similar to: GPOs not Working!

On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: > On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >> Hello, >> >> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >> Kerberos (clean, not upgraded). I just wan to create/activating a >> simple GPOs. >> >> # Interactive logon: Do not require CTRL + ALT + DEL -> activate

Thanks for help, this is a new domain controller without any modifcations, except one GPO. I have the "Default Domain Policy" and created an addtional GPO, named "test_something". Both are linked at the top of the domain. I configured at the "test_something" GPO: # Interactive logon: Do not require CTRL + ALT + DEL -> activate # Interactive login: Do not

Hello, i installed a SAMBA 4.7.4 AD Server on Ubuntu 18.04 (BETA). SAMBA4 was compiled from source. For MIT Keberos i also installed libkrb5-dev and krb5-kdc and compiled with the "--with-system-mitkrb5" option. The installation runs pretty good (some dependencies problem, solved manually). But now im not able to test kerberos: # kinit administrator --> kinit: Cannot find KDC

Hello, my enviroment: All Servers are Ubuntun 16.04-18.04 SAMBA AD DC Server and several SAMABA DOMAIN MEMBER (connected via WINBIND). In ADDC I've created a group "restrictaccess" and added some users. Now when im typing "id <username>" on a Domain Member, for some users the group "restrictaccess" are listed for some not! For example: ON DC: #

Hello, today i upgrade my printserver from samba 4.8.6 to 4.9.2 (ubuntu 18.04). First, all is working correctly. But whe im typing "testparm" now the following warnings are shown: ############## Loaded services file OK. Warning: Service printers defines a print command, but parameter is ignored when using CUPS libraries. Warning: Service print$ defines a print command, but

Thank for your answer: But i dont know understand why is following not working: I want to restrict the ssh access for a special domain member: In my "sshd_config" i added: AllowGroups restrictaccess root With user2 im able to login via ssh! log: pam_krb5(sshd:auth): user user2 authenticated as user2 at ROOTRUDI.DE With user1 im not! log: User user1 from 192.168.0.100 not allowed

Hi all, I am having the same issue that is described in an older thread here: https://lists.samba.org/archive/samba/2018-February/213656.html The problem I am facing is that the machine accounts are not trusted in the domain (this is true for all Win 10 Systems). The issue with the computer is from my pov: Folgende herausgefilterte Gruppenrichtlinien werden nicht angewendet.

Hi Rowland, On 20.10.19 19:16, Rowland penny wrote: > On 20/10/2019 16:52, Martin Tessun via samba wrote: >> Hi all, >> >> I am having the same issue that is described in an older thread here: >> https://lists.samba.org/archive/samba/2018-February/213656.html >> >> The problem I am facing is that the machine accounts are not trusted >> in the domain

Hello, im trying to setup a share using windows acls. I followed the step ins https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs but hanging at "Adding a Share" # mkdir -p /srv/samba/Demo/ # chown root:"Domain Admins" /srv/samba/Demo/ *--> chown: ungültige Gruppe: »root:Domain Admins“* # net rpc rights list privileges SeDiskOperatorPrivilege -U

On 20/10/2019 16:52, Martin Tessun via samba wrote: > Hi all, > > I am having the same issue that is described in an older thread here: > https://lists.samba.org/archive/samba/2018-February/213656.html > > The problem I am facing is that the machine accounts are not trusted > in the domain (this is true for all Win 10 Systems). The issue with > the computer is from my

On 10/20/19 11:52 AM, Martin Tessun via samba wrote: > Hi all, > > I am having the same issue that is described in an older thread here: > https://lists.samba.org/archive/samba/2018-February/213656.html The description of that link, says it is running Samba AD with MIT Kerberos. the MIT backend is experimental and this is one of the problems it has, machine GPOs don't work.

There is a script in /etc/init.d/krb5-kdc". Do i need remove this? Because this is trying to start automatic krb5kdc at reboot. Output from pstree and ps: # pstree | grep samba |-3*[samba] |-samba-+-samba---samba---smbd-+-cleanupd | |-10*[samba] | |-samba---samba---krb5kdc | `-samba---samba---winbindd---winbindd # ps axf 2129 ? Ss 0:00 samba 2130 ? S 0:00 \_ samba 2132 ? S 0:00 | \_ samba

Hi all, On 21.10.19 17:38, Martin Tessun wrote: > Hi Rowland, > > On 20.10.19 19:16, Rowland penny wrote: >> On 20/10/2019 16:52, Martin Tessun via samba wrote: >>> Hi all, >>> >>> I am having the same issue that is described in an older thread >>> here: https://lists.samba.org/archive/samba/2018-February/213656.html >>> >>>

On Tue, 7 Aug 2018 12:20:04 +0200 Micha Ballmann via samba <samba at lists.samba.org> wrote: > Hello, > > my enviroment: > > All Servers are Ubuntun 16.04-18.04 > > SAMBA AD DC Server and several SAMABA DOMAIN MEMBER (connected via > WINBIND). In ADDC I've created a group "restrictaccess" and added > some users. > > Now when im typing

Hello, i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT Kerberos (clean, not upgraded). I just wan to create/activating a simple GPOs. # Interactive logon: Do not require CTRL + ALT + DEL -> activate # Interactive login: Do not displa last user name -> activate When im activating this Policys (no errors or something like that) nothing happend. I reboot two Domain

I''m not sure if this is by design, but I''ve stumbled across this a few times trying to debug my own tests. If an assertion fails the test, and a mock expectation was to blame, the test''s failure / error messages don''t give enough info. I''ve had to resort to def teardown mocha_verify end which just gets tedious. I''ve created a patch

I dont agree.. > Yes, Domain Admins needs to be a Unix group. I agree on this one. > No, because if Domain Admins is a Unix group, it cannot own GPOs in > sysvol and Domain Admins needs to own GPOs as a user. On a Samba DC, > Domain Admins is mapped to 'ID_TYPE_BOTH' and can own GPOs as a user. Not totaly.. Imo. Just set ignore systemacls on sysvol and you dont have any

This patch adds lost logic for vga initialization. It was lost after changing to new Qemu. Signed-off-by : Kevin Tian <kevin.tian@intel.com> Signed-off-by : Zhang Xiantao <xiantao.zhang@intel.com> Thanks & Best Regards -Xiantao OTC,Intel Corporation _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos

Hi, I something like: def test_something @object = Object.create(...) @object.update_attribute(...) assert_equal "changed", @object.attribute end The problem is that in the assertion, @object still holds the old values. Isn''t there a reload! method to reload the @object values? -- Posted via http://www.ruby-forum.com/.