similar to: ACLs not obeyed when connecting to a share from a trusted domain where share path target contains spaces

Hi Timo/list, We have a scenario in which some email accounts on dovecot (stored in mdbox, separate paths for indexes, email, ALT storage and also using SIS for attachments, LDAP directory) need their names changed. I know we could just change the mail LDAP attribute (and leave mailMessageStore alone) so they keep the same directories on disk, but this would throw a spanner in the works for

Hi Alex, Nice information about forest type. Regarding listing domain users, have you tried to set up samba with: winbind use default domain = no? 2016-07-11 19:50 GMT+02:00 Alex Crow <acrow at integrafin.co.uk>: > > > On 11/07/16 13:55, Alex Crow wrote: > > Hi List, > > > > I am currently testing inter-forest trusts between a pair of AD > > domains.

Thanks, I suppose what I'm trying to gain is some clarity on what choice is best for a given application. How do I know if it's better for me to use a raid card or not, to include flash-cache on it or not, to use ZFS or not, when combined with a small number of SSDs in Replica 3. On Mon, Apr 9, 2018 at 10:49 AM, Alex Crow <acrow at integrafin.co.uk> wrote: > On 09/04/18

Thanks, The 3 servers are new Lenovo units with redundant PS backed by two huge UPS units (on for each bank of power supplies). I think the chances of losing two nodes is incredibly slim, and in that case a Disaster Recovery from offsite backups would be reasonable. My requirements are about 2TB, highly available (so that I can reboot one of the 3 servers without taking down services). Beyond

On 09/04/18 16:49, Vincent Royer wrote: > > > Is a flash-backed Raid required for JBOD, and should it be 1gb, 2, > or 4gb flash? > > RAID and JBOD are completely different things. JBODs are just that, bunches of disks, and they don't have any cache above them in hardware. If you're going to use ZFS under Gluster, look at the ZFS docs first. Short answer is no.

Database size would interest us here, with and without trust if you have these metrics. Global catalog is supposed to stored some attributes of almost all objects of all trusted domains, if me understanding is correct and we have no real idea about what that means in concrete terms. 2016-07-12 12:55 GMT+02:00 Alex Crow <acrow at integrafin.co.uk>: > On 12/07/16 09:36, mathias dufresne

On 09/04/18 19:02, Vincent Royer wrote: > Thanks, > > I suppose what I'm trying to gain is some clarity on what choice is > best for a given application.? How do I know if it's better for me to > use a raid card or not, to include flash-cache on it or not, to use > ZFS or not, when combined with a small number of SSDs in Replica 3. > > How few is "small

On 17/11/16 13:15, Reinald Gfuellner via samba wrote: > I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. > Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should > be used over both protocols. > > With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) > . How can I do the same with Samba 4 ? > > Posix-ACLs set on

On 12/8/2016 5:16 AM, Alex Crow via samba wrote: > > > On 07/12/16 16:23, L.P.H. van Belle via samba wrote: >> Just check, yes all my pc's ( dhcp and static ) are owner of the DNS >> records. >> >> NTDOM\COMPUTERNAME$ is set on the record and every pc its own record. >> >> ! one thing, i do use Bind9_dlz with samba and not internal DNS. >> I

On 11/02/15 18:16, Marc Muehlfeld wrote: > Hello Alex, > > Am 11.02.2015 um 16:20 schrieb Alex Crow: >> We are looking at moving from a Samba NT4-Style domain to Samba 4 AD. >> >> We currently have two NT4-style domains set to to trust each other. Is >> this possible with S4 AD domains? > Your FAQ is answered here: >

On 12/07/16 09:36, mathias dufresne wrote: > Hi Alex, > > Nice information about forest type. > Regarding listing domain users, have you tried to set up samba with: > winbind use default domain = no? Hi, Yes I have, and it works as expected (ie all from the local domain are prepended with DOMAIN\, but does not solve anything for by trusted domain accounts on member servers.

Hi List, I am currently testing inter-forest trusts between a pair of AD domains. All DCs and member servers are using Sernet Samba 4.4.5. I have set up conditional forwarding in by Bind setup (I'm using BIND9_DLZ) and all machines can resolve each other. On the DCs, I can see users from the other side of the trust using wbinfo -u --domain=<other domain>. In addition if I set up ID

On 22/09/16 12:12, Rowland Penny via samba wrote: > On Thu, 22 Sep 2016 10:58:18 +0100 > Alex Crow via samba <samba at lists.samba.org> wrote: > >> Hi List, >> >> As the subject states, I'm running a CTDB cluster. Samba is Sernet >> 4.4.5 in an NT-Style Samba domain (DCs are Centos 6 packaged samba, >> 3.6.22) >> >> Every so often, users

Are you replacing or merging the policies? > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Alex Crow via > samba > Verzonden: maandag 19 december 2016 15:29 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] GPO Security Filtering "Access Denied" > > > > On 19/12/16 14:18, L.P.H. van Belle via

On 03/07/16 21:47, Volker Lendecke wrote: > On Sun, Jul 03, 2016 at 08:42:36PM +0100, Alex Crow wrote: >> I've only put the "private dir" onto MooseFS, as instructed in the CTDB >> docs. > Can you quote these docs, so that we can correct them? > > Also Gluster have the same tip here:

>> Not sure what's going on with the rest of it. Doing a bit of testing... > I tested on a 3 node test cluster, with 4.4.x and master, works as > expected. > > -slow > Hi there, Can you send your smb.conf so I can compare it to mine? Cheers, Alex -- This message is intended only for the addressee and may contain confidential information. Unless you are that person,

On 04/11/16 07:12, Volker Lendecke wrote: > On Thu, Nov 03, 2016 at 09:21:46PM +0000, Alex Crow via samba wrote: >> [root at zalma ~]# stat testfile >> ... >> Size: 1286700 Blocks: 2514 IO Block: 65536 regular file >> Device: 29h/41d Inode: 35820037 Links: 1 >> Access: (0774/-rwxrwxr--) Uid: ( 3535/ jh3) Gid: ( 513/Domain Users)

On 21/10/16 10:52, Ralph Böhme wrote: > On Fri, Oct 21, 2016 at 10:30:46AM +0100, Alex Crow via samba wrote: >> Interestingly I have a setup here for testing for rollout of S4 AD. The file >> servers are in an AD domain and are running Sernet 4.4.5, so one version >> older than production. > maybe it's related to bug 12005 that was fixed in 4.4.6? Can you test > with

On Fri, Aug 28, 2009 at 1:41 PM, Avinash Rao <avinash.aol at gmail.com> wrote: > On Fri, Aug 28, 2009 at 2:36 AM, Alex Crow<acrow at integrafin.co.uk> wrote: > > > >> Alex, > >> > >> I have been trying to use "root preexec" to add domain users to Power > >> users group on the local workstation, it never works.. > >> >

On 19/12/16 15:55, L.P.H. van Belle via samba wrote: > Did you add "domain computers" to the security filter also with Read/apply? > > > Hi Louis, Miguel, I'm applying it to specific computers, so I've created a group with those machines in it. It's not that the problem is applying the GPOs to the machines in the OU and group, the access denied message is a