similar to: Usermapping with 3.0.3pre2

Yesterday evening I upgraded my FreeBSD 5.5-RELEASE Server from Samba 3.0.22 to 3.0.23. This gave me a LOT of work today... :-( This is what I found so far: My Samba-Server is member of a large ADS-Domain. After the upgrade, file based Usermapping didn't work anymore... better: it worked TWICE. (I once opened a PR for that a few years ago :-). So, with LogLevel 3:

Hello, I found another strange problem while migrating from 3.0.22 to 3.0.23x (with 'x' eq 'd' now): I can't access my [homes]-share anymore - if i try, the samba-server prompts me for a password. What *is* working is accessing the same directory as [<username>]... E.g.: \\Sambaserver\matthias works whereas \\Sambaserver\homes works *not* Unfortunaely it

Hello, I want to remind to the kern/132934-PR. Are we the only ones that have Problems with the NFS-Locking? I try every week the latest -STABLE code but nothing changed so far. Are there any chances to get NFS-locking working with HP-UX 11.11 machines again with 7.2-RELEASE? Greetings - Matthew -- Ciao/BSD - Matthias Matthias Schuendehuette <msch [at] snafu.de>, Berlin

Hi, I've got a relatively simple tinc setup. I've got two "servers" that are on the public internet that act as routers for three "clients" that are behind NATs. Those servers are called aaaaa and bbbbb the clients are xxxxx, yyyyy and zzzzz Unfortunatly the servers have problems accepting a connection from the clients syslog on aaaaa: Sep 29 18:28:58 schuerrer

2015-03-04 21:35 GMT+01:00 Shane Robinson <srobinson at simpeq.ca>: > Hi Davor, > > If the mapping of administrator to root is not ideal, I do like the idea of > having a specific FileShareAdmin group. > > But, why chown and not simply chgrp? > If you consider 'root' as a BUILTIN\Administrator equivivalent it might work changing both Share and DACL "the

On 04/03/15 18:31, Shane Robinson wrote: > Hello again Rowland, list! > > Sorry for the delayed response, and top posting. > > To recap: > I'd like to complete the member server wiki so that ACLs can be set from > windows without taking undocumented steps. > > The three ways I've found to do this are: > > 1) map root to administrator. (LPH VanBelle's

On 04/03/15 19:25, Davor Vusir wrote: > If I remember correctly it doesn't matter what combinations you > 'chmod' to. It changes to 755 as soon as you change ACLs from Windows. > I suggest you add uid- and gidnumber to all users and groups and chown > to a user:group (or perhaps group:group if possible). For example > chown FileShareAdmin:FileShareAdminGroup and let the

I was reading the release notes for 3.0beta1, which says this: 1) When operating as a member of a Windows domain, Samba 2.2 would map any users authenticated by the remote DC to the 'guest account' if a uid could not be obtained via the getpwnam() call. Samba 3.0 rejects the connection as NT_STATUS_LOGON_FAILURE. There is no current work around to re-establish

Forgot to add the list in the TO line! Shane Robinson Chief Administrative Officer SimpeQ Care Inc. t. 604.988.3103 ext. 104 c. 604.506.3311 f. 604.988.3105 Please consider the environment before printing this email. -----Original Message----- From: Shane Robinson [mailto:srobinson at simpeq.ca] Sent: Wednesday, March 04, 2015 12:32 PM To: 'Rowland Penny' Subject: RE: [Samba] Domain

Hello Rowland, Oh dear! I do feel rather silly. :/ Thanks so much for your patience! I think I'll clarify the wiki (which does mention this, but only mentions the local administrator). When I read it, it mentions that there will be mapping for non-domain accounts in TDB. I (quite wrongly) assumed that my domain administrator was not included in this, and, therefore, would need a UIDnumber

On 27/02/15 19:09, Shane Robinson wrote: > Hello again List, Marc, and Louis! > > I'm afraid my message from yesterday may have been TL;DR. The short version > is as follows: > > Following the wiki's for AD member server (building from source on Debian > Wheezy) and Setting up shares with Windows acls did not give the expected > results > > First, I needed to

On 27/02/15 19:46, Shane Robinson wrote: > Hello all, > > Sorry about the top-posting. > > I have added the bit about the linking (YAY!, I'm helping!). > > Now if we can clear up the ACL issue, this will be a great day! > > Summary: To edit ACL's from Windows on a Debian Member server, we need to > either > 1) map the domain admin to root OR > 2) give

Hi Davor, If the mapping of administrator to root is not ideal, I do like the idea of having a specific FileShareAdmin group. But, why chown and not simply chgrp? Thanks! Shane Robinson Chief Administrative Officer SimpeQ Care Inc. t. 604.988.3103 ext. 104 c. 604.506.3311 f. 604.988.3105 Please consider the environment before printing this email. -----Original Message----- From:

On 27/02/15 20:07, Shane Robinson wrote: > Hi Rowland, > > Chown to Administrator seems less flexible than Chgrp to Domain Admins on > the face of it. You could add/remove users from the Domain Admins group, > which allows/denies them the ability to change the permissions on the share. > By changing the owner to Administrator, only those credentials would have > that ability,

2015-03-04 19:59 GMT+01:00 Rowland Penny <rowlandpenny at googlemail.com>: > On 04/03/15 18:31, Shane Robinson wrote: >> >> Hello again Rowland, list! >> >> Sorry for the delayed response, and top posting. >> >> To recap: >> I'd like to complete the member server wiki so that ACLs can be set from >> windows without taking undocumented

Hello List! I have a Samba AD domain with two virtualized DC's running 4.1.15 and 4.1.17. I have had two member file servers with odd permissions problems that I've now given up on, and decided to start fresh. I have created a File server (FS3) with Debian wheezy, built samba 4.1.17 from source, with configure options of : --with-ads --with-shared-modules=idmap_ad ... and placed the

On Wed, 23 Oct 2002 08:22:38 -0700 shorewall-devel-request@shorewall.net wrote: > Shorewall-devel -- confirmation of subscription -- request 915994 > > We have received a request from > cpe014500117825.cpe.net.cable.rogers.com for subscription of your > email address, <snafu@forkbomb.dhs.org>, to the > shorewall-devel@shorewall.net mailing list. To confirm the request,

On 27/02/15 21:00, Shane Robinson wrote: > Hi Rowland, > > I'm also not an expert, but with the amount of help you provide on the list, > I will defer to you. > > I'd love to know your rational for prefering the "change ownership to > administrator" approach over the "change group to Domain Admins approach". > If it's just gut, that's

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 three-interface.xml is done. I am completing the cleanups and "look and feel" changes. It will be checked in shortly. - -- "If at first you don''t succeed, destroy all evidence that you tried." Paul <snafu@forkbomb.dhs.org> BLOG: http://forkbomb.dhs.org/bs/ GPG Key: http://forkbomb.dhs.org/bs/snafu.asc -----BEGIN

Karl Heyes wrote: > The libs that Brendan mentioned are loaded after the start of the > program, in fact they are referenced when the host name is looked up. > The loading is done within libc so apps like icecast don't know it's > being done. ldd does not show these libs, but the mechanism is the same > as used by plugins of various apps. Would building statically help? Is