AIX 7.1 - Samba 4 File Shares and Integration with Active Directory Issues


 
Thread Tools Search this Thread
Operating Systems AIX AIX 7.1 - Samba 4 File Shares and Integration with Active Directory Issues
# 1  
Old 10-22-2019
AIX 7.1 - Samba 4 File Shares and Integration with Active Directory Issues

Hi. Ive recently upgraded Samba on an AIX server to Samba 4. The aim is to allow a specific group of Windows AD users to access some AIX file shares (with no requirement to enter passwords) - using AD to authenticate.

Currently I have:
  • Samba 4 installed ( and 3 daemons running)
  • Installed Kerberos with windbind in config

Joined domain using kinit and net join using regular domain username.

Code:
wbinfo -u  - lists all users in Windows AD
wbinfo -g  - lists all groups in Windows AD
wbinfo -n "ad group" - gives me an aix uid

I had initial problems when trying to access my AIX shares with SID mapping errors in the samba logs.

To resolve this I created a user mapping file called users.map as follows
root = *

Then added this line to smb.conf
Code:
username map = /etc/users.map

Now any AD Windows user can access my AIX file shares without needing to enter a password. I can change this map file to a single domain user or list of specific users to lock it down but this isnt what I need. I want to only allow one specific AD group to access this fileshare.

If people join or leave the company Id have to keep editing this file..

How do I go about getting this working with access by one AD group only?. If I remove the username map entry I cant access the file shares at all and prompted for login/pass. I saw references to valid users = @"DOMAIN\AD Group" but this wont allow access. Its as if samba is looking for a local user called this on the AIX box not to check AD for it as I expected..

Is this linked to config changes in
etc/security/user for WINBIND or are these only needed for ssh access to AIX with AD logins?

Or could this be down to not using a domain admin account when I joined the AD domain using kinit and net join?

Im thinking of installing ldap if I cant get this working with winbind but surely its overkill.. Any help is appreciated with this final hurdle..

Last edited by linuxsnake; 10-23-2019 at 02:31 AM..
# 2  
Old 10-24-2019
Is this a near duplicate post of this one?

Samba 3.6 on AIX 7.1 - Windows 10 Access to AIX file shares using Active Directory authentication

I assume so, and so I am closing this discussion. Please continue in the discussion above.

Thanks.
Login or Register to Ask a Question

Previous Thread | Next Thread

6 More Discussions You Might Find Interesting

1. AIX

Samba 3.6 on AIX 7.1 - Windows 10 Access to AIX file shares using Active Directory authentication

I am running AIX 7.1 and currently we have samba 3.6.25 installed on the server. As it stands some AIX folders are shared that can be accessed by certain Windows users. The problem is that since Windows 10 the guest feature no longer works so users have to manually type in their Windows login/pwd... (14 Replies)
Discussion started by: linuxsnake
14 Replies

2. UNIX for Beginners Questions & Answers

SAMBA as Active Directory Domin Controller

Could you please let me know, how to install and configure samba as domain controller like Active Directory (AD Server in Windows Server)? And how to configure the Window clients and Linux clients through Samba AD Domain Controller. Note: OS is Ubuntu or CentOS. (8 Replies)
Discussion started by: engineer2002
8 Replies

3. Red Hat

How can I add to Active Directory with Samba Linux?

hi How do I update this file /etc/samba/smb.conf Linux be added to Active Directory thanks (0 Replies)
Discussion started by: mnnn
0 Replies

4. HP-UX

HP-UX SSH and Active Directory Kerberos with Samba

The situation: i have a AD server with samba4,all clients ssh-kerberos works fine,except hpux :p wich works only for few days..then i must re-export(sic!) the keys with samba-tool domain exportkeytab 11.keytab --principal=host/hpux.fqdn Why after few days ssh return error "server not found... (1 Reply)
Discussion started by: Linusolaradm1
1 Replies

5. UNIX for Advanced & Expert Users

Compiling Samba from Source on AIX, Active Directory, LDAP, Kerberos

Hello, I asked this question in the AIX subforum but never received an answer, probably because the AIX forum is not that heavily trafficked. Anyway, here it is.. I have never had any issues like this when compiling applications from source. When I try to compile samba-3.5.0pre2, configure runs... (9 Replies)
Discussion started by: raidzero
9 Replies

6. SCO

Authentication problems with Active Directory/Samba/Winbind/Pam

Hi all. I'm having real trouble authenticating users against active directory for my SCO UnixWare 7.1.4 box running samba 3.0.24 (installed via Maintenance pack 4). I can list AD users/groups (after overcoming several hiccups) with wbinfo -g / wbinfo -u. I can use id to get a view an ad user ie:... (0 Replies)
Discussion started by: silk600
0 Replies
Login or Register to Ask a Question