Re: [Samba] wbinfo -i domain_username issue
On 09/10/2013 15:06, steve wrote: > On Wed, 2013-10-09 at 10:18 +0200, Alessio Tomelleri wrote: >> Thx Steve for your quick replay. >> >> ...and sorry for my late, but I was away in last two days, anyway here >> I'am... >> >> For first, nscd is not running anywhere... >> >> Secondly, I have to admit that perhaps (almost sure), I have >> misunderstood something about samba4/winbind, and these two last day had >> been useful to clarify to me... >> >> Yes, that configuration implies what you wrote... actually AD relies to >> a 2k3 servers that have not any uidNumber and/or gidNumber conf... I >> think I have to relies to our old openldap or switch to config this >> "member server" as samba4 dc integrated in domain >> >> Thx, Alessio Tomelleri > Hi > 2003 didn't have either rfc2307 nor sfu, so if you wish to keep your > idmap in ad then you'll need to extend the schema to sfu. The other > alternative (which I hate) is the rid backend: > > idmap config *:backend = tdb > idmap config *:range = 70001-8 > idmap config SHORTDOMAIN:backend = rid > idmap config SHORTDOMAIN:range = 500-4 > > It maps the uid:gid pair depending on the RID and stores the values in a > second db. > HTH > Steve > > Hi Steve, thanks for the help and point me this last one... Alessio -- Alessio Tomelleri Ufficio Tecnico ARPAV - Dipartimento Provinciale di Belluno v. Tomea, 5 - Belluno (BL), 32100 tel. +390437935516 fax. +39043730340 email: [email protected] web : http://www.arpa.veneto.it PGP Id chiave: 0x85FDC3F2 Registered Linux user: nr.496721 --- Quanto sai non deve impedirti di sapere quanto dovresti. C.D. In risposta alla domanda: "Qual'è il gioco più grande, gli scacchi o la dama ?", in tutta franchezza devo privilegiare gli scacchi (W. Banks, Campione del mondo di dama alla cieca). -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] wbinfo -i domain_username issue
On Wed, 2013-10-09 at 10:18 +0200, Alessio Tomelleri wrote: > > Thx Steve for your quick replay. > > ...and sorry for my late, but I was away in last two days, anyway here > I'am... > > For first, nscd is not running anywhere... > > Secondly, I have to admit that perhaps (almost sure), I have > misunderstood something about samba4/winbind, and these two last day had > been useful to clarify to me... > > Yes, that configuration implies what you wrote... actually AD relies to > a 2k3 servers that have not any uidNumber and/or gidNumber conf... I > think I have to relies to our old openldap or switch to config this > "member server" as samba4 dc integrated in domain > > Thx, Alessio Tomelleri Hi 2003 didn't have either rfc2307 nor sfu, so if you wish to keep your idmap in ad then you'll need to extend the schema to sfu. The other alternative (which I hate) is the rid backend: idmap config *:backend = tdb idmap config *:range = 70001-8 idmap config SHORTDOMAIN:backend = rid idmap config SHORTDOMAIN:range = 500-4 It maps the uid:gid pair depending on the RID and stores the values in a second db. HTH Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] wbinfo -i domain_username issue
Thx Steve for your quick replay. ...and sorry for my late, but I was away in last two days, anyway here I'am... For first, nscd is not running anywhere... Secondly, I have to admit that perhaps (almost sure), I have misunderstood something about samba4/winbind, and these two last day had been useful to clarify to me... Yes, that configuration implies what you wrote... actually AD relies to a 2k3 servers that have not any uidNumber and/or gidNumber conf... I think I have to relies to our old openldap or switch to config this "member server" as samba4 dc integrated in domain Thx, Alessio Tomelleri On 07/10/2013 18:36, steve wrote: > On Mon, 2013-10-07 at 18:07 +0200, Alessio Tomelleri wrote: >>idmap config *:backend = tdb >>idmap config *:range = 70001-8 >>idmap config SHORTDOMAIN:backend = ad >>idmap config SHORTDOMAIN:schema_mode = rfc2307 >>idmap config SHORTDOMAIN:range = 500-4 >> >>winbind nss info = rfc2307 > Hi > This configuration suggests that your rfc2307 attributes are stored in > AD. Are you sure your users and groups have uidNumber and/or gidNumber > attributes set under their respective DN's? If not, then winbind has > nothing to retrieve for the getent command. Oh, and kill any nscd for > the moment. > HTH > Steve > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] wbinfo -i domain_username issue
On Mon, 2013-10-07 at 18:07 +0200, Alessio Tomelleri wrote: > > >idmap config *:backend = tdb >idmap config *:range = 70001-8 >idmap config SHORTDOMAIN:backend = ad >idmap config SHORTDOMAIN:schema_mode = rfc2307 >idmap config SHORTDOMAIN:range = 500-4 > >winbind nss info = rfc2307 Hi This configuration suggests that your rfc2307 attributes are stored in AD. Are you sure your users and groups have uidNumber and/or gidNumber attributes set under their respective DN's? If not, then winbind has nothing to retrieve for the getent command. Oh, and kill any nscd for the moment. HTH Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
