Re: [Samba] wbinfo -i domain_username issue
On 09/10/2013 15:06, steve wrote: > On Wed, 2013-10-09 at 10:18 +0200, Alessio Tomelleri wrote: >> Thx Steve for your quick replay. >> >> ...and sorry for my late, but I was away in last two days, anyway here >> I'am... >> >> For first, nscd is not running anywhere... >> >> Secondly, I have to admit that perhaps (almost sure), I have >> misunderstood something about samba4/winbind, and these two last day had >> been useful to clarify to me... >> >> Yes, that configuration implies what you wrote... actually AD relies to >> a 2k3 servers that have not any uidNumber and/or gidNumber conf... I >> think I have to relies to our old openldap or switch to config this >> "member server" as samba4 dc integrated in domain >> >> Thx, Alessio Tomelleri > Hi > 2003 didn't have either rfc2307 nor sfu, so if you wish to keep your > idmap in ad then you'll need to extend the schema to sfu. The other > alternative (which I hate) is the rid backend: > > idmap config *:backend = tdb > idmap config *:range = 70001-8 > idmap config SHORTDOMAIN:backend = rid > idmap config SHORTDOMAIN:range = 500-4 > > It maps the uid:gid pair depending on the RID and stores the values in a > second db. > HTH > Steve > > Hi Steve, thanks for the help and point me this last one... Alessio -- Alessio Tomelleri Ufficio Tecnico ARPAV - Dipartimento Provinciale di Belluno v. Tomea, 5 - Belluno (BL), 32100 tel. +390437935516 fax. +39043730340 email: [email protected] web : http://www.arpa.veneto.it PGP Id chiave: 0x85FDC3F2 Registered Linux user: nr.496721 --- Quanto sai non deve impedirti di sapere quanto dovresti. C.D. In risposta alla domanda: "Qual'è il gioco più grande, gli scacchi o la dama ?", in tutta franchezza devo privilegiare gli scacchi (W. Banks, Campione del mondo di dama alla cieca). -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] wbinfo -i domain_username issue
On Wed, 2013-10-09 at 10:18 +0200, Alessio Tomelleri wrote: > > Thx Steve for your quick replay. > > ...and sorry for my late, but I was away in last two days, anyway here > I'am... > > For first, nscd is not running anywhere... > > Secondly, I have to admit that perhaps (almost sure), I have > misunderstood something about samba4/winbind, and these two last day had > been useful to clarify to me... > > Yes, that configuration implies what you wrote... actually AD relies to > a 2k3 servers that have not any uidNumber and/or gidNumber conf... I > think I have to relies to our old openldap or switch to config this > "member server" as samba4 dc integrated in domain > > Thx, Alessio Tomelleri Hi 2003 didn't have either rfc2307 nor sfu, so if you wish to keep your idmap in ad then you'll need to extend the schema to sfu. The other alternative (which I hate) is the rid backend: idmap config *:backend = tdb idmap config *:range = 70001-8 idmap config SHORTDOMAIN:backend = rid idmap config SHORTDOMAIN:range = 500-4 It maps the uid:gid pair depending on the RID and stores the values in a second db. HTH Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] wbinfo -i domain_username issue
Thx Steve for your quick replay. ...and sorry for my late, but I was away in last two days, anyway here I'am... For first, nscd is not running anywhere... Secondly, I have to admit that perhaps (almost sure), I have misunderstood something about samba4/winbind, and these two last day had been useful to clarify to me... Yes, that configuration implies what you wrote... actually AD relies to a 2k3 servers that have not any uidNumber and/or gidNumber conf... I think I have to relies to our old openldap or switch to config this "member server" as samba4 dc integrated in domain Thx, Alessio Tomelleri On 07/10/2013 18:36, steve wrote: > On Mon, 2013-10-07 at 18:07 +0200, Alessio Tomelleri wrote: >>idmap config *:backend = tdb >>idmap config *:range = 70001-8 >>idmap config SHORTDOMAIN:backend = ad >>idmap config SHORTDOMAIN:schema_mode = rfc2307 >>idmap config SHORTDOMAIN:range = 500-4 >> >>winbind nss info = rfc2307 > Hi > This configuration suggests that your rfc2307 attributes are stored in > AD. Are you sure your users and groups have uidNumber and/or gidNumber > attributes set under their respective DN's? If not, then winbind has > nothing to retrieve for the getent command. Oh, and kill any nscd for > the moment. > HTH > Steve > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] wbinfo -i domain_username issue
On Mon, 2013-10-07 at 18:07 +0200, Alessio Tomelleri wrote: > > >idmap config *:backend = tdb >idmap config *:range = 70001-8 >idmap config SHORTDOMAIN:backend = ad >idmap config SHORTDOMAIN:schema_mode = rfc2307 >idmap config SHORTDOMAIN:range = 500-4 > >winbind nss info = rfc2307 Hi This configuration suggests that your rfc2307 attributes are stored in AD. Are you sure your users and groups have uidNumber and/or gidNumber attributes set under their respective DN's? If not, then winbind has nothing to retrieve for the getent command. Oh, and kill any nscd for the moment. HTH Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] wbinfo -i domain_username issue
Hi,
I'm going to set up a samba4 member server joined in a existing AD
Domain (2003). I don't need a DC controller, but a simply file server
where (mostly) windows client will access to some share. so I'm gonna to
follow
https://wiki.samba.org/index.php/Samba4/Domain_Member
distro is Ubuntu 12.04.03 amd64
I compiled...
./configure --libdir=/lib/x86_64-linux-gnu --with-ads
--with-shared-modules=idmap_ad,pam --enable-old-ctdb
make... make install...
everything was fine.
/usr/local/samba/etc/smb.conf :
[global]
log level = 3
workgroup = SHORTDOMAIN
security = ADS
realm = FQDN_DOMAIN
encrypt passwords = yes
password server = fqdn_server1 fqdn_server2
idmap config *:backend = tdb
idmap config *:range = 70001-8
idmap config SHORTDOMAIN:backend = ad
idmap config SHORTDOMAIN:schema_mode = rfc2307
idmap config SHORTDOMAIN:range = 500-4
winbind nss info = rfc2307
winbind trusted domains only = no
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes
[test]
path = /dati/test
read only = no
and /etc/krb5.conf :
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm = FQDN_DOMAIN
dns_lookup_realm = true
dns_lookup_kdc = false
ticket_lifetime = 24h
forwardable = yes
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
[realms]
FQDN_DOMAIN = {
kdc = fqdn_server1
admin_server = fqdn_server1
default_domain = FQDN_DOMAIN
}
[domain_realm]
.arpa.veneto.it = FQDN_DOMAIN
arpa.veneto.it = FQDN_DOMAIN
/etc/nsswitch.conf
passwd: files winbind
group: files winbind
net ads join was fine ...
and here we are... wbinfo -u and -g are fine
but...wbinfo -i domain_username fails with this error :
failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for user domain_username
and getent passwd ...show me only local users...
This problem, it seem quite near at
http://www.mail-archive.com/[email protected]/msg127228.html
but I really have to switch this fileserver to DC conf ?! I'm working
with an idea of 2/3 DC controller (samba4 or w2kx), more other samba4
fileserver (as this)
I tried many times.. re-compiling etc... I'm bit confused... what am I
missing ?
thx in advance
Alessio Tomelleri
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
