Am 2018-06-14 um 12:27 schrieb Rowland Penny via samba:> On Thu, 14 Jun 2018 10:39:17 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >>> Well, seeing as 'compat' is 'files' with extras, you do not need >>> both. see 'man nsswitch.conf' >>> >>> I would go with: >>> >>> passwd compat winbind >>> shadow compat >>> group compat winbind >> >> The gentoo-wiki-entry says "Make sure the /etc/nsswitch.conf file >> contains files entry". >> > > Try reading 'man nsswitch.conf' on your distro, on my distro it > explains all about 'compat' > > Perhaps your nsswitch.conf should only use 'files' and not 'compat', > but either way, you shouldn't have both ;-) > > Rowland >on my way now ... glibc new, samba-4.5.16 for a start we now get: [2018/06/15 14:43:09.481113, 0] ../source3/winbindd/winbindd_group.c:45(fill_grent) Failed to find domain 'Unix Group'. Check connection to trusted domains! [2018/06/15 14:43:15.695664, 0] ../source3/winbindd/winbindd_group.c:45(fill_grent) Failed to find domain 'Unix Group'. Check connection to trusted domains! wbinfo -g/-u works smbstatus Samba version 4.5.16 PID Username Group Machine Protocol Version Encryption Signing ---------------------------------------------------------------------------------------------------------------------------------------- 473 -1 -1 192.168.100.133 (ipv4:192.168.100.133:60924) NT1 - - 473 -1 -1 192.168.100.133 (ipv4:192.168.100.133:60924) NT1 - - 473 -1 -1 192.168.100.133 (ipv4:192.168.100.133:60924) NT1 hmm ?
Am 2018-06-15 um 14:44 schrieb Stefan G. Weichinger via samba:> on my way now ... glibc new, samba-4.5.16 for a start > > we now get: > > [2018/06/15 14:43:09.481113, 0] > ../source3/winbindd/winbindd_group.c:45(fill_grent) > Failed to find domain 'Unix Group'. Check connection to trusted domains! > [2018/06/15 14:43:15.695664, 0] > ../source3/winbindd/winbindd_group.c:45(fill_grent) > Failed to find domain 'Unix Group'. Check connection to trusted domains!my mistake, one step further, looks good now .... stay tuned ;-)
Am 2018-06-15 um 15:16 schrieb Stefan G. Weichinger via samba:> Am 2018-06-15 um 14:44 schrieb Stefan G. Weichinger via samba: > >> on my way now ... glibc new, samba-4.5.16 for a start >> >> we now get: >> >> [2018/06/15 14:43:09.481113, 0] >> ../source3/winbindd/winbindd_group.c:45(fill_grent) >> Failed to find domain 'Unix Group'. Check connection to trusted domains! >> [2018/06/15 14:43:15.695664, 0] >> ../source3/winbindd/winbindd_group.c:45(fill_grent) >> Failed to find domain 'Unix Group'. Check connection to trusted domains! > > my mistake, one step further, looks good now .... stay tuned ;-)the [global] section looks good now, users can authenticate and open files ... fine While I wait for their local "admin-user" to test some PCs, I look at the share-definitions and find: WARNING: The "acl check permissions" option is deprecated For example in: [marketing] comment = jeder Vollzugriff path = /mnt/xyz/smb/Marketing acl check permissions = No acl map full control = No create mask = 0777 directory mask = 0777 read only = No Seems as if that was an extra desparate try to provide full access to that share ;-) I tend to not change anything non-necessary today but plan to clean up stuff like that asap. Should I just remove that line right now?