Of course.
[global]
security = ADS
workgroup = INVENTEX
realm = INVENTEX.LOCAL
log file = /var/log/samba/%m.log
log level = 1
# Default ID mapping configuration for local BUILTIN accounts and groups
on a domain member. The default (*) domain: - must not overlap with any domain
ID mapping configuration! - must use a read-write-enabled back end,
# such as tdb. - Adding just this is not enough - You must set a DOMAIN
backend configuration, see below
idmap config * : backend = tdb
idmap config * : range = 3000-7999
idmap config INVENTEX : backend = rid
idmap config INVENTEX : range = 100000 - 199999
#======================= Share Definitions ======================= [Images]
path = /home/share/images
readonly = no
Mit freundlichen Grüßen | best regards
Michael Funke
-----Ursprüngliche Nachricht-----
Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland Penny
via samba
Gesendet: Dienstag, 20. November 2018 19:31
An: samba at lists.samba.org
Betreff: Re: [Samba] Problem with Windows Server Backup
On Tue, 20 Nov 2018 18:17:32 +0000
Michael Funke via samba <samba at lists.samba.org> wrote:
> Hey,
>
> I have a domain controller made with Windows Server 2016 and two file
> server, one made with Windows Server 2016 and one with Debian and
> Samba 4.5.12. If I want to use Windows Server Backup on my Exchange
> Server 2016 and use a share on the windows fileserver, I have no
> problems. If I use the Samba-share, it will save occasionally, most of
> the time not. I use Samba with POSIX ACLs and the same group
> "grp-backup" has full control on both shares. In the group are
the
> domain-admins and also the PCs/Servers. The event id at the Exchange
> server is 16389 and it tells me some problems with the Microsoft
> exchange writer and Microsoft Exchange Replication service VSS Writer
> has also a problem.
>
> Where is the problem?
>
> Mit freundlichen Grüßen | best regards
>
>
> Michael Funke
>
>
Can we start by seeing your smb.conf from the Debian machine ?
Rowland
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
On Tue, 20 Nov 2018 18:38:18 +0000 Michael Funke via samba <samba at lists.samba.org> wrote:> Of course. > > [global] > security = ADS > workgroup = INVENTEX > realm = INVENTEX.LOCAL > log file = /var/log/samba/%m.log > log level = 1 > # Default ID mapping configuration for local BUILTIN accounts > and groups on a domain member. The default (*) domain: - must not > overlap with any domain ID mapping configuration! - must use a > read-write-enabled back end, # such as tdb. - Adding just this is not > enough - You must set a DOMAIN backend configuration, see below idmap > config * : backend = tdb idmap config * : range = 3000-7999 idmap > config INVENTEX : backend = rid idmap config INVENTEX : range > 100000 - 199999 > > #======================= Share Definitions ======================> [Images] path = /home/share/images > readonly = no >OK, add these lines to the [global] section: # For ACL support on domain member vfs objects = acl_xattr map acl inherit = Yes store dos attributes = Yes Restart Samba and then go and read this wiki page: https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs Rowland
Okay, I should use Windows ACLs. But what is the reason for this? Is POSIX ACLs not useable for this? Mit freundlichen Grüßen | best regards Michael Funke -----Ursprüngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland Penny via samba Gesendet: Dienstag, 20. November 2018 19:58 An: samba at lists.samba.org Betreff: Re: [Samba] Problem with Windows Server Backup On Tue, 20 Nov 2018 18:38:18 +0000 Michael Funke via samba <samba at lists.samba.org> wrote:> Of course. > > [global] > security = ADS > workgroup = INVENTEX > realm = INVENTEX.LOCAL > log file = /var/log/samba/%m.log > log level = 1 > # Default ID mapping configuration for local BUILTIN accounts > and groups on a domain member. The default (*) domain: - must not > overlap with any domain ID mapping configuration! - must use a > read-write-enabled back end, # such as tdb. - Adding just this is not > enough - You must set a DOMAIN backend configuration, see below idmap > config * : backend = tdb idmap config * : range = 3000-7999 idmap > config INVENTEX : backend = rid idmap config INVENTEX : range > 100000 - 199999 > > #======================= Share Definitions ======================= > [Images] path = /home/share/images > readonly = no >OK, add these lines to the [global] section: # For ACL support on domain member vfs objects = acl_xattr map acl inherit = Yes store dos attributes = Yes Restart Samba and then go and read this wiki page: https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs Rowland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba