Samba - Revision history

Leo: Added categories and navbox

2021-12-30T01:11:54Z

Added categories and navbox

← Older revision		Revision as of 01:11, 30 December 2021
Line 141:		Line 141:

	*Password sync: https://www.suse.com/support/kb/doc/?id=000016742		*Password sync: https://www.suse.com/support/kb/doc/?id=000016742

			{{Navbox Linux}}
			[[Category:Linux]]
			[[Category:LinuxUtilities]]

Leo at 06:45, 22 July 2021

2021-07-22T06:45:38Z

← Older revision		Revision as of 06:45, 22 July 2021
Line 83:		Line 83:
	\| lang = terminal		\| lang = terminal
	}}		}}
	Start samba. ~~Confirm whether~~ the ~~samba server has~~ the ~~appropriate domain~~ SID. ~~If it isn~~'~~t defined~~, set it.		Start samba. Check the local and domain SID. They should both be set to the SID of the newly created groups that smbldap populated. For example, if Domain Users has a SID of <code>'S-1-5-21-2049073866-1371207509-1214748462-513</code>, then the local and domain SID on the samba server should be set to <code>S-1-5-21-2049073866-1371207509-1214748462</code> (without the final -XXX value).
	{{Highlight		{{Highlight
	\| code = ## Start samba		\| code = ## Start samba
Line 94:		Line 94:

	## Find the domain's SID by looking at the SID value in the LDAP server.		## Find the domain's SID by looking at the SID value in the LDAP server.
			# net setlocalsid S-1-5-21-2049073866-1371207509-1214748462
	# net setdomainsid S-1-5-21-2049073866-1371207509-1214748462		# net setdomainsid S-1-5-21-2049073866-1371207509-1214748462
	\| lang = terminal		\| lang = terminal
	}}		}}
			If the local SID can't be changed, change it manually in the LDAP server.

	At this point, the LDAP users you added via <code>smbldap-useradd</code> should be able to authenticate to this samba server.		At this point, the LDAP users you added via <code>smbldap-useradd</code> should be able to authenticate to this samba server.

Line 133:		Line 136:
	# net setdomainsid S-1-5-21-2049073866-1371207509-1214748462		# net setdomainsid S-1-5-21-2049073866-1371207509-1214748462
	\| lang = terminal		\| lang = terminal
	}}		}}You may also need to set the local SID to match. If this is required, you can use <code>net setlocalsid</code> or manually change it in the computer's object in the LDAP directory. In my experience so far, I had to manually change it in LDAP before auth works properly.

	== See Also ==		==See Also==

	* Password sync: https://www.suse.com/support/kb/doc/?id=000016742		*Password sync: https://www.suse.com/support/kb/doc/?id=000016742

Leo at 05:27, 22 July 2021

2021-07-22T05:27:23Z

← Older revision		Revision as of 05:27, 22 July 2021
Line 2:		Line 2:
	==Tasks==		==Tasks==

	=== Authenticating Samba against LDAP ===		===Authenticating Samba against LDAP===
	The following steps will guide you on how to set up Samba to authenticate against a clean install LDAP server. I will be using OpenLDAP from the osixia/openldap docker image.		The following steps will guide you on how to set up Samba to authenticate against a clean install LDAP server. I will be using OpenLDAP from the osixia/openldap docker image.

Line 134:		Line 134:
	\| lang = terminal		\| lang = terminal
	}}		}}

			== See Also ==

			* Password sync: https://www.suse.com/support/kb/doc/?id=000016742

Leo at 05:15, 22 July 2021

2021-07-22T05:15:36Z

Show changes

Leo at 00:41, 22 July 2021

2021-07-22T00:41:22Z

@@ Line 1: / Line 1: @@
-== Tasks ==
+=== NT_STATUS_INVALID_SID error from check_sam_security ===
-=== Verifying Configuration ===
+{{Highlight
-{{code|testparm}} to test the {{code|smb.conf}} file
+| code = [2021/07/20 11:39:01.893994,  0] ../../source3/auth/check_samsec.c:493(check_sam_security)

Leo: Created page with " == Tasks == === Verifying Configuration === {{code|testparm}} to test the {{code|smb.conf}} file"

2021-01-14T06:24:18Z

Created page with " == Tasks == === Verifying Configuration === {{code|testparm}} to test the {{code|smb.conf}} file"

New page

== Tasks ==
=== Verifying Configuration ===
{{code|testparm}} to test the {{code|smb.conf}} file