search for: adam_xu

...t disallow setting the administrator's unix attributes ? just curious, everything works ok in my production env. yours Adam From: Rowland Penny via samba Date: 2018-04-20 17:03 To: samba Subject: Re: [Samba] administrator's unix attributes is missing On Fri, 20 Apr 2018 15:48:43 +0800 adam_xu--- via samba <samba at lists.samba.org> wrote: > Hello, everyone. I have set up a new samba AD DC in my experimental > environment. Version 4.7.7 of sernet samba. Everything is Ok. and I > set some user's unix attributes in a windows client wia RSAT. every > user can be got...

...e administrator maped to root can not access any share folder. Best, 徐星亚 天演药业（苏州）有限公司 苏州工业园区星湖街218号生物纳米园C14幢4楼 邮编: 215123 电话: 86-512-8777-3585 From: Rowland penny via samba Date: 2019-06-03 23:42 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 16:09, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > Yes. all users primary group is "domain users". > > my "domain admins" has a gidNumber. > Have you followed this: https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs Is DNS setup correctly ? and...

On 05/06/2019 09:08, adam_xu at adagene.com.cn wrote: > Hi Rowland, > >  I can manage the security permission, but I can't manage the share > permission after I remove the user "everyone"'s share permission and > add "domain admins" and "domain user" share permission. >...

On 05/06/2019 08:37, adam_xu at adagene.com.cn wrote: > Hi Rowland , > > I used to manage file or folder permissions using administrator > account in Windows Client. So how could I do this task if the > administrator can't do this after I mapped it to root in fileserver > and remove it's uidNumber...

On 05/06/2019 09:26, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > English?is?not?my?native?language.It?seems?that?the?communication?between?us > was a?misunderstanding. what I want is just > "IGNORE?the?'share'?tab,?do?not?touch?it,?forget?it?is?there." > Thank?you?for?your?patience....

On 05/06/2019 09:51, adam_xu at adagene.com.cn wrote: > Hi Rowland , > > In?some scenarios,?we?have?hundreds > of?shared?folders.?We?don't?want?users?to?see?too?many?folders,?so?we?configure?share?permissions?and?set > "hide unreadable = yes" in smb.conf. then users can only see the > folder...

Hi Rowland, Yes. all users primary group is "domain users". my "domain admins" has a gidNumber. Best, yours Adam From: Rowland penny via samba Date: 2019-06-03 22:44 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 15:29, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > I have checked that Adinistrator is a member of "Domain Admins" in ADUC. > Base Permission of the share folder is 0770 and own is root and the > groups is "domain admins" in linux. > since "smbstatus -b" s...

...can's acess any share folder useing the Administrator account. so what should I do, could you give me a suggestion, Thanks. Best, yours Adam From: Rowland penny via samba Date: 2019-06-03 17:33 To: samba Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 10:09, adam_xu--- via samba wrote: > Hi sambalist, > > I'm using samba ad dc for about 2 years. I have 2 DCs and One file server. I didn't map the Administrator to root because the wiki said: > > "Mapping the domain administrator to the local root account is optional. Only configure...

On 05/06/2019 03:22, adam_xu--- via samba wrote: > Hi sambalist, > > I set up a new test environment to test the problem. still the same result. It seems that if I didn't give administrator a uidNumber in unix attributes and only map this user to root. it can manage the share folder in fsmgmt.msc, but after I remo...

Hello, everyone. After some windows 10 client join to our samba AD DC. A lot of setting is missing in the windows 10 PCs. so I need to import some windows 10 Administrative Templates to samba dc like that: https://support.microsoft.com/en-us/help/3087759/how-to-create-and-manage-the-central-store-for-group-policy-administra Unfortunately, I didn't see any dir named

...DC2 and then demoting DC1. After that ,I join the DC1 from DC2 with the fsmo role to the domain again. Right? Is there any other method that I can edit the sam.ldb file directly and add the dsServiceName entry of the DC1? yours Adam From: Andrew Bartlett Date: 2018-02-09 06:51 To: adam_xu at adagene.com.cn; samba Subject: Re: [Samba] Bad DSA objectGUID ed8970e5-84cc-43dd-89f1-4af8d6ab675a for sid S-1-5-21-570971082-1333357699-3675202899-1375 On Fri, 2018-02-09 at 01:01 +0800, adam_xu--- via samba wrote: > Hello，I'm using samba ad dc about a year. I have 2 DCs, One is DC1 with...

...= no cat /etc/samba/user.map !root = NTBAOBEI\Administrator Best, 徐星亚 天演药业（苏州）有限公司 苏州工业园区星湖街218号生物纳米园C14幢4楼 邮编: 215123 电话: 86-512-8777-3585 From: Rowland penny via samba Date: 2019-06-03 22:14 To: sambalist Subject: Re: [Samba] How to fix mapping Administrator to root On 03/06/2019 15:06, adam_xu at adagene.com.cn wrote: > Hi Rowland, > > here's what in my idmap.ldb > # record 39 > dn: CN=S-1-5-21-214324388-144513417-3129160214-500 > cn: S-1-5-21-214324388-144513417-3129160214-500 > objectClass: sidMap > objectSid: S-1-5-21-214324388-144513417-3129160214-500 &gt...

...t, it's primary group is root. so it lose the share folder since I have "hide unreadable = yes" in smb.conf. Does any one knows why the administrator's primary group is not "domain admins" ? is this a bug or i missing something import config? Best, yours Adam From: adam_xu at adagene.com.cn Date: 2019-06-04 08:27 To: Rowland penny; sambalist Subject: Re: Re: [Samba] How to fix mapping Administrator to root Hi Rowland , I have followed the wiki's step, the DNS works OK and I have use the fileserver for 2 years. here's a share folder "IT"'s acl...

On 05/06/2019 10:18, adam_xu--- via samba wrote: > Hi , > > For example. I have a share service named "IT", I want only members in the IT team can see that share, members in other team can't even see the share. Then I would do this: > remove the user "everyone"'s share permission and a...

On Fri, Jul 13, 2018 at 10:16:49AM +0800, adam_xu--- via samba wrote: > Please note that: red hat's samba 4.7 has no AD DC function! Oh, thanks. I do see a samba-dc package: # yum info samba-dc Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile Available Packages Name : samba-dc Arch : x86_64 Version...

On Thu, 31 May 2018 13:17:06 +0800 adam_xu--- via samba <samba at lists.samba.org> wrote: > Hello everyone. I have tested this in my testing env. there's no this > bug in my test env with the same smb.conf. > > the system version and the samba version are the same in testing and > production env. > > the di...

hello, everyone. I'm have a file server using samba 4.7.1 and it is a domain member. I'm using the vfs objects "recycle". everything works ok except that I have add the "profiles" directory as an exclude_dir in vfs recycle, but when I delete a file in \\profiles\myusername.V2\Desktop\filename.txt, the file goes to \\recycle. It seems that the exclue rule do not take

Hello, everyone. I have set up a new samba AD DC in my experimental environment. Version 4.7.7 of sernet samba. Everything is Ok. and I set some user's unix attributes in a windows client wia RSAT. every user can be got in a linux domain member via "getent passwd", but the user administrator who has been set unix attributes can not be got in that linux domain member. here is

Hi, Rowland, I have the same issue too. I can't find any useful info after I ran 'man smbcontrol', could you give us a clearer answer. Thanks. Yours Adam From: Rowland Penny via samba Date: 2018-06-20 17:40 To: samba Subject: Re: [Samba] hosts allow option is not applaying without restart smbd On Wed, 20 Jun 2018 16:22:36 +0700 Vladimir Eltsov via samba <samba at

Hi sambalist, I'm using samba ad dc for about 2 years. I have 2 DCs and One file server. I didn't map the Administrator to root because the wiki said: "Mapping the domain administrator to the local root account is optional. Only configure the mapping if the domain administrator must be able to execute file operations on the domain member using root permissions. You should be aware