[Samba] Domain member server: user access

[L.P.H. van Belle]

Arg.. 

wbinfo --gid-info=100 
DC:  Confirmed, DOMAIN\Domain Users

Member: Fail. 
failed to call wbcGetgrgid: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for gid 100 

But both server show the same with  : 
wbinfo -n "NTDOM\domain users" 

So imho, report bug if Rowland can confirm this with a samba from source. 


Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Stefan G. Weichinger via samba
> Verzonden: maandag 25 september 2017 16:40
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Domain member server: user access
> 
> Am 2017-09-25 um 16:29 schrieb Rowland Penny via samba:
> 
> >> DC # samba-tool user create kamleitnerl Le26xxx 
> >> --nis-domain=arbeitsgruppe --unix-home=/home/kamleitnerl 
> >> --uid-number=10070 --login-shell=/bin/false --gid-number=100
> >>
> > 
> > Where did you get the GID '100' from ?
> > Is this the gidNumber for Domain Users ?
> 
> I think so:
> 
> # wbinfo --gid-info=100
> ARBEITSGRUPPE\domain users:x:100:
> 
> ?
> 
> > Can you please post the smb.conf from the DC and DM.
> 
> Sure. We had both in an earlier thread, btw, but here again:
> 
> DC:
> 
> # samba-tool testparm
> Press enter to see a dump of your service definitions
> 
> # Global parameters
> [global]
> 	netbios name = BACKUP
> 	realm = ARBEITSGRUPPE.MY.TLD
> 	workgroup = ARBEITSGRUPPE
> 	dns forwarder = 10.0.0.254
> 	server role = active directory domain controller
> 	idmap_ldb:use rfc2307 = yes
> 
> [netlogon]
> 	path = /var/lib/samba/sysvol/arbeitsgruppe.my.tld/scripts
> 	read only = No
> 
> [sysvol]
> 	path = /var/lib/samba/sysvol
> 	read only = No
> 
> DM:
> 
> # testparm -s
> Load smb config files from /etc/samba/smb.conf
> rlimit_max: increasing rlimit_max (1024) to minimum Windows 
> limit (16384) Processing section "[Daten]"
> Processing section "[Scans_Plotter]"
> Loaded services file OK.
> 
> Server role: ROLE_DOMAIN_MEMBER
> 
> # Global parameters
> [global]
> 	realm = ARBEITSGRUPPE.MY.TLD
> 	workgroup = ARBEITSGRUPPE
> 	log file = /var/log/samba/%m.log
> 	load printers = No
> 	printcap name = /dev/null
> 	security = ADS
> 	username map = /etc/samba/user.map
> 	winbind nss info = rfc2307
> 	winbind refresh tickets = Yes
> 	winbind use default domain = Yes
> 	idmap config arbeitsgruppe:schema_mode = rfc2307
> 	idmap config arbeitsgruppe:range = 10000-9999999
> 	idmap config arbeitsgruppe:backend = ad
> 	idmap config * : range = 2000-2999
> 	idmap config * : backend = tdb
> 
> ...
> 
> thx, Stefan
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>