similar to: FW: Domain Member Server (wheezy) - Unable to edit permissions of share without usermapping - shall I add to Wiki?

Hello Rowland, Oh dear! I do feel rather silly. :/ Thanks so much for your patience! I think I'll clarify the wiki (which does mention this, but only mentions the local administrator). When I read it, it mentions that there will be mapping for non-domain accounts in TDB. I (quite wrongly) assumed that my domain administrator was not included in this, and, therefore, would need a UIDnumber

Hello again Rowland, list! Sorry for the delayed response, and top posting. To recap: I'd like to complete the member server wiki so that ACLs can be set from windows without taking undocumented steps. The three ways I've found to do this are: 1) map root to administrator. (LPH VanBelle's script uses this option.) 2) chmod 0775 then chgrp "<DOMAIN>\Domain Admins"

On 27/02/15 21:00, Shane Robinson wrote: > Hi Rowland, > > I'm also not an expert, but with the amount of help you provide on the list, > I will defer to you. > > I'd love to know your rational for prefering the "change ownership to > administrator" approach over the "change group to Domain Admins approach". > If it's just gut, that's

On 27/02/15 19:09, Shane Robinson wrote: > Hello again List, Marc, and Louis! > > I'm afraid my message from yesterday may have been TL;DR. The short version > is as follows: > > Following the wiki's for AD member server (building from source on Debian > Wheezy) and Setting up shares with Windows acls did not give the expected > results > > First, I needed to

On 27/02/15 19:46, Shane Robinson wrote: > Hello all, > > Sorry about the top-posting. > > I have added the bit about the linking (YAY!, I'm helping!). > > Now if we can clear up the ACL issue, this will be a great day! > > Summary: To edit ACL's from Windows on a Debian Member server, we need to > either > 1) map the domain admin to root OR > 2) give

On 27/02/15 20:07, Shane Robinson wrote: > Hi Rowland, > > Chown to Administrator seems less flexible than Chgrp to Domain Admins on > the face of it. You could add/remove users from the Domain Admins group, > which allows/denies them the ability to change the permissions on the share. > By changing the owner to Administrator, only those credentials would have > that ability,

2015-03-04 21:35 GMT+01:00 Shane Robinson <srobinson at simpeq.ca>: > Hi Davor, > > If the mapping of administrator to root is not ideal, I do like the idea of > having a specific FileShareAdmin group. > > But, why chown and not simply chgrp? > If you consider 'root' as a BUILTIN\Administrator equivivalent it might work changing both Share and DACL "the

Hi Rowland, I'm also not an expert, but with the amount of help you provide on the list, I will defer to you. I'd love to know your rational for prefering the "change ownership to administrator" approach over the "change group to Domain Admins approach". If it's just gut, that's fine too! Thanks! -----Original Message----- From: samba-bounces at

2015-03-04 19:59 GMT+01:00 Rowland Penny <rowlandpenny at googlemail.com>: > On 04/03/15 18:31, Shane Robinson wrote: >> >> Hello again Rowland, list! >> >> Sorry for the delayed response, and top posting. >> >> To recap: >> I'd like to complete the member server wiki so that ACLs can be set from >> windows without taking undocumented

Hello again List, Marc, and Louis! I'm afraid my message from yesterday may have been TL;DR. The short version is as follows: Following the wiki's for AD member server (building from source on Debian Wheezy) and Setting up shares with Windows acls did not give the expected results First, I needed to link libnss_winbind.so to /usr/lib/x86_64-linux-gnu for winbind to work. Marc - may I

Hello all, Sorry about the top-posting. I have added the bit about the linking (YAY!, I'm helping!). Now if we can clear up the ACL issue, this will be a great day! Summary: To edit ACL's from Windows on a Debian Member server, we need to either 1) map the domain admin to root OR 2) give explicit permissions to Domain Admins with a chmod 0755 and chgrp "MYDOM\Domain Admins"

On 04/03/15 18:31, Shane Robinson wrote: > Hello again Rowland, list! > > Sorry for the delayed response, and top posting. > > To recap: > I'd like to complete the member server wiki so that ACLs can be set from > windows without taking undocumented steps. > > The three ways I've found to do this are: > > 1) map root to administrator. (LPH VanBelle's

Hi Davor, If the mapping of administrator to root is not ideal, I do like the idea of having a specific FileShareAdmin group. But, why chown and not simply chgrp? Thanks! Shane Robinson Chief Administrative Officer SimpeQ Care Inc. t. 604.988.3103 ext. 104 c. 604.506.3311 f. 604.988.3105 Please consider the environment before printing this email. -----Original Message----- From:

Hi Rowland, Chown to Administrator seems less flexible than Chgrp to Domain Admins on the face of it. You could add/remove users from the Domain Admins group, which allows/denies them the ability to change the permissions on the share. By changing the owner to Administrator, only those credentials would have that ability, no? What advantages do you predict with the change owner approach? What

Hello List! I have a Samba AD domain with two virtualized DC's running 4.1.15 and 4.1.17. I have had two member file servers with odd permissions problems that I've now given up on, and decided to start fresh. I have created a File server (FS3) with Debian wheezy, built samba 4.1.17 from source, with configure options of : --with-ads --with-shared-modules=idmap_ad ... and placed the

Hello list! Some of you may recall my recent semi-spamming of this wonderful list with questions about acl problems on a member server. It turns out that I should not have immediately assigned a UIDnumber to Administrator, nor a GIDNumber to Domain Admins. :( I have removed the NIS attributes for Administrator and Domain Admins in ADUC, and have not been able to login to the member server as

Hello list! I have a newish Samba 4.1.4 (from git) AD DC running in an Ubuntu Precise KVM guest. It seems to be running well. Recent list posts have led me to set up a second instance of samba/ubuntu as a file server. Like the domain controller, Samba was built from git, but then it was configured using the "Samba/Domain Member" wiki. I added the sfu attributes to a few users/groups

On 04/03/15 19:25, Davor Vusir wrote: > If I remember correctly it doesn't matter what combinations you > 'chmod' to. It changes to 755 as soon as you change ACLs from Windows. > I suggest you add uid- and gidnumber to all users and groups and chown > to a user:group (or perhaps group:group if possible). For example > chown FileShareAdmin:FileShareAdminGroup and let the

Yesterday evening I upgraded my FreeBSD 5.5-RELEASE Server from Samba 3.0.22 to 3.0.23. This gave me a LOT of work today... :-( This is what I found so far: My Samba-Server is member of a large ADS-Domain. After the upgrade, file based Usermapping didn't work anymore... better: it worked TWICE. (I once opened a PR for that a few years ago :-). So, with LogLevel 3:

[Shane Drinkwater] Daniel, I have the same probelm. These are the steps I did in a previous thread... Jim, I think I found another bug... I really seem to be in printer hell :(.... I found that windows 2k doesn't update its status "ready" or "paused" when used with samba. Here is what I did... 1.) enable all of the lpr/lpd queues. check em' with lpq... 2.)