Sponsored Content
Operating Systems AIX Samba 3.6 on AIX 7.1 - Windows 10 Access to AIX file shares using Active Directory authentication Post 303039944 by linuxsnake on Friday 18th of October 2019 11:14:58 AM
Old 10-18-2019
UPDATE: I now finally have Samba Shares working on AIX 7.1.... However this was only after using a smbmap user list (To map individual Windows user to the root account on my AIX box)

For the Windows to Unix Mapping I added this to samba.conf
Code:
username map = /home/robot/smbmap

Inside smbmap we have this:
Quote:
root = ROBOT\joe.bloggs
The root user is then defined in the file share in smb.conf as follows:
Code:
[shared]
path = /tmp
browseable = yes
read only = No
writable = yes
valid users = root
public = yes
force user = root
force group = system

Now when joe.bloggs opens the AIX file share from Windows he is mapped to the local root user and has access to the file share.

Now the only issue I have is that I don't want to have to add 10 + separate Windows users manually into the smbmap file. Currently I have tested with one account joe.bloggs.
Is there a way to configure samba so that if a Windows user is part of a specific windows group such as "domain admins" that they will automatically be mapped to the local AIX root user?

I'm sure there is an easier way than manually adding 10 + Windows AD usernames to the smbmap file manually.......

I also have an issue with wbinfo. I can run wbinfo -u and wbinfo -g commands fine and they return a list of all windows domain users and groups.
But if I try and query a list of users in a specific Windows group using wbinfo --group-info="domain users" this fails.

Code:
failed to call wbcGetgrnam: WBC_ERR_DOMAIN_NOT_FOUND
Could not get info for group domain users


Last edited by linuxsnake; 10-21-2019 at 05:02 AM..
 

9 More Discussions You Might Find Interesting

1. Linux

How to Unite Redhat 9 Linux with Windows 2003 Active Directory authentication

Dear All, How to configure a Redhat 9 client to windows 2003 server. I have windows 2003 server which act has domain controller in my office. I have been asked to use redhat 9 has client. how to configure so that redhat 9 can authenticate with windows 2003 server .I have username created in... (0 Replies)
Discussion started by: solaris8in
0 Replies

2. AIX

How to share a directory in AIX to access from Solaris and windows?

Hi All, I am basically new to this forum as well as AIX. To share some huge files between 2 servers I thought of creating a shared Directory in my AIX machine to access it in Solaris. I am very new to this AIX. Help me out how can u share a directory in AIX to access (mount) it on Solaris. Hope... (2 Replies)
Discussion started by: babuchoudary_g
2 Replies

3. SCO

Authentication problems with Active Directory/Samba/Winbind/Pam

Hi all. I'm having real trouble authenticating users against active directory for my SCO UnixWare 7.1.4 box running samba 3.0.24 (installed via Maintenance pack 4). I can list AD users/groups (after overcoming several hiccups) with wbinfo -g / wbinfo -u. I can use id to get a view an ad user ie:... (0 Replies)
Discussion started by: silk600
0 Replies

4. UNIX for Advanced & Expert Users

Compiling Samba from Source on AIX, Active Directory, LDAP, Kerberos

Hello, I asked this question in the AIX subforum but never received an answer, probably because the AIX forum is not that heavily trafficked. Anyway, here it is.. I have never had any issues like this when compiling applications from source. When I try to compile samba-3.5.0pre2, configure runs... (9 Replies)
Discussion started by: raidzero
9 Replies

5. UNIX for Dummies Questions & Answers

control permissions for Active Directory users on AIX

Hello, I've configured an user authentication against Active Directory (Windows Server 2008 R2) on AIX V6 with LDAP. It works fine. And here's my problem: How can I control ldap user permissions on the local AIX machine? E.g. an AD user should be able to write all files of local sys... (1 Reply)
Discussion started by: xia777
1 Replies

6. AIX

Authenticate AIX users from MS Active Directory

First, let me start off saying this is not spam. This is me trying to help out other AIX Admins with MS AD servers. If it is not applicable to you, someone else will find it useful. As long as the "KDC" service is running on your AD server, these steps should work. There should be no... (3 Replies)
Discussion started by: kah00na
3 Replies

7. Solaris

solaris samba configuration without wins service from authentication window server/Active directory

Hi All, We are using solaris samba server for our company project to provide access to code to our development team.Recently our ICT has disabled wins service on Active directory due which user are not able to connect to samba share and they are getting error "No logon server available" as samba... (2 Replies)
Discussion started by: sahil_shine
2 Replies

8. AIX

Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

Hi all, I have installed samba 3.6.22 on AIX 7.1 and join a windows AD with success. All seem to work fine, I have configured smb.conf, methods.cfg, kerberos, user .... the following command work fine wbinfo -u, wbinfo -g, wbinfo -i, wbinfo -s, wbinfo -S, lsuser, id... The unique... (20 Replies)
Discussion started by: PhilippeA
20 Replies

9. AIX

AIX 7.1 - Samba 4 File Shares and Integration with Active Directory Issues

Hi. Ive recently upgraded Samba on an AIX server to Samba 4. The aim is to allow a specific group of Windows AD users to access some AIX file shares (with no requirement to enter passwords) - using AD to authenticate. Currently I have: Samba 4 installed ( and 3 daemons running) Installed... (1 Reply)
Discussion started by: linuxsnake
1 Replies
SAMBA(7)							    Miscellanea 							  SAMBA(7)

NAME
samba - A Windows AD and SMB/CIFS fileserver for UNIX SYNOPSIS
samba DESCRIPTION
The Samba software suite is a collection of programs that implements the Server Message Block (commonly abbreviated as SMB) protocol for UNIX systems and provides Active Directory services. This protocol is sometimes also referred to as the Common Internet File System (CIFS). For a more thorough description, see http://www.ubiqx.org/cifs/. Samba also implements the NetBIOS protocol in nmbd. samba(8) The samba daemon provides the Active Directory services and file and print services to SMB clients. The configuration file for this daemon is described in smb.conf(5). smbd(8) The smbd daemon provides the file and print services to SMB clients, such as Windows 95/98, Windows NT, Windows for Workgroups or LanManager. The configuration file for this daemon is described in smb.conf(5). nmbd(8) The nmbd daemon provides NetBIOS nameservice and browsing support. The configuration file for this daemon is described in smb.conf(5). winbindd(8) winbindd is a daemon that is used for integrating authentication and the user database into unix. smbclient(1) The smbclient program implements a simple ftp-like client. This is useful for accessing SMB shares on other compatible servers (such as Windows NT), and can also be used to allow a UNIX box to print to a printer attached to any SMB server (such as a PC running Windows NT). samba-tool(8) The samba-tool is the main Samba Administration tool regarding Active Directory services. testparm(1) The testparm utility is a simple syntax checker for Samba's smb.conf(5) configuration file. smbstatus(1) The smbstatus tool provides access to information about the current connections to smbd. nmblookup(1) The nmblookup tools allows NetBIOS name queries to be made from a UNIX host. smbpasswd(8) The smbpasswd command is a tool for changing LanMan and Windows NT password hashes on Samba and Windows NT servers. smbcacls(1) The smbcacls command is a tool to set ACL's on remote CIFS servers. smbtree(1) The smbtree command is a text-based network neighborhood tool. smbtar(1) The smbtar can make backups of data on CIFS/SMB servers. smbspool(8) smbspool is a helper utility for printing on printers connected to CIFS servers. smbcontrol(1) smbcontrol is a utility that can change the behaviour of running smbd, nmbd and winbindd daemons. rpcclient(1) rpcclient is a utility that can be used to execute RPC commands on remote CIFS servers. pdbedit(8) The pdbedit command can be used to maintain the local user database on a samba server. findsmb(1) The findsmb command can be used to find SMB servers on the local network. net(8) The net command is supposed to work similar to the DOS/Windows NET.EXE command. wbinfo(1) wbinfo is a utility that retrieves and stores information related to winbind. profiles(1) profiles is a command-line utility that can be used to replace all occurrences of a certain SID with another SID. log2pcap(1) log2pcap is a utility for generating pcap trace files from Samba log files. vfstest(1) vfstest is a utility that can be used to test vfs modules. ntlm_auth(1) ntlm_auth is a helper-utility for external programs wanting to do NTLM-authentication. smbcquotas(1) smbcquotas is a tool that can set remote QUOTA's on server with NTFS 5. COMPONENTS
The Samba suite is made up of several components. Each component is described in a separate manual page. It is strongly recommended that you read the documentation that comes with Samba and the manual pages of those components that you use. If the manual pages and documents aren't clear enough then please visit http://devel.samba.org for information on how to file a bug report or submit a patch. If you require help, visit the Samba webpage at http://www.samba.org/ and explore the many option available to you. AVAILABILITY
The Samba software suite is licensed under the GNU Public License(GPL). A copy of that license should have come with the package in the file COPYING. You are encouraged to distribute copies of the Samba suite, but please obey the terms of this license. The latest version of the Samba suite can be obtained via anonymous ftp from samba.org in the directory pub/samba/. It is also available on several mirror sites worldwide. You may also find useful information about Samba on the newsgroup comp.protocol.smb and the Samba mailing list. Details on how to join the mailing list are given in the README file that comes with Samba. If you have access to a WWW viewer (such as Mozilla or Konqueror) then you will also find lots of useful information, including back issues of the Samba mailing list, at http://lists.samba.org. VERSION
This man page is correct for version 4 of the Samba suite. CONTRIBUTIONS
If you wish to contribute to the Samba project, then I suggest you join the Samba mailing list at http://lists.samba.org. If you have patches to submit, visit http://devel.samba.org/ for information on how to do it properly. We prefer patches in git format-patch format. CONTRIBUTORS
Contributors to the project are now too numerous to mention here but all deserve the thanks of all Samba users. To see a full list, look at the change-log in the source package for the pre-CVS changes and at http://git.samba.org/ for the contributors to Samba post-GIT. GIT is the Open Source source code control system used by the Samba Team to develop Samba. The project would have been unmanageable without it. AUTHOR
The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 was done by Alexander Bokovoy. Samba 4.0 06/17/2014 SAMBA(7)
All times are GMT -4. The time now is 12:22 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy