can log in succesfully with home directories being served via amd(8) and NFS. However, I have discovered a potential show-stopper that will force me to abort this mission :( The

Re: [Samba] Samba winbind and nsswith.conf

2007-08-11 Thread Wilkinson, Alex
0n Fri, Aug 10, 2007 at 02:23:37PM -0400, Mark Campbell wrote: when I run wbinfo -u or -g it returns users and groups from AD. When I do a getent passwd I get the results for /etc/passwd and nothing from AD. When I auth to the samba server the permissions set based on groups do

Re: [Samba] setfacl(1) - Can FreeBSD's ACLs contain groups from NT/AD domains ? [SOLUTION]

2007-08-09 Thread Wilkinson, Alex
When putting winbindd(8) into debug mode I finally saw the following: id S-1-5-21-1957994488-1326574676-725345543-35301 is neither ours, a Unix SID, nor builtin error converting unix gid to sid The hard part was identifying what part of the puzzle I needed to debug in the first place!

Re: [Samba] setfacl(1) - Can FreeBSD's ACLs contain groups from NT/AD domains ?

2007-08-08 Thread Wilkinson, Alex
0n Mon, Aug 06, 2007 at 04:09:37PM +0200, Greg Byshenk wrote: sambaserver# setfacl -m u:ADDOMAIN\\gbytest:rwx,g:ADDOMAIN\\domain\ users:rx z-test/ sambaserver# getfacl z-test/ #file:z-test/ #owner:1361 #group:100 user::rwx

[Samba] setfacl(1) - Can FreeBSD's ACLs contain groups from NT/AD domains ?

2007-08-06 Thread Wilkinson, Alex
Hi all, I have FreeBSD 7.0-CURRENT #1: Wed Jul 25 authenticating successfully against active directory via samba's winbindd(8). I need to manage samba shares via FreeBSD ACLs and CIFS ACLs. From my reading of setfacl(1) I should be able to set group permissions using the syntax of