similar to: [Announce] Samba 4.1.6, 4.0.16 and 3.6.23 Security Releases Available

Hi guys, I am so thrilled by samba 4 it makes me go to bed smiling J Here is my setup. Server ************ Centos 6.5 Samba 4.1.4 Clients ************* Windows XP, 7 & 8 Question: Is account lockout supported with samba4 ? I cannot seem to get the users accounts to lock when they type their passwords incorrectly. The rest of my GPO's work. Folder redirects work

Hi all, after the news that samba 4 is now supporting user lockouts after bad password attempts we need to plan our roadmap on migrating from Samba 3 to samba 4. We currently have Samba version 3.0.7-1.3E.1 installed with (passwd) database as a backend. I would appreciate if anyone can guide me on the migration process. Our old server Centos 4.4 Samba 3.0.7 (Master browser)

This happens to me as well. Over several different versions of Samba. It's a minor nuisance on my end. Basically the following * User is prompted to change password * User types old password along with new password twice. * User is prompted with the error message 'unable to change password. doesn't meet the complexity blah blah blah'. * It will then prompt for old

It appears that you cannot use migrations (out of the box) with mysql 4.0.16, because when creating a table, the statement says "ENGINE=InnoDb", instead of "TYPE=InnoDB". Looking at the source code for the adapter, this appears to be hard coded. Is there any supported way to make this work with older versions of MySQL? David

Hi all, another question on my roadmap to samba 4. I must admit that I am a bit scared of doing the migration from samba 3 to samba 4 and wondered if there is a simplified process that can be followed instead of the wiki... What happens if I selected (NO) in my samba3 config file ( local master = No ) and I Installed and booted a second server with samba4 on it... Will they be able to run

Hi Guys, I had no luck so far getting openchange installed onto samba 4.1.4 and wondered if I am on the right track here regarding emails for users. I will appriciate it if anyone can share their setups with me so I can estimate what will be the best way forward. The plan so far. Run Samba4 as a file server. (this is working in a test enviroment) Run Samba4 as a DC with Active Directory

Hi, all, we run smbcacls tool from linux machine to set file permissions on windows server. here is our environment: Linux machine: Ubuntu 14.04 LTS, kernel version 3.13.0-112-generic Samba version: 4.3.11 Windows machine: Windows server 2012 the cmd we run is something like following: /usr/bin/smbcacls -U 'Domain\Administrator'%'pwd' '//win_server/testshare'

On Thu, Jun 08, 2017 at 06:43:34PM +0200, Ralph Böhme via samba wrote: > Hi Andy, > > On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > > The smbcacls cmd worked before till recently. Due to the recent Windows > > patch which disables SMB v1, we have to add the following line into the > > [global] section in smb.conf file on Linux machine so that

I've now tired both client ipc signing = auto or client signing = required server signing = auto --- that did not work...Also tied winbindd and that was a disaster of a different sort. It wouldn't use the local unix groups first, which will cause way too many issues. All along, however, the PCs that connect (when not trying to use winbindd) have consistently been able to connect and

Hi Folks, my S4 AD works well since the end of december. (Thanks to Christmas) I also managed to create the incoming trust to an Windows 2008 Srv domain. Now the trust is broken. I tried the old reboot trick and so on. My last (stupid) idea was to delete the trust on both sides and recreate it using the management tools from Microsoft. But the creation fails on the samba4 site, complaining

I want to get ACLs (output similar to that of smbcacls) for a *lot* of files (potentially millions). I can only process about 10 files per second when running the command (`smbcacls -U ...` via a Python wrapper), I'm looking for a faster way. Does anyone know any libraries or other commands that could help me? Failing that, I assume that much of the time taken is spent on authenticating

Hi all, I would like to limit access to our samba shared printers to certain user groups by commandline without using Windows. Is this possible? Thanks! Christoph

Hello everyone. So, I come to you because I have a little problem when setting up my domain controller based on CentOS 6.5 and Samba 4.1.6. Everything works well, except for one small detail, which in my case blocking me. I would like to automatically generate the home directory of the user during the first connection (from Win or Linux), but the problem is that for some unknown reason,

Hello all- I'm looking to tweak password settings for my domain but have a few question regarding the settings under "samba-tool domain passwordsettings show". While I found some settings were documented on the wiki (https://wiki.samba.org/index.php/Password_Settings_Objects), I did not find answers to a few questions I had. If "maximum password age (days)" is set to

First of all, I want to say I have been using Samba AD for two years now (since just before 4.0 went stable), and it is an amazing product. We've implemented Active Directory & Group Policy for almost 50 computers and 100 users. Unfortunately, we are now being forced into switching to Windows DCs because Samba does not have an account lockout feature. Citrix (stupidly) does not have

I'm trying to set up a Samba server with ACLS. Versions: - xfs in kernel-2.4.20. - samba-2.2.7a compiled with ACL support I'm trying first with smbcacls. But I can't manage to guess the syntax of the ACL command. I want the user "frankie" could RWX a file owned by "javi" #smbcacls //localhost/public te1st.txt -A ACL:frankie:0/0/RWX -U javi Failed to parse ACL

(Is this the right place to post such question?) I can't seem to grasp the right syntax for smbcacls This is a 306rc2, security=user system w/ passwords set via smbpasswd, and smbclient gives expected r/w behavior.I've seen the same on a 302a security=domain or ads system (I believe), which is why I think I'm misinterpreting something (or is smbcacls broken??) -- or what

The Samba 3.0-RC1 "smbcacls" utility is reporting an error when I ask it to display the security information of a file on a Windows 2003 server: [root@demo5 bin]# ./smbcacls --user=SEITZDNSDOMNAIN\Administrator //seitzwin2003/Documents test.txt params.c:OpenConfFile() - Unable to open configuration file "/root/samba/debug/lib/smb.conf": No such file or

Hi there, With the new scrutinization by auditors on account policies and auditing, how can Samba be SOX compliant? Using 3.0.14a-sernet on Suse 9.1 - ldapsam Specifically, a couple of things seem to be lacking: 1) Logon/Logoff times are not being recorded The last logon time recorded in my ldap entries are pre-nt4 migration. 2) Do the Audit Policy values in user manager have any effect? Are

Hi, im trying to setup a password policy with samba and openldap. while lockout works perfect on openldap it looks like it does not work with my samba. Ive set "sambaLockoutThreshold" to 3 and "sambaLockoutDuration" to -1 (lockout forever) within the Domain-Object in LDAP. So i expect whenever a windows user does 3 false logon attemps his samba account will be LOCKED