On Wed, 30 May 2018 16:03:30 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:> We see that it is old ("SWAT", date) and ugly ... > > > # cat /etc/samba/smb.conf > # Samba config file created using SWAT > # from UNKNOWN (192.168.100.66) > # Date: 2012/07/23 14:38:02It isn't that old;-) You wont be using swat again, it went away, funnily enough just about the same time as your old smb.conf was created. Try this smb.conf: [global] unix charset = iso8859-15 security = ads realm = CUSTOMER.INTRA workgroup = CUSTOMER netbios aliases = samba server string = U1CUSTOMER winbind cache time = 10 winbind use default domain = yes template homedir = /mnt/MSA2040/smb/Homes/%D/%U restrict anonymous = 2 domain master = no local master = no preferred master = no invalid users = root bin daemon adm sync shutdown halt mail news \ uucp obey pam restrictions = yes interfaces = 192.168.100.4/24 bind interfaces only = Yes idmap config * : range = 3000-7999 idmap config * : backend = tdb idmap config CUSTOMER : range = 10000-20000 idmap config CUSTOMER : backend = rid # For ACL support on domain member vfs objects = acl_xattr full_audit map acl inherit = Yes store dos attributes = Yes unix extensions = no follow symlinks= yes wide links= yes load printers = no printcap name = /dev/null # Audit settings full_audit:prefix = %u|%I|%S full_audit:failure = connect full_audit:success = mkdir rmdir write pwrite rename unlink \ chmod fchmod chown fchown ftruncate full_audit:facility = local5 full_audit:priority = notice Rowland
Am 2018-05-30 um 16:41 schrieb Rowland Penny via samba:> On Wed, 30 May 2018 16:03:30 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> We see that it is old ("SWAT", date) and ugly ... >> >> >> # cat /etc/samba/smb.conf >> # Samba config file created using SWAT >> # from UNKNOWN (192.168.100.66) >> # Date: 2012/07/23 14:38:02 > > It isn't that old;-) > You wont be using swat again, it went away, funnily enough just about > the same time as your old smb.conf was created. > > Try this smb.conf: > > [global] > unix charset = iso8859-15 > > security = ads > realm = CUSTOMER.INTRA > workgroup = CUSTOMER > netbios aliases = samba > server string = U1CUSTOMER > > winbind cache time = 10 > winbind use default domain = yes > template homedir = /mnt/MSA2040/smb/Homes/%D/%U > > restrict anonymous = 2 > domain master = no > local master = no > preferred master = no > invalid users = root bin daemon adm sync shutdown halt mail news \ > uucp > obey pam restrictions = yes > > interfaces = 192.168.100.4/24 > bind interfaces only = Yes > > idmap config * : range = 3000-7999 > idmap config * : backend = tdb > idmap config CUSTOMER : range = 10000-20000 > idmap config CUSTOMER : backend = rid > > # For ACL support on domain member > vfs objects = acl_xattr full_audit > map acl inherit = Yes > store dos attributes = Yes > > unix extensions = no > follow symlinks= yes > wide links= yes > > load printers = no > printcap name = /dev/null > # Audit settings > full_audit:prefix = %u|%I|%S > full_audit:failure = connect > full_audit:success = mkdir rmdir write pwrite rename unlink \ > chmod fchmod chown fchown ftruncate > full_audit:facility = local5 > full_audit:priority = noticecan / should I test this with 3.6.25 already? Unfortunately I don't have a valid ADS user/pw yet there, so I may delay that update.
On Wed, 30 May 2018 17:22:56 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:> can / should I test this with 3.6.25 already? > Unfortunately I don't have a valid ADS user/pw yet there, so I may > delay that update.well, as to can, been sometime since I used 3.6.x, but I think it will work with it, 'should' is a different thing, it 'should' work, but I would suggest backing everything up before you try. Rowland