Unfortunately the plugin uses quit old technology. I prefer this. https://forum.openmediavault.o…Directory-LDAP-Revisited/
I wonder why they update the plugin then? I do not have the rights to enter the domain, issued credentials from ldap, they work exactly on printers, but there is no way to configure it.
Hi, can you tell me how to configure LDAP PLUGIN to work with AD Windows?
it seems to have entered everything, but does not work, users are not visible.
For whom turned out to influence ldap client for the receipt of list of users from Windows AD?
t version of OMV are you using? The plug in is old now. Take a look at these threads for were OMV might be going. It would be best to test them in a clean vm.
https://forum.openmediavault.o…Directory-LDAP-Revisited/
версия OMV 3.0.86, версия ldap плагина 3.1.6
Кто нибудь пробовал данный плагин в работе? не могу забрать пользователей с windows ad через него
Alles anzeigenIf you disable in /etc/nsswitch.conf winbind for passwd and restart winbind then www interface will work but without AD users. Only local.
I narrow this to that getent shadow not listing ad users but getent passwd list ad users. www interface have problem with this because using both lists.
Second day searching web for this and get nothing. I cannot get getent shadow to work. I think that this is samba/winbind bug.
I also try on second omv to not use winbind and get ad users from sssd and realmd. And in this solution i have same thing. After add to sssd.conf enumerate = true i have ad users in getent passwd and no ad users in getent shadow
Manual for reamld and sssd from here:
http://www.alandmoore.com/blog…an-8-to-active-directory/
Maybe the whole situation have source like this
https://bugzilla.redhat.com/show_bug.cgi?id=751291
a bug in version 3.x, set omv 2.1 and then everything was got without any search for solutions......
only enrage the old accounts in the ACL
after instalations sudo aptitude install libpam-krb5 libpam-winbind libnss-winbind everything brakes
more precisely later instaling libnss-winbind and reboot
after instalations sudo aptitude install libpam-krb5 libpam-winbind libnss-winbind everything brakes
Alles anzeigenI have exact same problem
echo $?
2
running getent shadow returns only local users getent passwd and groups works
fractal90: run echo after export
For my setup problem is on account gosc. This is the same account in russian AD гость it means guest
root@share:~# export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin; export LANG=C; getent shadow 'гость' 2>
> ^C
root@share:~# echo $?
130
Please execute
Bash# export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin; export LANG=C; getent shadow 'гость' 2>&1' # echo $?
root@share:~# echo $?
0
root@share:~# export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin; export LANG=C; getent shadow 'гость' 2>&1'
>
getent passwd
conference:*:10155:10003:Конференц зал:/home/DC-TREND/conference:/bin/false
gp-5:*:10217:10003:ГП-5:/home/DC-TREND/krk-gp-5:/bin/false
all ok
webgui error...(
This is more interesting.
net user Гость
Имя пользователя Гость
Полное имя
Комментарий Встроенная учетная запись для доступа гостей к компьютеру или домену
Комментарий пользователя
Код страны или региона 000 (Стандартный системный)
Учетная запись активна No
Учетная запись просрочена Никогда
Последний пароль задан 04.11.2016 20:44:07
Действие пароля завершается Никогда
Пароль допускает изменение 05.11.2016 20:44:07
Требуется пароль No
Пользователь может изменить пароль No
Разрешенные рабочие станции Все
Сценарий входа
Конфигурация пользователя
Основной каталог
Последний вход Никогда
Разрешенные часы входа Все
Членство в локальных группах *Гости
Членство в глобальных группах *Гости домена
Команда выполнена успешно.
Help me.
I introduced in the domain http://forum.openmediavault.or…-Directory-Domain-V2-pdf/
wbinfo -u = OK
wbinfo -g = OK
error users WebGUI
Ошибка #0:
exception 'OMV\ExecException' with message 'Failed to execute command 'export PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin; export LANG=C; getent shadow 'гость' 2>&1' with exit code '2': ' in /usr/share/php/openmediavault/system/process.inc:175
Stack trace:
#0 /usr/share/php/openmediavault/system/user.inc(74): OMV\System\Process->execute(Array)
#1 /usr/share/php/openmediavault/system/user.inc(229): OMV\System\User->getData('shadow')
#2 /usr/share/openmediavault/engined/rpc/usermgmt.inc(118): OMV\System\User->getLastChanged()
#3 /usr/share/openmediavault/engined/rpc/usermgmt.inc(145): OMVRpcServiceUserMgmt->getUserInfo('\xD0\xB3\xD0\xBE\xD1\x81\xD1\x82\xD1\x8C')
#4 /usr/share/openmediavault/engined/rpc/usermgmt.inc(335): OMVRpcServiceUserMgmt->enumerateUsersByType('normal')
#5 [internal function]: OMVRpcServiceUserMgmt->getUserList(Array, Array)
#6 /usr/share/php/openmediavault/rpc/serviceabstract.inc(124): call_user_func_array(Array, Array)
#7 /usr/share/php/openmediavault/rpc/rpc.inc(84): OMV\Rpc\ServiceAbstract->callMethod('getUserList', Array, Array)
#8 /usr/sbin/omv-engined(516): OMV\Rpc\Rpc::call('UserMgmt', 'getUserList', Array, Array, 1)
#9 {main}
smb.conf
[global]
workgroup = DC-TREND.LOCAL
server string = %h server
dns proxy = no
log level = 3
syslog = 3
log file = /var/log/samba/log.%m
max log size = 1000
syslog only = yes
panic action = /usr/share/samba/panic-action %d
encrypt passwords = true
passdb backend = tdbsam
obey pam restrictions = yes
unix password sync = no
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
pam password change = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY
guest account = nobody
load printers = no
disable spoolss = yes
printing = bsd
printcap name = /dev/null
unix extensions = yes
wide links = no
create mask = 0777
directory mask = 0777
map to guest = Bad User
use sendfile = yes
aio read size = 16384
aio write size = 16384
null passwords = yes
local master = yes
time server = no
wins support = no
realm = DC-TREND.LOCAL
security = ADS
domain master = no
preferred master = no
os level = 0
domain logons = no
show add printer wizard = no
disable spoolss = yes
idmap config * : range = 10000-20000
idmap config * : backend = tdb
winbind enum groups = yes
winbind enum users = yes
winbind use default domain = yes
winbind refresh tickets = yeskrb.conf
[libdefaults]
default_realm = DC-TREND.LOCAL
dns_lookup_realm = true
dns_lookup_kdc = true
# The following krb5.conf variables are only for MIT Kerberos.
krb4_config = /etc/krb.conf
krb4_realms = /etc/krb.realms
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true
# The following encryption type specification will be used by MIT Kerberos
# if uncommented. In general, the defaults in the MIT Kerberos code are
# correct and overriding these specifications only serves to disable new
# encryption types as they are added, creating interoperability problems.
#
# Thie only time when you might need to uncomment these lines and change
# the enctypes is if you have local software that will break on ticket
# caches containing ticket encryption types it doesn't know about (such as
# old versions of Sun Java).
# default_tgs_enctypes = des3-hmac-sha1
# default_tkt_enctypes = des3-hmac-sha1
# permitted_enctypes = des3-hmac-sha1
# The following libdefaults parameters are only for Heimdal Kerberos.
v4_instance_resolve = false
v4_name_convert = {
host = {
rcmd = host
ftp = ftp
}
plain = {
something = something-else
}
}
fcc-mit-ticketflags = true
[realms]
dc-trend.local = {
kdc = srv-dc02
kdc = srv-dc01
#kdc = kerberos-2.mit.edu:88
admin_server = srv-dc02
default_domain = DC-TREND.LOCAL
}
[domain_realm]
.dc-trend.local = DC-TREND.LOCAL
dc-trend.local = DC-TREND.LOCAL
[login]
krb4_convert = false
krb4_get_tickets = false
#nsswitch.conf
Source Code
# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc "Name Service Switch"' for information about this file.
passwd: compat winbind
group: compat winbind
shadow: compat
hosts: files dns wins
bootparams: files
ethers: files
netmasks: files
networks: files
protocols: files
rpc: files
services: files
netgroup: files
publickey: nisplus
automount: files
aliases: filesIf you get the error the next time please post the content of file mentioned in the error message. E.g. /tmp/setfaclJTBVSn as seen above.
Many files with the text
{
"pid": 2685,
"running": false,
"outputfilename": "\/tmp\/bgoutputQO2hOd",
"result": "",
"error": {
"code": 4000,
"message": "Failed to execute command 'export LANG=C; setfacl --recursive -M '\/tmp\/setfaclFJPrud' -- '\/media\/f99763c5-c313-4e1a-81f2-e07ec334b39e\/NAS\/\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f' 2>&1': setfacl: Invalid argument in line 233 of file \/tmp\/setfaclFJPrud",
"trace": "exception 'OMVException' with message 'Failed to execute command 'export LANG=C; setfacl --recursive -M '\/tmp\/setfaclFJPrud' -- '\/media\/f99763c5-c313-4e1a-81f2-e07ec334b39e\/NAS\/\u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u044f' 2>&1': setfacl: Invalid argument in line 233 of file \/tmp\/setfaclFJPrud' in \/usr\/share\/openmediavault\/engined\/rpc\/sharemgmt.inc:1220\nStack trace:\n#0 [internal function]: OMVRpcServiceShareMgmt->setFileACL(Array, Array)\n#1 \/usr\/share\/php\/openmediavault\/rpcservice.inc(125): call_user_func_array(Array, Array)\n#2 \/usr\/share\/php\/openmediavault\/rpc.inc(79): OMVRpcServiceAbstract->callMethod('setFileACL', Array, Array)\n#3 \/usr\/sbin\/omv-engined(500): OMVRpc::exec('ShareMgmt', 'setFileACL', Array, Array, 1)\n#4 {main}"
}
}
Failed to execute command 'export LANG=C; setfacl -M '/tmp/setfaclJTBVSn' -- '/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS/Техническая дирекция НСК' 2>&1': setfacl: Invalid argument in line 227 of file /tmp/setfaclJTBVSn
Detail:
Error #4000:exception 'OMVException' with message 'Failed to execute command 'export LANG=C; setfacl -M '/tmp/setfaclJTBVSn' -- '/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS/Техническая дирекция НСК' 2>&1': setfacl: Invalid argument in line 227 of file /tmp/setfaclJTBVSn' in /usr/share/openmediavault/engined/rpc/sharemgmt.inc:1220Stack trace:#0 [internal function]: OMVRpcServiceShareMgmt->setFileACL(Array, Array)#1 /usr/share/php/openmediavault/rpcservice.inc(125): call_user_func_array(Array, Array)#2 /usr/share/php/openmediavault/rpc.inc(79): OMVRpcServiceAbstract->callMethod('setFileACL', Array, Array)#3 /usr/sbin/omv-engined(500): OMVRpc::exec('ShareMgmt', 'setFileACL', Array, Array, 1)#4 {main}
But in CLI all "OK"
root@nas-office-nsk:/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS# setfacl -R -m u:s.chikina:rwx Отдел\ кадров/
root@nas-office-nsk:/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS#What are these user?
In CLI
root@nas-office-nsk:/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS# setfacl -R -m u:s.chikina:rwx Отдел\ кадров/
root@nas-office-nsk:/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS#
SUCCESS
Failed to execute command 'export LANG=C; setfacl -M '/tmp/setfaclJTBVSn' -- '/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS/Техническая дирекция НСК' 2>&1': setfacl: Invalid argument in line 227 of file /tmp/setfaclJTBVSn
Detail:
Error #4000:exception 'OMVException' with message 'Failed to execute command 'export LANG=C; setfacl -M '/tmp/setfaclJTBVSn' -- '/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS/Техническая дирекция НСК' 2>&1': setfacl: Invalid argument in line 227 of file /tmp/setfaclJTBVSn' in /usr/share/openmediavault/engined/rpc/sharemgmt.inc:1220Stack trace:#0 [internal function]: OMVRpcServiceShareMgmt->setFileACL(Array, Array)#1 /usr/share/php/openmediavault/rpcservice.inc(125): call_user_func_array(Array, Array)#2 /usr/share/php/openmediavault/rpc.inc(79): OMVRpcServiceAbstract->callMethod('setFileACL', Array, Array)#3 /usr/sbin/omv-engined(500): OMVRpc::exec('ShareMgmt', 'setFileACL', Array, Array, 1)#4 {main}
cat /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
# / was on /dev/sda1 during installation
UUID=68fa19fa-c775-4e68-af67-e7feb42a5c6f / ext4 errors=remount-ro 0 1
# swap was on /dev/sda5 during installation
UUID=a3c8120f-b8a1-441d-819b-2c2f24a9be20 none swap sw 0 0
/dev/sdf4 /media/usb0 auto rw,user,noauto 0 0
# >>> [openmediavault]
UUID=f99763c5-c313-4e1a-81f2-e07ec334b39e /media/f99763c5-c313-4e1a-81f2-e07ec334b39e ext4 defaults,nofail,user_xattr,noexec,usrjquota=aquota.user,grpjquota=aquota.group,jqfmt=vfsv0,acl 0 2
# <<< [openmediavault]Help me, ACL
Failed to execute command 'export LANG=C; setfacl -M '/tmp/setfaclcRE9G9' -- '/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS/Техническая дирекция НСК' 2>&1': setfacl: Invalid argument in line 193 of file /tmp/setfaclcRE9G9Ошибка #4000:
exception 'OMVException' with message 'Failed to execute command 'export LANG=C; setfacl -M '/tmp/setfaclcRE9G9' -- '/media/f99763c5-c313-4e1a-81f2-e07ec334b39e/NAS/Техническая дирекция НСК' 2>&1': setfacl: Invalid argument in line 193 of file /tmp/setfaclcRE9G9' in /usr/share/openmediavault/engined/rpc/sharemgmt.inc:1220
Stack trace:
#0 [internal function]: OMVRpcServiceShareMgmt->setFileACL(Array, Array)
#1 /usr/share/php/openmediavault/rpcservice.inc(125): call_user_func_array(Array, Array)
#2 /usr/share/php/openmediavault/rpc.inc(79): OMVRpcServiceAbstract->callMethod('setFileACL', Array, Array)
#3 /usr/sbin/omv-engined(500): OMVRpc::exec('ShareMgmt', 'setFileACL', Array, Array, 1)
#4 {main}