On Tue, 29 Jan 2019 14:33:11 +0100 Marco Pirola via samba <samba at lists.samba.org> wrote:> Classic debian 9 installated from netinstall. the ip 192.168.1.6 it > is the machine (Classic debian 9 installated from netinstall) of the > my active directory dc >Your set up sounds similar to mine, except I use Devuan instead of Debian. You attached files containing: /etc/hostname dc That looks like a DC hostname to me. /etc/hosts 127.0.0.1 localhost 192.168.1.5 dc.robinood.tst dc Again, that looks like information from a DC. /etc/resolv.conf search robinood.tst nameserver 192.168.1.6 That is pointing to '192.168.1.6' as the nameserver and now you tell us, '192.168.1.6' is the DC, but I asked for the info from the Unix domain member. If the info was from a Unix domain member, it is the first one that I have ever seen called 'dc'. Can you please describe your set up and if the info wasn't from a Unix domain member, please supply the info from the Unix domain member holding the share. Rowland
what information do you want to know? Among other things, I use google trnanslate as my English is basic Il giorno mar 29 gen 2019 alle ore 15:14 Rowland Penny via samba < samba at lists.samba.org> ha scritto:> On Tue, 29 Jan 2019 14:33:11 +0100 > Marco Pirola via samba <samba at lists.samba.org> wrote: > > > Classic debian 9 installated from netinstall. the ip 192.168.1.6 it > > is the machine (Classic debian 9 installated from netinstall) of the > > my active directory dc > > > > Your set up sounds similar to mine, except I use Devuan instead of > Debian. > > You attached files containing: > > /etc/hostname > dc > > That looks like a DC hostname to me. > > /etc/hosts > 127.0.0.1 localhost > 192.168.1.5 dc.robinood.tst dc > > Again, that looks like information from a DC. > > /etc/resolv.conf > > search robinood.tst > nameserver 192.168.1.6 > > That is pointing to '192.168.1.6' as the nameserver and now you tell > us, '192.168.1.6' is the DC, but I asked for the info from the Unix > domain member. If the info was from a Unix domain member, it is the > first one that I have ever seen called 'dc'. > > Can you please describe your set up and if the info wasn't from a Unix > domain member, please supply the info from the Unix domain member > holding the share. > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba
On Wed, 30 Jan 2019 08:00:21 +0100 Marco Pirola <mapirola81 at gmail.com> wrote:> what information do you want to know? Among other things, I use google > trnanslate as my English is basic > >Lets start again ;-) I run an AD domain similar to yours, just with Devuan instead of Debian and I have no problems, so we need to compare you set up with mine, hopefully this will show where the problem lies. First, a brief view of my domain: 2 AD DC's Various Unix workstations Various Windows versions running in VM's I can connect, using Computer Manger, from a Windows 10 VM to a Unix domain member (using the 'rid' backend) and set Windows ACL's. So, what do we need from you ? What are your DC's ? How many, running Samba or Windows etc ? Is there anything in the logs ? What version of Windows are you using ? Is there anything in the logs ? You are connecting to a Unix domain member, Is there anything in the logs on this machine ? Please supply the following files from each Unix machine: /etc/hostname /etc/hosts /etc/resolv.conf /etc/krb5.conf /etc/samba/smb.conf /etc/nsswitch.conf Please tell us if a firewall is running on each machine. Please tell us if selinux or apparmor is installed on each machine, also, if installed, is it enabled. Please supply the output of the following commands from each Unix machine: hostname -s hostname -d hostname -f hostname -i hostname -I What user are you using to try and change the ACL's, is the user a member of Domains Admins ? Rowland
Hai. I've 3 options here. - Wrong right on the share folder AND/OR the folder before the share. /share is a no-no. Use /mnt/share. Even preffered. /mnt/samba/share /srv/samba/share ^^1 ^^2 If 1 or 2 is set wrong you wil get errors in RSAT. If 1 cant be changed, your get errors in RSAT. - Wrong mixed use of windows ACL and POSIX ACL's. - Missing SePrivileges. Example to check. https://github.com/thctlo/samba4/blob/master/samba-check-SePrivileges.sh Other things look normal in his setup. Any windows event id available to share ?? Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: woensdag 30 januari 2019 9:35 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] error witch rsat > > On Wed, 30 Jan 2019 08:00:21 +0100 > Marco Pirola <mapirola81 at gmail.com> wrote: > > > what information do you want to know? Among other things, I > use google > > trnanslate as my English is basic > > > > > > Lets start again ;-) > > I run an AD domain similar to yours, just with Devuan instead > of Debian > and I have no problems, so we need to compare you set up with mine, > hopefully this will show where the problem lies. > > First, a brief view of my domain: > > 2 AD DC's > Various Unix workstations > Various Windows versions running in VM's > > I can connect, using Computer Manger, from a Windows 10 VM to a Unix > domain member (using the 'rid' backend) and set Windows ACL's. > > So, what do we need from you ? > > What are your DC's ? How many, running Samba or Windows etc ? > Is there anything in the logs ? > > What version of Windows are you using ? > Is there anything in the logs ? > > You are connecting to a Unix domain member, Is there anything in the > logs on this machine ? > > Please supply the following files from each Unix machine: > > /etc/hostname > /etc/hosts > /etc/resolv.conf > /etc/krb5.conf > /etc/samba/smb.conf > /etc/nsswitch.conf > > Please tell us if a firewall is running on each machine. > Please tell us if selinux or apparmor is installed on each machine, > also, if installed, is it enabled. > > Please supply the output of the following commands from each Unix > machine: > > hostname -s > hostname -d > hostname -f > hostname -i > hostname -I > > What user are you using to try and change the ACL's, is the user a > member of Domains Admins ? > > Rowland > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >