On Wed, 1 Jul 2020 13:03:50 +0100 Rowland penny via samba <samba at lists.samba.org> wrote:> On 01/07/2020 12:47, Robert T. Wagner via samba wrote: > > > > On 01.07.2020 13:35, Rowland penny via samba wrote: > >> On 01/07/2020 12:15, Robi. T. Wagner via samba wrote: > >>>> root at localhost:~# getfacl /home/samba/users/ > >>>> getfacl: Removing leading '/' from absolute path names > >>>> # file: home/samba/users/ > >>>> # owner: root > >>>> # group: root > >>>> user::rwx > >>>> group::rwx > >>>> other::rwx > >>>> root at localhost:~# samba-tool ntacl get /home/samba/users > >>>> --as-sddl > >>>> O:LAG:S-1-22-2-0D:(A;;0x001f01ff;;;LA)(A;;0x001f01ff;;;S-1-22-2-0)(A;;0x001f01ff;;;WD)(A;OICIIO;0x001f01ff;;;CO)(A;OICIIO;0x001200a9;;;CG)(A;OICIIO;0x001200a9;;;WD) > >>> -------------------------------------------------------------------------------------------------------------------- > >>> > >>> Sorry for the bad format....I am fighting to get lists.samba.org > >>> into a newsreader without success (bloody Austrian A1 doesn't > >>> have a news server anymore and I couldn't find a nntp server with > >>> samba lists) If you change the file/directory owner to a unix > >>> user, windows explorer is crashing immediately in the security > >>> tab. The only exception is the user root, because it mapped to > >>> Administrator. > >>> > >>> > >>> Mani > >> > >> Now I think about it, we have had this before and it is a Windows > >> bug, if I remember correctly, someone at Windows was supposed to > >> be looking into it. > >> > >> Rowland > >> > > Yes, this was a short discussion a year ago with no outcome, till I > > found by accident the post from Julia with the patch a few months > > ago. > > > > Lets put it this way: Explorer shouldn't crash, when Samba is > > sending nonsense, when a user is mis-using an AD-DC as member > > server ;-) > > The problem from my point of view is, I cannot recreate the crash. My > feelings are that the OP hasn't set up the share correctly, or hasn't > mapped root to Administrator. I am testing using a share on a > raspberrypi and even if I change the directory owner to 'pi', it does > not crash Windows explorer. > > Rowland > > >I followed the Samba guide to setup everything but a lot of things doesn't works for me. Now I'm able to create the share and set permissions (using the patch) but I'm unable to enter to the Windows client with new users. -- ----------------------------------------------------------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY ------------------------------------------------------------
On 08/07/2020 08:06, Enrico Morelli wrote:> On Wed, 1 Jul 2020 13:03:50 +0100 > Rowland penny via samba <samba at lists.samba.org> wrote: > >> The problem from my point of view is, I cannot recreate the crash. My >> feelings are that the OP hasn't set up the share correctly, or hasn't >> mapped root to Administrator. I am testing using a share on a >> raspberrypi and even if I change the directory owner to 'pi', it does >> not crash Windows explorer. >> >> Rowland >> >> >> > > I followed the Samba guide to setup everything but a lot of things > doesn't works for me. > Now I'm able to create the share and set permissions (using the patch) > but I'm unable to enter to the Windows client with new users.Enrico, please do not think I am trying to get at you, perhaps I could have worded that better, but I just dashed off a reply. The problem is that I am not the one who has control? of your network and can only offer advice from a distance. As I said, I cannot get the latest Win10 to crash and Windows has admitted that this is their problem if it does crash. Can you please download this: https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh Run it on the Samba machine that you are trying to connect Windows to and the post the output, do not attach it to the post, this list strips attachments. Perhaps you have some small setting wrong :-( Rowland
On Wed, 8 Jul 2020 09:13:37 +0100 Rowland penny via samba <samba at lists.samba.org> wrote:> On 08/07/2020 08:06, Enrico Morelli wrote: > > On Wed, 1 Jul 2020 13:03:50 +0100 > > Rowland penny via samba <samba at lists.samba.org> wrote: > > > >> The problem from my point of view is, I cannot recreate the crash. > >> My feelings are that the OP hasn't set up the share correctly, or > >> hasn't mapped root to Administrator. I am testing using a share on > >> a raspberrypi and even if I change the directory owner to 'pi', it > >> does not crash Windows explorer. > >> > >> Rowland > >> > >> > >> > > > > I followed the Samba guide to setup everything but a lot of things > > doesn't works for me. > > Now I'm able to create the share and set permissions (using the > > patch) but I'm unable to enter to the Windows client with new > > users. > > Enrico, please do not think I am trying to get at you, perhaps I > could have worded that better, but I just dashed off a reply. > > The problem is that I am not the one who has control? of your network > and can only offer advice from a distance. As I said, I cannot get > the latest Win10 to crash and Windows has admitted that this is their > problem if it does crash.For the moment as I wrote more times, the problem isn't the crash (that I solved with the patch) but the impossibility to login in the Windows client with new user created on Samba server.> > Can you please download this: > https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh > > Run it on the Samba machine that you are trying to connect Windows to > and the post the output, do not attach it to the post, this list > strips attachments. > > Perhaps you have some small setting wrong :-( > > Rowland > > >This is the output of the script: Collected config --- 2020-07-08-10:53 ----------- Hostname: fiorgen7 DNS Domain: cerm.unifi.it FQDN: fiorgen7.cerm.unifi.it ipaddress: 150.217.146.76 2001:760:2c05:146:222:64ff:feb9:9a88 ----------- WARNING: kinit Administrator will fail and this needs to be fixed first. unable to verify DNS kerberos._tcp SRV records Server: 150.217.1.32 Address: 150.217.1.32#53 ** server can't find _kerberos._tcp.cerm.unifi.it: NXDOMAIN ------------------------------------------------------------- but if on the server I run: # kinit administrator Password for administrator at CERM.UNIFI.IT: Warning: Your password will expire in 22 days on Thu 30 Jul 2020 12:30:01 PM CEST # klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator at CERM.UNIFI.IT Valid starting Expires Service principal 07/08/2020 10:53:29 07/08/2020 20:53:29 krbtgt/CERM.UNIFI.IT at CERM.UNIFI.IT renew until 07/09/2020 10:53:23 -- ----------------------------------------------------------- Enrico Morelli System Administrator | Programmer | Web Developer CERM - Polo Scientifico via Sacconi, 6 - 50019 Sesto Fiorentino (FI) - ITALY ------------------------------------------------------------