search for: 28v

...ng 'Domain Computers' access to "CN=demo01,CN=Users,DC=samdom,DC=example,DC=com", the container will inherit ACES and 'Domain Computers' can read the sddls, list children and read control. :-) See here: https://msdn.microsoft.com/en-gb/library/windows/desktop/aa374928%28v=vs.85%29.aspx and here: https://msdn.microsoft.com/en-gb/library/windows/desktop/aa379602%28v=vs.85%29.aspx

...is totally >> untested (I haven't even checked it compiles), but the idea should work. >> > MSDN says "The pos value is stored in an internal format and is intended > for use only by *fgetpos* and *fsetpos*." (http://msdn.microsoft.com/en-** > us/library/70hdhh4t%28v=vs.80%**29.aspx<http://msdn.microsoft.com/en-us/library/70hdhh4t%28v=vs.80%29.aspx>), > so I don't think it's a good idea to use it this way even if tests > suggested it works. > > I'll write a test program tomorrow to try the fflush+_lseeki64 approach. > > Anoth...

...t contents redirected to folders on a member server. It looks like I will need to designate the remote server as trusted for delegation. Is this currently supported by Samba 4.3.x? I plan to follow these two documents to achieve this. Thanks. https://technet.microsoft.com/en-us/library/cc757963%28v=ws.10%29.aspx https://technet.microsoft.com/en-us/library/cc749610%28v=ws.10%29.aspx -- -James

I'd like read write MS OLE structured storage files on the Mac. Does Wine provide an API to achieve that? I know the format of the file. Thanks -Attila

Hi, if you use the UNIX attributes the primary group is ignored if you use winbind and the primary group of the AD attributes is used. So every user has the "Domain Users" group as primary group. I also read that you are not supposed to change the AD primary group to another than "Domain Users". Is there a way to set the UNIX primary group to another group without causing

...[...] Microsoft says: "serverState: Indicates whether the server is enabled or disabled. A value of 1 indicates that the server is enabled. A value of 2 indicates that the server is disabled. All other values are invalid." (http://msdn.microsoft.com/en-us/library/windows/desktop/ms679776%28v=vs.85%29.aspx) But I cannot find information if this flag must only be set on one of the PDC? Or do samba not support this attrtibute? subRefs: "List of subordinate references of a Naming Context." (http://msdn.microsoft.com/en-us/library/windows/desktop/ms679895%28v=vs.85%29.aspx) dn...

Hi, When I change dsHeuristics=0000002001001 like M$ said: https://technet.microsoft.com/en-us/library/cc816788%28v=ws.10%29.aspx Not works.

Am 22.01.2015 um 17:19 schrieb John Yocum: >> When I change dsHeuristics=0000002001001 like M$ said: >> >> https://technet.microsoft.com/en-us/library/cc816788%28v=ws.10%29.aspx >> >> Not works. >> > > I've got anonymous binds enabled, using the instructions at > http://www.petri.com/anonymous_ldap_operations_in_windows_2003_ad.htm But everyone should really think about if it's a good idea to allow anonymous bind to AD....

What's the password requirements when I enable the option: complexity=on ? How many characters ? What special characters?, etc. My regards.

Could someone explain to me what role does the Authenticating Kerberos NTLM in Authenticating NTLM explained in http://wiki.dovecot.org/HowTo/ActiveDirectoryNtlm ? Not understand that relationship between NTLM and Kerberos?. I have to configure thunderbird with simple password method and leave the password to be blank or have to use the gssapi? Although gssapi not supported by windows right?

Small sidenote in regards to the wiki, there is also an V6 since windows 10 aniversary. https://technet.microsoft.com/en-us/library/jj649079%28v=ws.11%29.aspx Am 03.05.2017 um 09:52 schrieb Rowland Penny via samba: > On Wed, 3 May 2017 09:15:30 +0200 > Jakub Kulesza via samba <samba at lists.samba.org> wrote: > >> [profiles] >> path = /var/local/samba/var/lib/samba/profiles >> read only = no >>...

Hey all, according to the whitepaper http://technet.microsoft.com/en-us/library/cc736591%28v=ws.10%29.aspx I would like to a windows shortcut on the desktop that allows me to open and run the "Group Policy Editor" *for my samba4/AD domain*. The shortcut command should be: "gpedit.msc /gpobject:"LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=mydom, DC=...

...le about dns islanding. http://retrohack.com/a-word-or-two-about-dns-islanding/ and with only 2 dc's setup the resolv.confs like : DC01 Primary DNS 10.1.1.2 Secondary DNS 127.0.0.1 DC02 Primary DNS 10.1.1.1 Secondary DNS 127.0.0.1 http://technet.microsoft.com/en-us/library/ff807362%28v=ws.10%29.aspx says: If the loopback IP address is the first entry in the list of DNS servers, Active Directory might be unable to find its replication partners. but this is manly MS DNS based, since there was a bug in the MS DNS server, concerning islanding.. Louis >-----Oorspronkelijk be...

Hi all, has anyone here experience with storing BitLocker and TPM data in AD DS on Samba? I have stumbled across this Microsoft page ( https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-8.1-and-8/jj635854%28v%3dws.11%29) stating that Windows 2008 R2 needs a schema extension to handle this. Since this is not listed as a safe update in the wiki ( https://wiki.samba.org/index.php/Samba_AD_schema_extensions), I would like to know if anybody has already tried this, since I do not have any experience with res...

...ly untested (I haven't even checked it compiles), but > the idea should work. > > MSDN says "The pos value is stored in an internal format and is > intended for use only by *fgetpos* and *fsetpos*." > (http://msdn.microsoft.com/en-us/library/70hdhh4t%28v=vs.80%29.aspx), > so I don't think it's a good idea to use it this way even if tests > suggested it works. > > I'll write a test program tomorrow to try the fflush+_lseeki64 > approach. > > Another solution - although a bit ugly - might be to dis...

...y to support this > is indeed the hard/tedious part. There are precedents from other languages that could be used as a template. For example, .NET and Java both have very well defined exception hierarchies that could serve as a starting point. https://msdn.microsoft.com/en-us/library/z4c5tckx%28v=vs.110%29.aspx https://docs.oracle.com/javase/7/docs/api/java/lang/package-tree.html Who is the best person to ask/cajole to start getting this implemented? -- Regards, Richie Learning R 4dpiecharts.com

...be default. ;-) > > At work I have all server (4.1.17) running on their default value. But > we encountered some SMB2 caching problems. But this was client related > and can be controlled via registry/GPO settings, if appearing: > https://technet.microsoft.com/zh-tw/library/ff686200%28v=ws.10%29.aspx > > > Regards, > Marc -- -James

...vise to use .local, sometimes it seems >> to be needed to make a proper location for a running domain where even >> .cityname cannot accomplish what you need. > > > Hi, even microsoft don't recommend using .local, see > http://technet.microsoft.com/en-us/library/cc726016%28v=ws.10%29.aspx/ > > For the vast majority of people, using .local can and will cause problems, > so please, don't use it. > > Rowland > > >> >> To be honest I don't run Avahi and will not either. Avahi and mdns are >> actually only designed because of o...

Thank you both precisions : ) My users have no "@" in their names (samAccountName nor userPrincipalName nor anything) except in mail attribute). >From https://msdn.microsoft.com/en-us/library/ms679635%28v=vs.85%29.aspx which I read before initial post I understand AD can have this limitation of 20 chars if and only if you decide to support (so) old clients (that we should stop thinking about them). In first table the limit of 20 chars is there. In others tables this limit seems to me pushed up to 25...

...2zDQuSfevMUvkgWRYcpdw >>>>> hY8AoLxNJzOUPa0E3+BEo/zwJ88xk27J >>>>> =e33p >>>>> -----END PGP SIGNATURE----- >>>> >>> >>> It would seem that it is possible, see: >>> http://technet.microsoft.com/en-us/library/cc738208%28v=ws.10%29.aspx >>> Only problem, I do not know of any Unix tool to do it and do >>not know >>> if rendom.exe will work with a samba4 AD DC. >>> >>> Rowland >>> >>Thank you for the link Rowland, gotta give it an try in an test >>environme...