[Samba] winbind sometimes only get partial groups

2013-08-05 Thread d tbsky
hi: I setup samba4 DC server with windows client and 6 linux workstations.windows client works fine, but linux samba client is strange. I have one user, which belongs to 21 AD groups. but groups my-user only return some of them. at one workstation, it may return all the 21 groups, but others

[Samba] samba4 password sync howto?

2013-06-09 Thread d tbsky
hi: we have some service which store local password. and we want to sync samba4 (4.0.5) passwords to them. when we use windows server before, we can use ssod and write our own program to do that. at first I think it should be easy with settings like below: unix password sync

Re: [Samba] samba4 password sync howto?

2013-06-09 Thread d tbsky
windows domain controller. is that workable? or I should wait for samba 4.1 or even 4.2? 2013/6/10 d tbsky tbs...@gmail.com hi: we have some service which store local password. and we want to sync samba4 (4.0.5) passwords to them. when we use windows server before, we can use ssod

Re: [Samba] samba4 password sync howto?

2013-06-09 Thread d tbsky
iPhone 2013/6/10 David Gonzalez - [DGHVOIP] i...@dghvoip.com Hey, I'm no expert on Samba 4 and I might be wrong but can't you use winbind for that, can you? Cheers. Sent from my iPhone On 9/06/2013, at 21:52, d tbsky tbs...@gmail.com wrote: hi: after searching the mail archive

Re: [Samba] samba4 rfc2307 practice and confuse

2013-04-15 Thread d tbsky
2013/4/14 Gémes Géza g...@kzsdabas.hu Unfortunately the winbind implementation samba as an AD DC uses (the one in the samba binary) is not able to read other posix information from AD other than the uidNumber and gidNumber. I think I can live with that since we use it only for a few

Re: [Samba] samba4 rfc2307 practice and confuse

2013-04-15 Thread d tbsky
2013/4/15 steve st...@steve-ss.com Yes. To get the rfc2307 info out from the directory you can use winbind, nslcd or sssd on the client. If you want to get all of the rfc2307 attributes on the DC, your choice is narrowed down to the latter two. As Geza posted earlier, winbind can only manage

[Samba] samba4 rfc2307 practice and confuse

2013-04-13 Thread d tbsky
hi: I setup a small samba 4.0.5 AD DC server. my client is windows 7 and linux. and I use windows 7 with remote managment tools to manage rfc2307 account seetings of samba4 DC. I hope my users can use the same account to use windows and linux. samba4 DC provsion command as below:

[Samba] samba4 AD DC as file server?

2013-03-11 Thread d tbsky
hi: I want to setup a small samba4 server with AD and file server function. I know that samba4 AD DC has no netbios browsing support. are there other missing functions, like winbindd or something else? and if I install two samba4 instance, one to /usr/local/samba(for file server), one to

[Samba] what's good for security=ads ?

2008-09-16 Thread d tbsky
hi: we have a 2003 R2 domain. it is running on 2003 native mode. we want to setup some samba member file servers. our client is windows xp. i try samba 3.2 with security = domain and idmap backend = rid. it seems fine. but i saw there are more advanced options in samba like security = ads

Re: [Samba] Re: what's good for security=ads ?

2008-09-16 Thread d tbsky
hi: thanks a lot for your explain !! i will keep an eys on vista issue, although i think we will just by pass this os. with security = domain, the rid idmap backend seems the best i can get. i hope i can migrate to samba 4.0 smoothly in the future. thanks again for your kindly help!!

[Samba] sambantpassword different at samba3 ??

2003-11-16 Thread tbsky
hi: i try to upgrade samba 2.2.8a to samba 3.0final. and i found win2000 client can not login(win9x is ok). after some tracing, i found that nt password stored at samba is not ok. if i use samba3's smbpasswd to change the password again, then win2000 client can login. if i use ntlm

Re: [Samba] my samba3+ldap+SSO plan

2003-11-12 Thread tbsky
!! and since all machine account change their password against master ldap server and replicate to branch, so i think machines can travel arround the branch sites. right? thanks again for ur information. i m lucky to understand these before i deploy :) Best Regards, tbsky

Re: [Samba] my samba3+ldap+SSO plan

2003-11-12 Thread tbsky
just a thought, myabe we can use samba with multi-master ldap in the near furture? Best Regards, tbsky so i think the normal solution is to make every samba as PDC, make HQ ldap server as master, and make branch ldap server as slave, right? Correct. our wan link from HQ to branch site

[Samba] my samba3+ldap+SSO plan

2003-11-11 Thread tbsky
-master replication seems experimental and hard to maintain. we don't need real time replication. are there existing tools for syncing entries between two ldap servers? if there are better solution or if my plan is totally wrong, please tell me. thanks for any advice !!! Best Regards, tbsky

Re: AW: [Samba] my samba3+ldap+SSO plan

2003-11-11 Thread tbsky
branch site as master. then i think if there exist ldap syncing tool, then i can just make things simpler, cause i don't need real time replication.. Best Regards, tbsky -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo

[Samba] how to find out who regsiter the wins entry..

2003-08-28 Thread tbsky
192.168.2.X to connect to server S1, but how can we find out the real ip of the stranger? maybe set the log level? thanks for advice!! Regards, tbsky -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba