RE: [Samba] Re: Corrupted userid in mail folders - Crisis

2004-09-22 Thread Roland Giesler
 John H Terpstra wrote:
  On Tuesday 21 September 2004 11:38, Igor Belyi wrote:
 Just for clarification, do you happen to have idmap backend 
 parameter in your smb.conf?
  
  You only need that if you are running LDAP and have 
 multiple servers 
  and want
  the same SID/uid mapping on all servers. In that case there 
 should be no 
  winbindd_idmap.tdb file.
 
 There's also a possibility that it isn't used and file could 
 have been 
 left there when winbindd was reconfigured from using local 
 file to using 
 LDAP. I haven't seen smb.conf in this thread and somehow 
 everyone stated 
 to assume that mappings are stored locally. I just want to make sure 
 that this assumption is correct.

You're right, I don't use LDAP and haven't ever.

The idmap paramater doesn't appear in smb.conf

Roland

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Corrupted userid in mail folders - Crisis

2004-09-22 Thread John H Terpstra
On Wednesday 22 September 2004 00:28, Roland Giesler wrote:
  John H Terpstra wrote:
   On Tuesday 21 September 2004 11:38, Igor Belyi wrote:
  Just for clarification, do you happen to have idmap backend
  parameter in your smb.conf?
  
   You only need that if you are running LDAP and have
 
  multiple servers
 
   and want
   the same SID/uid mapping on all servers. In that case there
 
  should be no
 
   winbindd_idmap.tdb file.
 
  There's also a possibility that it isn't used and file could
  have been
  left there when winbindd was reconfigured from using local
  file to using
  LDAP. I haven't seen smb.conf in this thread and somehow
  everyone stated
  to assume that mappings are stored locally. I just want to make sure
  that this assumption is correct.

 You're right, I don't use LDAP and haven't ever.

 The idmap paramater doesn't appear in smb.conf

Then verify that your winbindd_idmap.tdb file is not deleted. Also, use the 
tdbbackup utility to validate its integrity. See the man page. This file 
stores the Windows SID to UNIX uid/gid mappings.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Re: Corrupted userid in mail folders - Crisis

2004-09-22 Thread Roland Giesler
   There's also a possibility that it isn't used and file could have 
   been left there when winbindd was reconfigured from using local
   file to using
   LDAP. I haven't seen smb.conf in this thread and somehow
   everyone stated
   to assume that mappings are stored locally. I just want 
 to make sure
   that this assumption is correct.
 
  You're right, I don't use LDAP and haven't ever.
 
  The idmap paramater doesn't appear in smb.conf
 
 Then verify that your winbindd_idmap.tdb file is not deleted. 
 Also, use the 
 tdbbackup utility to validate its integrity. See the man 
 page. This file 
 stores the Windows SID to UNIX uid/gid mappings.

It's there.  

[EMAIL PROTECTED] samba]# tdbbackup winbindd_idmap.tdb
[EMAIL PROTECTED] samba]# tdbbackup -v winbindd_idmap.tdb
winbindd_idmap.tdb : 1843 records
[EMAIL PROTECTED] samba]#

It's looks fine?

Roland

 
 - John T.
 -- 
 John H Terpstra
 Samba-Team Member
 Phone: +1 (650) 580-8668
 
 Author:
 The Official Samba-3 HOWTO  Reference Guide, ISBN: 
 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening 
 Linux, ISBN: 0072254971 OpenLDAP by Example, ISBN: 0131488732 
 Other books in production.
 -- 
 To unsubscribe from this list go to the following URL and read the
 instructions:  http://lists.samba.org/mailman/listinfo/samba
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Corrupted userid in mail folders - Crisis

2004-09-21 Thread John H Terpstra
On Tuesday 21 September 2004 11:38, Igor Belyi wrote:
 John H Terpstra wrote:
 Thing were running fine, at least that's what it appeared like.  Then
 sporadically people started getting authentication error when logging
  into their IMAP mailboxes.  Next the deputy principal reported that she
  had received other people's mail.  So I ran the following script to
  reset all the folders:
 
  Also, make sure that the file winbindd_idmap.tdb never gets deleted. It
  stores the SID to UID mappings and if it gets zapped you will see the
  symptoms you have reported.

 Just for clarification, do you happen to have idmap backend parameter
 in your smb.conf?

You only need that if you are running LDAP and have multiple servers and want 
the same SID/uid mapping on all servers. In that case there should be no 
winbindd_idmap.tdb file.

- John T.


 Igor

-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Corrupted userid in mail folders - Crisis

2004-09-21 Thread John H Terpstra
On Tuesday 21 September 2004 13:06, Igor Belyi wrote:
 John H Terpstra wrote:
  On Tuesday 21 September 2004 11:38, Igor Belyi wrote:
 Just for clarification, do you happen to have idmap backend parameter
 in your smb.conf?
 
  You only need that if you are running LDAP and have multiple servers and
  want the same SID/uid mapping on all servers. In that case there should
  be no winbindd_idmap.tdb file.

 There's also a possibility that it isn't used and file could have been
 left there when winbindd was reconfigured from using local file to using
 LDAP. I haven't seen smb.conf in this thread and somehow everyone stated
 to assume that mappings are stored locally. I just want to make sure
 that this assumption is correct.


-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: Corrupted userid in mail folders - Crisis

2004-09-21 Thread John H Terpstra
On Tuesday 21 September 2004 13:06, Igor Belyi wrote:
 John H Terpstra wrote:
  On Tuesday 21 September 2004 11:38, Igor Belyi wrote:
 Just for clarification, do you happen to have idmap backend parameter
 in your smb.conf?
 
  You only need that if you are running LDAP and have multiple servers and
  want the same SID/uid mapping on all servers. In that case there should
  be no winbindd_idmap.tdb file.

 There's also a possibility that it isn't used and file could have been
 left there when winbindd was reconfigured from using local file to using
 LDAP. I haven't seen smb.conf in this thread and somehow everyone stated
 to assume that mappings are stored locally. I just want to make sure
 that this assumption is correct.

If samba was run before setting up the idmap backend parameter then a 
winbindd_idmap.tdb file would have been created. Simply delete it, it should 
not be used once the LDAP backend has been configured.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba