[Samba] Shares not accessible when using FQDN

Gaetan SLONGO gslongo at it-optics.com
Wed Aug 30 10:20:04 UTC 2017

Hi Rowland My test SMB have several test lines and is dirty, for sure not correct :-) 
Could you share your setup to achieve this ? 

Thank you ! 

----- Mail original -----

De: "Rowland Penny via samba" <samba at lists.samba.org> 
À: samba at lists.samba.org 
Envoyé: Mercredi 30 Août 2017 11:56:46 
Objet : Re: [Samba] Shares not accessible when using FQDN 

On Wed, 30 Aug 2017 11:25:04 +0200 (CEST) 
Gaetan SLONGO <gslongo at it-optics.com> wrote: 

> Rowland, 
> Yes, I mean uidNumber and gidNumber. 
> I'm aware I need to work with AD but at this time I need my unix IDs 
> (on NSS) to keep services working. Not only for files ownership, but 
> also for some other services. Yeah, that's complex... If I undestand 
> well, the best way to do is to join the server using "net ads join" 
> and use nss_winbind. This what I do but I only use the NSS LDAP 
> backend instead of NSS (to keep correct ownership). This will be 
> cleaned in the future (within next migration steps) but for now I 
> think I have no other choice beacause it seems I cannot obtain unix 
> IDs through Winbind on a domain member (or maybe I missed the 
> solution??). 

If you have users in AD and if you examine a typical users object in AD 
and have something like this: 

uidNumber: 10000 

Then yes, I would say that you have missed the solution, this is from a 
Unix domain member using the winbind 'ad' backend: 

getent passwd rowland 
rowland:*:10000:10000:Rowland Penny:/home/rowland:/bin/bash 
Notice this | 

I wonder where that comes from ? 
Oh I know 'uidNumber: 10000' ;-) 

I think your problem may be a very common one, the 'Domain Users' group 
in AD hasn't got a gidNumber attribute, if it has, then you haven't set 
smb.conf up correctly, in which case post your smb.conf 


To unsubscribe from this list go to the following URL and read the 
instructions: https://lists.samba.org/mailman/options/samba 


Gaëtan SLONGO | Head of Infrastructure Department 
Boulevard Initialis, 28 - 7000 Mons, BELGIUM 
Company : 	+32 (0)65 84 23 85 
Direct : 	+32 (0)65 32 85 88 
Fax : 	+32 (0)65 84 66 76 
Skype ID : 	gslongo.pro 
GPG Key : 	gslongo-gpg_key.asc 

- Please consider your environmental responsibility before printing this e-mail - 

More information about the samba mailing list