samba - May 2013 - Samba4 does't run netlogon scripts and batch files

I've tried to move from Samba 3.6.14 to Samba 4.0.5. Process went smooth,
Win8Pro clients joined domain successfully.

But now netlogon startup scripts does not run on clients at signin. Also .bat
batch files from network shares does not executes (Win8 says do not have
permissions) without execute bit set.

This is the right behavior? How to get back previous?

If I return 3.6.14 version everything is back to normal and works fine.

Thank You.

So a couple of things come into play here, when moving to AD you need to
either create a Group Policy that will run the logon script, or set the
logon script per individual. Secondly, .bat should be able to run off the
network drive by setting the correct ACL's (I was thinking chmod 755 from
linux worked, but I may be wrong), in windows, right click on the .bat,
then hit the security tab, and add something like everyone, or
authenticated users, and select the correct acl's (play around with it as I
don't remember right off).

Ricky


On Wed, May 1, 2013 at 5:41 AM, Varda Zklir <v20z at yahoo.com> wrote:
> I've tried to move from Samba 3.6.14 to Samba 4.0.5. Process went
smooth,
> Win8Pro clients joined domain successfully.
>
> But now netlogon startup scripts does not run on clients at signin. Also
> .bat batch files from network shares does not executes (Win8 says do not
> have permissions) without execute bit set.
>
> This is the right behavior? How to get back previous?
>
> If I return 3.6.14 version everything is back to normal and works fine.
>
> Thank You.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

Anyway thanks for your assistance.

So I'm still wonder how to properly run executable files from samba shares
without setting x-bit on file. May be other people have ideas?

I've set in [global] section:
nt acl support = no
dos filemode = yes

But no luck.

Thank You.  
> Conventional samba 3 stuff should all remain the same, so
> without testing
> this I am not sure what's going on.
> > Thnaks for you reply.
> >
> > > So a couple of things come into play
> > > here, when moving to AD you need to
> >
> > No, I've started Samba4 as PDC "server role = classic
> primary domain
> > controller" and want to keep such compatibility as much
> as possible.
> >
> > > either create a Group Policy that will run the
> logon script,
> > > or set the
> > > logon script per individual.
> >
> > Please point or describe to me a way to do this.
> >
> > > Secondly, .bat should be able
> > > to run off the
> > > network drive by setting the correct ACL's (I was
> thinking
> > > chmod 755 from
> > > linux worked, but I may be wrong), in windows,
> right click
> > > on the .bat,
> > > then hit the security tab, and add something like
> everyone,
> > > or
> > > authenticated users, and select the correct acl's
> >
> > Is there a way to avoid editing access rights to 755
> for executable files
> > on network shares? Because my shares configured with
> "create mask = 644"
> > for user's uploaded files and I do not want to break
> this functionality and
> > want keeps user's files with 644 permissions on server.
> Is this possible
> > with Samba4?
> >
> > Thank You.
> >
> > --
> > To unsubscribe from this list go to the following URL
> and read the
> > instructions:? https://lists.samba.org/mailman/options/samba
> >
> -- 
> To unsubscribe from this list go to the following URL and
> read the
> instructions:? https://lists.samba.org/mailman/options/samba
>