Re: [U2] NT UNIX

2004-11-04 Thread John Hester
Phil Walker wrote:
John,
What uid and gids do you get for the user? Is the information the same as
you would get normally.
e.g. the id command.
You define the user uid and gid range you want in samba's smb.conf file. 
 These are the recommended values:

idmap uid = 1-2
idmap gid = 1-2
They just need to be high enough to avoid conflicting with any uids and 
gids defined in /etc/passwd or /etc/group.  When winbind is running, the 
Active Directory group names are visible at the unix/linux level.  The 
id command for my login returns all the AD groups I'm a member of:

[EMAIL PROTECTED] jah]$ id
uid=1(JAH) gid=1(Domain Users) groups=1(Domain 
Users),10001(IS),10002(FileserverAdmin),10003(Goldmine),10005(Web 
Developers),10006(Simplify),10007(International Shipping),10008(Kool 
Tools),10009(Action Teams),10010(Accounting),10011(Citrix 
Remote),10012(Web),10013(Domain Admins)

If winbind is stopped for some reason, the existing numbering scheme 
will remain in effect.

-John
--
John Hester
System  Network Administrator
Momentum Group Inc.
(949) 833-8886 x623
http://memosamples.com
---
u2-users mailing list
[EMAIL PROTECTED]
To unsubscribe please visit http://listserver.u2ug.org/


[U2] NT UNIX

2004-11-03 Thread Weiss, Dan
What is the best solution for synching usernames and passwords together from NT to 
UNIX?
---
u2-users mailing list
[EMAIL PROTECTED]
To unsubscribe please visit http://listserver.u2ug.org/


RE: [U2] NT UNIX

2004-11-03 Thread Rod Hills
We are running hpux and are using pam (password authentication
module). It can validate against our Windows domain server (or ADS
server). 

The user logs in with their hpux login and the equivalent windows login
is looked up and the password entered is validated.

Works pretty well.

-- Rod Hills

-Original Message-
From: Weiss, Dan [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 03, 2004 11:06 AM
To: [EMAIL PROTECTED]
Subject: [U2] NT  UNIX

What is the best solution for synching usernames and passwords together
from NT to UNIX?
---
u2-users mailing list
[EMAIL PROTECTED]
To unsubscribe please visit http://listserver.u2ug.org/
---
u2-users mailing list
[EMAIL PROTECTED]
To unsubscribe please visit http://listserver.u2ug.org/


OT: Sync Passwd [WAS [U2] NT UNIX]

2004-11-03 Thread Shin.Tanaka
IMHO, Active Directory (AD) with Windows Service for UNIX 3.5 (SFU)
(http://www.microsoft.com/windows/sfu/).

http://support.microsoft.com/kb/324083
http://www.microsoft.com/technet/itsolutions/interop/sfu/psync.mspx

SFU 3.5 is free from MS.  I can type ls command at DOS shell.  Woohoo.



 







-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Weiss, Dan
Sent: Wednesday, November 03, 2004 2:06 PM
To: [EMAIL PROTECTED]
Subject: [U2] NT  UNIX

What is the best solution for synching usernames and passwords together
from NT to UNIX?
---
u2-users mailing list
[EMAIL PROTECTED]
To unsubscribe please visit http://listserver.u2ug.org/
---
u2-users mailing list
[EMAIL PROTECTED]
To unsubscribe please visit http://listserver.u2ug.org/


RE: [U2] NT UNIX

2004-11-03 Thread Phil Walker
John,

What uid and gids do you get for the user? Is the information the same as
you would get normally.

e.g. the id command.

Cheers,

Phil


Weiss, Dan wrote:
 What is the best solution for synching usernames and passwords together
from NT to UNIX?

We're about to migrate to UV on linux and will be using winbind.  This 
doesn't exactly synch usernames and passwords, but actually uses 
Windows Active Directory for user authentication on the linux box.  The 
users are never added to /etc/passwd.  It's been working flawlessly in 
our test environment.  You'll need to be running Active Directory with 
Windows 2000 or 2003 domain controllers to use it, and if you're running 
AD in native mode you'll need samba/winbind 3.0 or higher.

-John
---
u2-users mailing list
[EMAIL PROTECTED]
To unsubscribe please visit http://listserver.u2ug.org/