On 11/02/16 18:53, Oscar . wrote:> Hi all.
>
> I have Samba 4.2.8 in a Debian Virtual Machine, i have domain, can join a
Windows 10 machine to domain, and i have logged with “administrator” domain
account in my Windows 10 machine, wih RSAT tools i can create users etc
>
> The problem is with a created folder in server.
>
> Mkdir /usuarios
>
> Smb.conf:
>
> # Global parameters
> [global]
> workgroup = PDC
> realm = PDC.CASA
> netbios name = SAMBA
> server role = active directory domain controller
> dns forwarder = 8.8.8.8
> vfs objects = acl_xattr
> map acl inherit = yes
> store dos attributes = yes
First of all, you really should remove the three lines after 'dns
forwarder', they are only required on a Samba Domain Member.
>
> [netlogon]
> path = /var/lib/samba/sysvol/pdc.casa/scripts
> read only = No
>
> [sysvol]
> path = /var/lib/samba/sysvol
> read only = No
>
> [usuarios]
> path = /usuarios
> read only = No
>
> I have done too :
>
> net rpc rights grant 'pcd.casa\Domain Admins'
SeDiskOperatorPrivilege -Uadministrator
Try again with:
net rpc rights grant 'PDC\Domain Admins' SeDiskOperatorPrivilege
-Uadministrator
> successful
>
> i cannot set permissions in security tab because there is no security tab
in Windows 10 accessing \\pdc.casa
You should be trying to access \\samba.pdc.casa
>
> also <getent group "Domain Admins"> dont return anything
and if i write <chgrp "Domain Admins" /usuarios> :
>
> chgrp: group invalid: «Domain Admins»
Is PAM setup correctly ?
Is /etc/nsswinbind setup correctly ?
>
> i have acl in fstab :
>
> user_xattr,acl,barrier=1,errors=remount-ro 0 1
You might as well remove 'user_xattr,acl,barrier=1', they are part of
ext4 defaults (that is provided you are using the default ext4 filesystem)
Rowland