similar to: protocol SMB2 prevents start of program?

On 12/2/2014 11:04 AM, Klaus Hartnegg wrote: > On 01.12.2014 13:52, Gerald Drouillard wrote: >> On 11/28/2014 9:23 AM, Klaus Hartnegg wrote: >>> >>> Is there anything else that I could try, >>> or do I just have to stay on protocol NT1 >>> as long as we still use this old software? >>> >> Try in [global] >> acl allow execute

On 01.12.2014 13:52, Gerald Drouillard wrote: > On 11/28/2014 9:23 AM, Klaus Hartnegg wrote: >> >> Is there anything else that I could try, >> or do I just have to stay on protocol NT1 >> as long as we still use this old software? >> > Try in [global] > acl allow execute always=true This issue would affect all clients, and usually all software that is being

Many first time users of Samba-4 seem to struggle with the same issues. I suggest the Wiki should have a Readme First similar like this: http://www.klaus-hartnegg.de/gpo/14-03-12-samba4.html It basicly says that Samba 4 can behave either like Samba 3, or as AD-DC, in which case it should do nothing else. Then it lists the main differences, limitations, and requirements. I would love to see a

On Wed, May 13, 2015 at 1:20 PM, Klaus Hartnegg <hartnegg at uni-freiburg.de> wrote: > Am 13.05.2015 um 17:30 schrieb S?bastien Le Ray: > >> No they aren't >>> >> >> Yes they are >> > > Not sure about this, but mostly irrelevant anyway, because of this effect > in the other direction: > > If you have set Windows ACLs, and then change

Thanks for your help and replies. Yes, I meant "store dos attributes". It's pretty clear now that I need to keep the parameter 'store dos attributes=no' since 1) the server is an AD member server and 2) the map* parameters don't do the right thing under ZFS / NFSV4 ACLs. I've read that the steps Klaus Hartnegg listed resolves the issue on ZFS on Linux; however, I

On Fri, 24 Apr 2015, Klaus Hartnegg wrote: > Am 24.04.2015 um 01:02 schrieb Carl G. Riches: >> I'm unable to join a Windows 7 PC >> to the Samba 4 domain when "hosts allow" is defined > >> hosts allow = 127 10.208.29. 10.108.29. > > Maybe the new version insists there must be a dot after the 127. > I put the dot in, to no avail. I also modified the

Hi Klaus, I haven't used that tool for at least 13 years but I do recall that, among other things, it read from the registry. Coupled with the fact that Samba 4 AD is not a complete implementation of AD I can't imagine that it could possibly work. More to the point, I'd be seriously concerned about the results. This is not something I'm prepared to test in a production

Upgrading Win7-32 (connected to Samba as NT-PDC) to Win10 requires - disable HardenedUncPaths (MutualAuth & Integrity) - install NTVDM - enable LegacyConsole otherwise the logon-script in Netlogon does not run, even if samba.cnf contains "server max level = NT1" Is Samba as NT-PDC supposed to handle HardenedUncPaths? Did I miss that I should have enabled that somehow in smb.conf?

Hello, I read that replication with DFS-R requires NTFS filesystem on both sides, because it accesses the "change journal". (https://technet.microsoft.com/en-us/library/cc773238%28v=ws.10%29.aspx) Can I use DFS-R between samba4 and windows if I use ntfs-3g? If not is it planned to support DFS-R in a future version of samba? thanks, Klaus -- Klaus Hartnegg, Universität Freiburg,

On Tue, 2015-03-10 at 11:37 +0100, Klaus Hartnegg wrote: > Am 10.03.2015 um 11:00 schrieb Sergio Rizzi: > > By reading https://wiki.samba.org/index.php/Roadmap#Trust_support seems > > that trust support is not finished yet, btw in changelogs seems that in > > 4.2.* (with winbindd) interdomain trusts are now working. > > The release notes say that windindd "paves

Hello Klaus, Am 12.10.2015 um 23:34 schrieb Klaus Hartnegg: > Different domains have advantages if the network connection is bad, and > if local admins want to create new ad objects themselves, e.g. new > users. This is also possible with AD sites. Even if the network connection is temporary offline. Each DC has a RID pool (default 500 RIDs). Until it's empty, you can create new

Hello all, Mine is Active Directory domain. I have already reinstall my server. It was fresh install. But of course I am still following this topic. Regards Le 3 juil. 2016 13:05, "Klaus Hartnegg" <hartnegg at uni-freiburg.de> a écrit : > On 20.06.2016 at 12:16 Jules Houantonon wrote: > >> please is it possible to change samba4 domaine name ? >> Did someone

On Fri, May 15, 2015 at 4:37 AM, Klaus Hartnegg <hartnegg at uni-freiburg.de> wrote: > Not sure which email you mean. I don't think that this can happen. If the > Linux acls are modified, the Windows ACLs are destroyed and all is based on > the Linux permissions and acls (which looks strange when viewed from > Window). If the Windows ACLs are modified, Samba automatically

Hi, Just wondering: What are you guys using to deploy software on your windows (7) workstations within the samba4 AD? These are options I know of: * wpkg (but it seems it's development is not too active) * wpkg-gp using the group policies * www.opsi.org (Client Management System for Windows clients) * standard windows software deployment, but I think that's msi-only This page also has

WOW! That's could be a nice idea! 2016-09-29 14:13 GMT-03:00 Jeremy Allison via samba <samba at lists.samba.org>: > On Thu, Sep 29, 2016 at 05:31:12PM +0200, Klaus Hartnegg via samba wrote: > > Am 29.09.2016 um 16:26 schrieb v g via samba: > > >Really? Easy and useful, huh? > > > > Live sync of directories is VERY useful. > > > > So useful that

I cannot connect as guest from Win10 to Samba anymore, since I removed "server max protocol = NT1" net use \\%IP%\testshare /user:"" "" /persistent:no System error 58 has occurred. The specified server cannot perform the requested operation. It works when I supply a userid and password. It works from Win7. It fails only in the combination Win10, SMB3,

Dne 2017/03/20 v 10:05 Rowland Penny napsal(a): > On Sun, 19 Mar 2017 23:23:58 +0100 > Michal Kavan via samba <samba at lists.samba.org> wrote: > >> yes, its looks like win7/10 problem (but only on samba 4.x) to me, >> but i have no idea what to do (except downgrade to 3.6.x) >> >> >> server max protocol = SMB3 >> client max protocol = NT1

Hi, Is it normal that "chown $user $file" and "chown :$group $file" destroy the Windows-ACLs? Is it normal that changing the file owner in Windows does not change the file owner in Linux, but changing the file owner in Linux does change the file owner in Windows? This should be mentioned in >

Hi, Following the wiki page Setting_up_a_Share_Using_Windows_ACLs windows shows me this error after clicking on Shares: Disk Management could not start the Virtual Disk Service (VDS) on 'COMPUTER'. This can happen if the remote computer does not support VDS, or if a connection cannot be established because it was blocked by Windows Firewall. Tested on a new provisioned AD-DC server.

Hi, when I don't want to switch to Active Directory, but don't want to be stuck on version 3.6 either, can I simply give samba 4 a copy of the old smb.conf file? Will it be able to store all windows acl's in extended attributes, or is this improvement only available in combination with letting it run as active directory domain controller? thanks, Klaus