10-24-2019
I tried these settings and disabled username map = /home/robot/smbmap in smb.conf but still when I try and access the samba share from Windows it will not allow me access to the directory. Logs look quite clean but no access to any share. It seems to find my windows account in Kerberos, authenticates OK but for some reason doesn't give me access to the share
So I re-enabled the username map and found myself a workaround for the time being.
I am using ldapsearch command to query the Windows Active Directory to extract all users that are a member of a specific Windows AD group and then writing the output after reformatting into /home/robot/smbmap using awk to create the correctly formatted permission file. So it writes in around 50 user accounts who are allowed access into the file. This allows access to the AIX shares fine as all of these users are mapped to the AIX root user account. Ill set it as a cron job to run once a week or month.
But frustrating that I have to do it this way. Ill see if I can post on the IBM forum as well. Thanks
9 More Discussions You Might Find Interesting
1. Linux
Dear All,
How to configure a Redhat 9 client to windows 2003 server. I have windows 2003 server which act has domain controller in my office. I have been asked to use redhat 9 has client. how to configure so that redhat 9 can authenticate with windows 2003 server .I have username created in... (0 Replies)
Discussion started by: solaris8in
0 Replies
2. AIX
Hi All,
I am basically new to this forum as well as AIX. To share some huge files between 2 servers I thought of creating a shared Directory in my AIX machine to access it in Solaris. I am very new to this AIX. Help me out how can u share a directory in AIX to access (mount) it on Solaris.
Hope... (2 Replies)
Discussion started by: babuchoudary_g
2 Replies
3. SCO
Hi all.
I'm having real trouble authenticating users against active directory for my SCO UnixWare 7.1.4 box running samba 3.0.24 (installed via Maintenance pack 4). I can list AD users/groups (after overcoming several hiccups) with wbinfo -g / wbinfo -u. I can use id to get a view an ad user ie:... (0 Replies)
Discussion started by: silk600
0 Replies
4. UNIX for Advanced & Expert Users
Hello, I asked this question in the AIX subforum but never received an answer, probably because the AIX forum is not that heavily trafficked. Anyway, here it is..
I have never had any issues like this when compiling applications from source. When I try to compile samba-3.5.0pre2, configure runs... (9 Replies)
Discussion started by: raidzero
9 Replies
5. UNIX for Dummies Questions & Answers
Hello,
I've configured an user authentication against Active Directory (Windows Server 2008 R2) on AIX V6 with LDAP. It works fine.
And here's my problem:
How can I control ldap user permissions on the local AIX machine?
E.g. an AD user should be able to write all files of local sys... (1 Reply)
Discussion started by: xia777
1 Replies
6. AIX
First, let me start off saying this is not spam. This is me trying to help out other AIX Admins with MS AD servers. If it is not applicable to you, someone else will find it useful.
As long as the "KDC" service is running on your AD server, these steps should work. There should be no... (3 Replies)
Discussion started by: kah00na
3 Replies
7. Solaris
Hi All, We are using solaris samba server for our company project to provide access to code to our development team.Recently our ICT has disabled wins service on Active directory due which user are not able to connect to samba share and they are getting error "No logon server available" as samba... (2 Replies)
Discussion started by: sahil_shine
2 Replies
8. AIX
Hi all,
I have installed samba 3.6.22 on AIX 7.1 and join a windows AD with success.
All seem to work fine, I have configured smb.conf, methods.cfg, kerberos, user .... the following command work fine wbinfo -u, wbinfo -g, wbinfo -i, wbinfo -s, wbinfo -S, lsuser, id...
The unique... (20 Replies)
Discussion started by: PhilippeA
20 Replies
9. AIX
Hi. Ive recently upgraded Samba on an AIX server to Samba 4. The aim is to allow a specific group of Windows AD users to access some AIX file shares (with no requirement to enter passwords) - using AD to authenticate.
Currently I have:
Samba 4 installed ( and 3 daemons running)
Installed... (1 Reply)
Discussion started by: linuxsnake
1 Replies
LEARN ABOUT DEBIAN
eurephiadm-users
eurephiadm users(7) eurephiadm users(7)
NAME
eurephiadm-users - User management module
SYNOPSIS
eurephiadm users --list|-l [-S|--sort <sort keys>]
eurephiadm users --show|-s [-i|--uid <user id>] [-u|--username <user name>] [-l|-|-lastlog] [-L|--lastlog-details] [-a|--attempts]
[-b|--blacklist]
eurephiadm users --activate|-a [-i|--uid <user id>] [-u|--username <user name>]
eurephiadm users --deactivate|-d [-i|--uid <user id>] [-u|--username <user name>]
eurephiadm users --add|-A [-u|--username <user name>] [-P|--password <plain text password>] [-C|--certid <certificate ID>] [-D|--digest
<certificate SHA1 digest>] [-c|--certfile <certificate file>] [-2|--pkcs12]
eurephiadm users --delete|-D [-i|--uid <user id>] [-u|--username <user name>]
eurephiadm users --password|-p [-i|--uid <user id>] [-u|--username <user name>]
eurephiadm users [-h|--help [<mode>]]
DESCRIPTION
eurephiadm users manages eurephia user accounts. It provides an interface for listing, creating new, modify and delete user accounts.
MODES
Available modes:
-l | --list
[-S|--sort <sort keys>]
List all user accounts. Providing -S|--sort and a sort key will define the sort order of the list. Valid sort keys are:
uid - user ID
username - User name belonging to the user account
activated - When the user account was activated
deactivated - When the user account was deactivated
lastaccess - When the user account was last used
-s | --show
[-i|--uid <user id>] [-u|--username <user name>] [-l|--lastlog] [-L|--lastlog-details] [-a|--attempts] [-b|--blacklist]
Show user account details. --uid or --username are required. The other arguments only defined which kind of information to show.
-a | --activate
[-i|--uid <user id>] [-u|--username <user name>]
Activate a user account. --uid or --username is required.
-d | --deactivate
[-i|--uid <user id>] [-u|--username <user name>]
Deactivate a user account. --uid or --username is required.
-A | --add
[-u|--username <user name>] [-P|--password <plain text password>] [-C|--certid <certificate ID>] [-D|--digest <certificate SHA1
digest>] [-c|--certfile <certificate file>] [-2|--pkcs12]
Add a new user account. --username is required. If you want to assign a password for the new user account via the command line,
provide the password with --password.
To associate this user account against an already regstistered certificate, it can be done by either refering to the certificate ID
in eurephia using --certid or providing the certificate SHA1 digest/fingerprint to --digest.
A brand new certificate can be registered and linked to the user account directly if you have access to the certificate file. The
file can be in either PEM/DER format or PKCS#12. Use --certfile to indicate the certificate file to extract the information from
and --pkcs12 if it is a PKCS#12 file.
-D | --delete
[-i|--uid <user id>] [-u|--username <user name>]
Delete a user account. --uid or --username is required.
-p | --password
[-i|--uid <user id>] [-u|--username <user name>]
Change password on a user account. --uid or --username is required.
-h | --help
[<mode>]
Show a help screen. Without any arguments, all modes are listed. Providing a mode will show more information about the chosen
mode.
SEE ALSO
eurephiadm(7), eurephiadm-certs(7)
AUTHOR
Copyright (C) 2008-2010 David Sommerseth <dazo@users.sourceforge.net>
David Sommerseth July 2010 eurephiadm users(7)