search for: 3000016

...d on the permissions of the Samba? In the end, I'm trying to see the permissions using the following commands: getfacl /mnt/data/share The result is this: getfacl: Removing leading '/' from absolute path names # file: mnt/data/share # owner: 3000000 # group: users user::rwx user:3000016:rwx group::r-x group:users:r-x group:3000000:rwx group:3000016:rwx mask::rwx other::r-x default:user::rwx default:user:3000000:rwx default:user:3000016:rwx default:group::r-x default:group:users:r-x default:group:3000016:rwx default:mask::rwx default:other::r-x Follows the smb.con...

...: * sid : S-0-0 result : NT_STATUS_UNSUCCESSFUL but further on in the file (probably coming from a random SMB file access) I see: Parsing value for key [IDMAP/SID2XID/S-1-5-21-3505373935-2275348003-3197909400-1104]: value=[3000016:B] [2016/07/11 01:10:56.209343, 10, pid=24476, effective(0, 0), real(0, 0)] ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) Parsing value for key [IDMAP/SID2XID/S-1-5-21-3505373935-2275348003-3197909400-1104]: id=[3000016], endptr=[:B] [2016/07/11 01:10:56.209352, 10, pid=24476, effe...

On 26/08/2019 20:43, Marcio Demetrio Bacci wrote: > Hi, > > Another strange situation occurs when I use the RSAT GPO tool in > Windows 7. The following message appears: > "RPC Server not available" > > Another situation is that I have created a GPO to allow helpdesk group > only to add stations in the domain, but this GPO does not work. > > The permissions

...a/sysvol/ >>>> # owner: root >>>> # group: 3000000 --> dn: CN=S-1-5-32-544 >>>> user::rwx >>>> user:root:rwx >>>> user:3000000:rwx --> dn: CN=S-1-5-32-544 >>>> user:3000009:r-x --> dn: CN=S-1-5-11 >>>> user:3000016:r-x --> dn: CN=S-1-5-32-549 >>>> user:3000017:rwx --> dn: CN=S-1-5-18 >>>> group::rwx >>>> group:3000000:rwx --> dn: CN=S-1-5-32-544 >>>> group:3000009:r-x --> dn: CN=S-1-5-11 >>>> group:3000016:r-x --> dn: CN=S-1-5-32-549 &...

...; from absolute path names >> # file: var/lib/samba/sysvol/ >> # owner: root >> # group: 3000000 --> dn: CN=S-1-5-32-544 >> user::rwx >> user:root:rwx >> user:3000000:rwx --> dn: CN=S-1-5-32-544 >> user:3000009:r-x --> dn: CN=S-1-5-11 >> user:3000016:r-x --> dn: CN=S-1-5-32-549 >> user:3000017:rwx --> dn: CN=S-1-5-18 >> group::rwx >> group:3000000:rwx --> dn: CN=S-1-5-32-544 >> group:3000009:r-x --> dn: CN=S-1-5-11 >> group:3000016:r-x --> dn: CN=S-1-5-32-549 >> group:3000017:rwx --> dn: CN=...

...;>>>> # group: 3000000 --> dn: CN=S-1-5-32-544 >>>>>> user::rwx >>>>>> user:root:rwx >>>>>> user:3000000:rwx --> dn: CN=S-1-5-32-544 >>>>>> user:3000009:r-x --> dn: CN=S-1-5-11 >>>>>> user:3000016:r-x --> dn: CN=S-1-5-32-549 >>>>>> user:3000017:rwx --> dn: CN=S-1-5-18 >>>>>> group::rwx >>>>>> group:3000000:rwx --> dn: CN=S-1-5-32-544 >>>>>> group:3000009:r-x --> dn: CN=S-1-5-11 >>>>>> group:...

...: S-0-0 > result : NT_STATUS_UNSUCCESSFUL > > but further on in the file (probably coming from a random SMB file access) > I see: > > Parsing value for key > [IDMAP/SID2XID/S-1-5-21-3505373935-2275348003-3197909400-1104]: > value=[3000016:B] > [2016/07/11 01:10:56.209343, 10, pid=24476, effective(0, 0), real(0, 0)] > ../source3/lib/idmap_cache.c:75(idmap_cache_find_sid2unixid) > Parsing value for key > [IDMAP/SID2XID/S-1-5-21-3505373935-2275348003-3197909400-1104]: > id=[3000016], endptr=[:B] > [2016/07/11 01:10...

...gt;> # file: var/lib/samba/sysvol/ >>> # owner: root >>> # group: 3000000 --> dn: CN=S-1-5-32-544 >>> user::rwx >>> user:root:rwx >>> user:3000000:rwx --> dn: CN=S-1-5-32-544 >>> user:3000009:r-x --> dn: CN=S-1-5-11 >>> user:3000016:r-x --> dn: CN=S-1-5-32-549 >>> user:3000017:rwx --> dn: CN=S-1-5-18 >>> group::rwx >>> group:3000000:rwx --> dn: CN=S-1-5-32-544 >>> group:3000009:r-x --> dn: CN=S-1-5-11 >>> group:3000016:r-x --> dn: CN=S-1-5-32-549 >>> group:30...

...3:~# getfacl /var/lib/samba/sysvol/ getfacl: Removing leading '/' from absolute path names # file: var/lib/samba/sysvol/ # owner: root # group: 3000000 --> dn: CN=S-1-5-32-544 user::rwx user:root:rwx user:3000000:rwx --> dn: CN=S-1-5-32-544 user:3000009:r-x --> dn: CN=S-1-5-11 user:3000016:r-x --> dn: CN=S-1-5-32-549 user:3000017:rwx --> dn: CN=S-1-5-18 group::rwx group:3000000:rwx --> dn: CN=S-1-5-32-544 group:3000009:r-x --> dn: CN=S-1-5-11 group:3000016:r-x --> dn: CN=S-1-5-32-549 group:3000017:rwx --> dn: CN=S-1-5-18 mask::rwx other::--- default:user::rwx defaul...

...20.544071, 0] ../../source3/smbd/service.c:183(chdir_current_service) chdir_current_service: vfs_ChDir(/var/samba/locks/locks/sysvol) failed: Permission denied. Current token: uid=3000020, gid=3000004, 12 groups: 3000020 3000004 3000005 3000021 3000008 100 3000014 3000015 3000003 3000000 3000009 3000016 Any Ideas? Greetings Thanks in advance Juan Franco

...t; # owner: root >>>>> # group: 3000000 --> dn: CN=S-1-5-32-544 >>>>> user::rwx >>>>> user:root:rwx >>>>> user:3000000:rwx --> dn: CN=S-1-5-32-544 >>>>> user:3000009:r-x --> dn: CN=S-1-5-11 >>>>> user:3000016:r-x --> dn: CN=S-1-5-32-549 >>>>> user:3000017:rwx --> dn: CN=S-1-5-18 >>>>> group::rwx >>>>> group:3000000:rwx --> dn: CN=S-1-5-32-544 >>>>> group:3000009:r-x --> dn: CN=S-1-5-11 >>>>> group:3000016:r-x --> d...

...Admins:rwx group:3000011:r-x mask::rwx other::--- AD-01: getfacl GPT.INI # file: GPT.INI # owner: SMC\134administrator # group: SMC\134Domain\040Admins user::rwx user:SMC\134administrator:rwx group::rwx group:SMC\134Domain\040Admins:rwx group:SMC\134Enterprise\040Admins:rwx group:3000008:r-x group:3000016:rwx group:3000018:r-x mask::rwx other::--- I would assume the inconsisteny is due to idmap being different, I'm not sure. The output of `samba-tool ntacl sysvolcheck` from the two servers is as follows: tainan: ERROR(<class 'samba.provision.ProvisioningError'>): uncaught exc...

...group: 3000000 --> dn: CN=S-1-5-32-544 >>>>>>> user::rwx >>>>>>> user:root:rwx >>>>>>> user:3000000:rwx --> dn: CN=S-1-5-32-544 >>>>>>> user:3000009:r-x --> dn: CN=S-1-5-11 >>>>>>> user:3000016:r-x --> dn: CN=S-1-5-32-549 >>>>>>> user:3000017:rwx --> dn: CN=S-1-5-18 >>>>>>> group::rwx >>>>>>> group:3000000:rwx --> dn: CN=S-1-5-32-544 >>>>>>> group:3000009:r-x --> dn: CN=S-1-5-11 >>>&gt...

Hi, The output is when i run getfacl on a correct folder; [root at server1 cafer]# getfacl Public# file: Public# owner: ege# group: gebzememuser::rwxgroup::r-xother::r-x And second output; on a folder which was created on windows 7 by ege [root at server1 cafer]# getfacl cccc# file: cccc# owner: 3000016# group: 3000021user::rwxuser:3000021:r-xgroup::r-xgroup:3000016:rwxgroup:3000021:r-xmask::rwxother::r-xdefault:user::rwxdefault:user:3000016:rwxdefault:group::r-xdefault:group:3000021:r-xdefault:mask::rwxdefault:other::r-x From: Gordon Messmer <gordon.messmer at gmail.com> To: CentO...

...dows machines using the DC as their nameserver ? > > I am not sure if I understand your comment about the rid backend: > I added users with the samba-tool: > samba-tool user create kirchner > After that getent shows the user with ids: > getent passwd kirchner > SMB\kirchner:*:3000016:100::/home/SMB/kirchner:/bin/false > > So the user seems to have an id for user and group and I can use this > uid to give access to files on the server. > OK, the '3000016' is allocated in idmap.ldb on the Samba DC, and the allocation is done on a first come, first served ba...

...acl: Removing leading '/' from absolute path names > # file: var/lib/samba/sysvol/ > # owner: root > # group: 3000000 --> dn: CN=S-1-5-32-544 > user::rwx > user:root:rwx > user:3000000:rwx --> dn: CN=S-1-5-32-544 > user:3000009:r-x --> dn: CN=S-1-5-11 > user:3000016:r-x --> dn: CN=S-1-5-32-549 > user:3000017:rwx --> dn: CN=S-1-5-18 > group::rwx > group:3000000:rwx --> dn: CN=S-1-5-32-544 > group:3000009:r-x --> dn: CN=S-1-5-11 > group:3000016:r-x --> dn: CN=S-1-5-32-549 > group:3000017:rwx --> dn: CN=S-1-5-18 > mask::rwx...

...only access netlogon and sysvol, using \\192.168.1.50 I can only access the shares. I am not sure if I understand your comment about the rid backend: I added users with the samba-tool: samba-tool user create kirchner After that getent shows the user with ids: getent passwd kirchner SMB\kirchner:*:3000016:100::/home/SMB/kirchner:/bin/false So the user seems to have an id for user and group and I can use this uid to give access to files on the server. 2016-11-05 9:08 GMT+01:00 Rowland Penny via samba <samba at lists.samba.org>: > On Sat, 05 Nov 2016 07:06:19 +0100 > Maximilian Kirchner...

...gt;> # file: var/lib/samba/sysvol/ >>> # owner: root >>> # group: 3000000 --> dn: CN=S-1-5-32-544 >>> user::rwx >>> user:root:rwx >>> user:3000000:rwx --> dn: CN=S-1-5-32-544 >>> user:3000009:r-x --> dn: CN=S-1-5-11 >>> user:3000016:r-x --> dn: CN=S-1-5-32-549 >>> user:3000017:rwx --> dn: CN=S-1-5-18 >>> group::rwx >>> group:3000000:rwx --> dn: CN=S-1-5-32-544 >>> group:3000009:r-x --> dn: CN=S-1-5-11 >>> group:3000016:r-x --> dn: CN=S-1-5-32-549 >>> group:30...

.../sbin/winbindd -D --option=server role check:inhibit=yes --foreground If I check a couple of users, one with a uidNumber & gidNumber, the other without: root at testdc1:~# getent passwd user1 user1:*:10003:10000::/home/SAMBADOM/user1:/bin/false root at testdc1:~# getent passwd user2 user2:*:3000016:10000:Jane Doe:/home/SAMBADOM/user2:/bin/false Do the same on the other DC: root at testdc2:~# getent passwd user1 user1:*:10003:10000::/home/SAMBADOM/user1:/bin/false root at testdc2:~# getent passwd user2 user2:*:3000015:10000:Jane Doe:/home/SAMBADOM/user2:/bin/false root at testdc2:~# cat /etc...

...his isn't happening. Does anyone have any idea why not? cheers, Jim Excerpt from getent passwd: saned:x:110:117::/home/saned:/bin/false FASTFOOD\Administrator:*:0:100::/home/FASTFOOD/Administrator:/bin/false FASTFOOD\Guest:*:3000011:3000012::/home/FASTFOOD/Guest:/bin/false FASTFOOD\krbtgt:*:3000016:100::/home/FASTFOOD/krbtgt:/bin/false FASTFOOD\jim:*:3000019:100:Jim Chuffff:/home/FASTFOOD/jim:/bin/false smb.conf: [global] workgroup = FASTFOOD realm = FASTFOOD.LAN netbios name = CHIPSHOP server role = active directory domain controller dns forwarder =...