search for: 134administrators

Am 21.06.2016 um 10:41 schrieb lists: > Hi Achim, > > On 21-6-2016 0:01, Achim Gottinger wrote: >> Hi MJ and Rowland, >> >> I did abit of testing last week (two debian jesie servers with sernet >> 4.2 samba packages). Seems when rsync is run against rsyncd or involved >> via xinet as it is described in the wiki the user and group mapping does >> not

...but it's surprising (to me) that there is a difference at all: rsync to rsyncd result on DC4: > root at dc4:~/sysvol# getfacl /var/lib/samba/sysvol > getfacl: Removing leading '/' from absolute path names > # file: var/lib/samba/sysvol > # owner: root > # group: BUILTIN\134administrators > user::rwx > user:root:rwx > user:BUILTIN\134administrators:rwx > user:3000009:r-x > user:OURDOMAIN\134proxmox$:rwx > group::rwx > group:1078:r-x > group:BUILTIN\134administrators:rwx > group:3000009:r-x > group:OURDOMAIN\134proxmox$:rwx > mask::rwx > other::---...

Hi, i provisioned a domain and all went well, until i added the second dc.... for example: the new DC2 tells me: getfacl /usr/local/samba/var/locks/sysvol # file: usr/local/samba/var/locks/sysvol # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx user:BUILTIN\134administrators:rwx user:BUILTIN\134users:r-x user:ELEMAY\134guest:rwx user:ELEMAY\134domain\040guests:r-x group::rwx group:BUILTIN\134administrators:rwx group:BUILTIN\134users:r-x group:ELEMAY\134guest:rwx group:ELEMAY\134domain\040guests:r-x mask::rwx other:...

...and all went well, until i added the second >> dc.... >> >> for example: >> >> the new DC2 tells me: >> >> getfacl /usr/local/samba/var/locks/sysvol >> >> # file: usr/local/samba/var/locks/sysvol >> # owner: root >> # group: BUILTIN\134administrators >> user::rwx >> user:root:rwx >> user:BUILTIN\134administrators:rwx >> user:BUILTIN\134users:r-x >> user:ELEMAY\134guest:rwx >> user:ELEMAY\134domain\040guests:r-x >> group::rwx >> group:BUILTIN\134administrators:rwx >> group:BUILTIN\134users:r-...

...gt; that there is a difference at all: > > rsync to rsyncd result on DC4: >> root at dc4:~/sysvol# getfacl /var/lib/samba/sysvol >> getfacl: Removing leading '/' from absolute path names >> # file: var/lib/samba/sysvol >> # owner: root >> # group: BUILTIN\134administrators >> user::rwx >> user:root:rwx >> user:BUILTIN\134administrators:rwx >> user:3000009:r-x >> user:OURDOMAIN\134proxmox$:rwx >> group::rwx >> group:1078:r-x >> group:BUILTIN\134administrators:rwx >> group:3000009:r-x >> group:OURDOMAIN\134pro...

...t;>>> for example: >>>> >>>> the new DC2 tells me: >>>> >>>> getfacl /usr/local/samba/var/locks/sysvol >>>> >>>> # file: usr/local/samba/var/locks/sysvol >>>> # owner: root >>>> # group: BUILTIN\134administrators >>>> user::rwx >>>> user:root:rwx >>>> user:BUILTIN\134administrators:rwx >>>> user:BUILTIN\134users:r-x >>>> user:ELEMAY\134guest:rwx >>>> user:ELEMAY\134domain\040guests:r-x >>>> group::rwx >>>> group:...

...s:rwx default:group:5024:rwx default:mask::rwx default:other::--- ------------------ root at fileserver:/srv/samba/home# getfacl rs-01/ # file: rs-01/ # owner: administrator # group: domain\040users user::rwx user:rs-01:rwx user:administrator:rwx group::r-x group:domain\040users:r-x group:BUILTIN\134administrators:rwx group:domain\040admins:rwx group:5024:rwx mask::rwx other::--- default:user::rwx default:user:rs-01:rwx default:user:administrator:rwx default:group::r-x default:group:domain\040users:r-x default:group:BUILTIN\134administrators:rwx default:group:domain\040admins:rwx default:group:5024:rwx defau...

...24, compared to 3000300 on the DC2/DC3) Also getfacl /var/lib/samba/sysvol looks very different on DC4: > root at dc4:~# getfacl /var/lib/samba/sysvol/ > getfacl: Removing leading '/' from absolute path names > # file: var/lib/samba/sysvol/ > # owner: root > # group: BUILTIN\134administrators > user::rwx > user:root:rwx > user:BUILTIN\134administrators:rwx > user:3000009:r-x > user:OURDOMAIN\134proxmox$:rwx > group::rwx > group:BUILTIN\134server\040operators:r-x > group:BUILTIN\134administrators:rwx > group:3000009:r-x > group:OURDOMAIN\134proxmox$:rwx >...

...ttps://bugzilla.samba.org/show_bug.cgi?id=12164 But i've not understood how is related. The ACLs of my sysvol are: root at vdcsv1:~# getfacl /var/lib/samba/sysvol/ getfacl: Removing leading '/' from absolute path names # file: var/lib/samba/sysvol/ # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx user:BUILTIN\134administrators:rwx group::rwx group:BUILTIN\134administrators:rwx group:BUILTIN\134server\040operators:r-x group:3000002:rwx group:3000003:r-x mask::rwx other::--- default:user::rwx default:user:root:rwx default:user:BUILTIN\134administrators:rwx...

...wrote: > Hi, > > i provisioned a domain and all went well, until i added the second dc.... > > for example: > > the new DC2 tells me: > > getfacl /usr/local/samba/var/locks/sysvol > > # file: usr/local/samba/var/locks/sysvol > # owner: root > # group: BUILTIN\134administrators > user::rwx > user:root:rwx > user:BUILTIN\134administrators:rwx > user:BUILTIN\134users:r-x > user:ELEMAY\134guest:rwx > user:ELEMAY\134domain\040guests:r-x > group::rwx > group:BUILTIN\134administrators:rwx > group:BUILTIN\134users:r-x > group:ELEMAY\134guest:rwx &gt...

...>>> dc.... >>> >>> for example: >>> >>> the new DC2 tells me: >>> >>> getfacl /usr/local/samba/var/locks/sysvol >>> >>> # file: usr/local/samba/var/locks/sysvol >>> # owner: root >>> # group: BUILTIN\134administrators >>> user::rwx >>> user:root:rwx >>> user:BUILTIN\134administrators:rwx >>> user:BUILTIN\134users:r-x >>> user:ELEMAY\134guest:rwx >>> user:ELEMAY\134domain\040guests:r-x >>> group::rwx >>> group:BUILTIN\134administrators:rwx &g...

...cant enter your own home dir. Per example: Your ACL ( for the user ) > # File: rs-01 / > # Owner: administrator > # Group: domain \ 040users > user :: rwx > user: rs-01: rwx > user: administrator: rwx > group :: r-x > group: domain \ 040users: r-x > group: BUILTIN \ 134administrators: rwx > mask :: rwx > other :: --- > default: user :: rwx > default: user: rs-01: rwx > default: user: administrator: rwx > default: x r-group :: > default: group: domain \ 040users: r-x > default: group: BUILTIN \ 134administrators: rwx > default: mask :: rwx > default...

...T configure PAM on a DC. I tried "net cache flush" These tests succeed: wbinfo --ping-dc getent passwd COMPANY\\user getent group "COMPANY\\Domain Users" The output of “getfacl sysvol” looks strange: # file: usr/local/samba/var/locks/sysvol # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx user:3000000:rwx group::rwx group:BUILTIN\134administrators:rwx group:BUILTIN\134server\040operators:r-x group:3000002:rwx group:3000003:r-x mask::rwx other::--- default:user::rwx default:user:root:rwx default:user:3000000:rwx default:group::--- default:group:BUILTIN\134admi...

Hai, Ok, i expected a bit different outputs. On my DC, i use /home/samba/sysvol and /home/samba/netlogon. This is what i expected. getfacl /home/samba/ getfacl: Removing leading '/' from absolute path names # file: home/samba/ # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx group::rwx group:BUILTIN\134administrators:rwx group:BUILTIN\134server\040operators:r-x group:NT\040AUTHORITY\134system:rwx group:NT\040AUTHORITY\134authenticated\040users:r-x mask::rwx other::r-x default:user::rwx default:user:root:rwx default:group::--- default:group:BUILT...

...files protocols: db files services: db files ethers: db files rpc: db files netgroup: nis root at CY-DC:~# getfacl /var/lib/samba/sysvol getfacl: Removing leading '/' from absolute path names # file: var/lib/samba/sysvol # owner: root # group: BUILTIN\134administrators user::rwx user:root:rwx user:BUILTIN\134administrators:rwx user:BUILTIN\134server\040operators:r-x user:3000002:rwx user:3000003:r-x group::rwx group:BUILTIN\134administrators:rwx group:BUILTIN\134server\040operators:r-x group:3000002:rwx group:3000003:r-x mask::rwx other::--- default:user::rwx def...

...ve been able to fully test 'sysvol' on both DCs. If I run getfacl on sysvol on DC1, I get this: root at dc1:~# getfacl /usr/local/samba/var/locks/sysvol/ getfacl: Removing leading '/' from absolute path names # file: usr/local/samba/var/locks/sysvol/ # owner: root # group: BUILTIN\134administrators # flags: -s- user::rwx user:root:rwx user:BUILTIN\134administrators:rwx group::rwx group:BUILTIN\134administrators:rwx group:BUILTIN\134server\040operators:r-x group:3000002:rwx group:3000003:r-x mask::rwx other::--- default:user::rwx default:user:root:rwx default:user:BUILTIN\134administrators:rwx...

I'm scripting the ''replica'' of DC xID db (idmap.ldb) between DCs, following: https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory#Built-in_User_.26_Group_ID_Mappings but i've two question. 1) because i've just in place the sysvol replica, i've thinked of copying the 'idmap.ldb.bak' file on sysvol share (in debian,

...; > > These tests succeed: > wbinfo --ping-dc > getent passwd COMPANY\\user > getent group "COMPANY\\Domain Users" > > > The output of “getfacl sysvol” looks strange: > > # file: usr/local/samba/var/locks/sysvol > # owner: root > # group: BUILTIN\134administrators > user::rwx > user:root:rwx > user:3000000:rwx > group::rwx > group:BUILTIN\134administrators:rwx > group:BUILTIN\134server\040operators:r-x > group:3000002:rwx > group:3000003:r-x > mask::rwx > other::--- > default:user::rwx > default:user:root:rwx > default:...

...ba/sysvol and /home/samba/netlogon. >>> This is what i expected. >>> >>> getfacl /home/samba/ >>> >>> getfacl: Removing leading '/' from absolute path names >>> # file: home/samba/ >>> # owner: root >>> # group: BUILTIN\134administrators >>> user::rwx >>> user:root:rwx >>> group::rwx >>> group:BUILTIN\134administrators:rwx >>> group:BUILTIN\134server\040operators:r-x >>> group:NT\040AUTHORITY\134system:rwx >>> group:NT\040AUTHORITY\134authenticated\040users:r-x >>...

Dear, I have 2 DC's Samba4.4.5. I realize that there is a difference in mapping groups gid mappings. The /etc/nsswitch.conf are equal in DC's. I found difference in the smb.conf of DC's. The DC2 shows the name of winbind groups. The DC1 shows only the uid of the group / user. Could someone give me a hint? Smb.conf file DC1 [global] interfaces = lo eth0 netbios name = SRV14