search for: allstudents

...and chown the directory to be owned by the proper user and group. I am hoping I can adjust permission in such a way that I won't have to go back in and clean up things after a new user has been added through AD. Thanks for any ideas! John The relevant portion of smb.conf looks like this: [ALLSTUDENTS] path = /home/ALLSTUDENTS # valid users = %S readonly = no writable = yes printable = no create mode = 0700 directory mode = 0700 admin users = @"VANGUARD\domain admins" @"VANGUARD\mcmcomputer admins" vfs objects = recycle recycle: c...

...and chown the directory to be owned by the proper user and group. I am hoping I can adjust permission in such a way that I won't have to go back in and clean up things after a new user has been added through AD. Thanks for any ideas! John The relevant portion of smb.conf looks like this: [ALLSTUDENTS] path = /home/ALLSTUDENTS # valid users = %S readonly = no writable = yes printable = no create mode = 0700 directory mode = 0700 admin users = @"VANGUARD\domain admins" @"VANGUARD\mcmcomputer admins" vfs objects = recycle r...

...main = yes winbind enum users = yes winbind enum groups = yes winbind refresh tickets = Yes winbind expand groups = 4 winbind normalize names = Yes domain master = no local master = no vfs objects = acl_xattr map acl inherit = Yes store dos attributes = Yes [ALLSTUDENTS] path = /home/ALLSTUDENTS # valid users = %S readonly = no writable = yes printable = no create mode = 0700 directory mode = 0700 I turned up the logs for idmap, here's what I see: log.winbindd-idmap: idmap range not specified for domain DEBIAN-TES...

...=== Share Definitions ======================= # Un-comment the following (and tweak the other settings below to suit) # to enable the default home directory shares. This will share each # user's home directory as \\server\username #[homes] # comment = Home Directories # browseable = no [ALLSTUDENTS] path = /home/ALLSTUDENTS # valid users = %S readonly = no writable = yes printable = no create mode = 0700 directory mode = 0700 admin users = @"VANGUARD\domain admins" @"VANGUARD\mcmcomputer admins" vfs objects = recycle r...

...wins support = Yes > ldap idmap suffix = ou=Idmap > idmap config * : range = 10000-200000 > ldapsam:trusted = yes > idmap config * : backend = ldap:ldap://kram.vanguard.mydomain.org > <http://kram.vanguard.mydomain.org> > map acl inherit = Yes > > [ALLSTUDENTS] > path = /home/ALLSTUDENTS > admin users = "@VANGUARD\domain admins" > read only = No > create mask = 0700 > directory mask = 0700 > delete readonly = Yes >

Hello all, I've just installed Samba 3.6.6 from the Debian Stable repo. I want to use this linux box as a smb file server for windows clients. I installed NSLCD to allow users in AD to authenticate against my linux server per https://wiki.samba.org/index.php/Local_user_management_and_authentication/nslcd getent passwd and getent group returns domain users with UID mappings like: tempuser

...> winbind enum groups = yes > winbind refresh tickets = Yes > winbind expand groups = 4 > winbind normalize names = Yes > domain master = no > local master = no > vfs objects = acl_xattr > map acl inherit = Yes > store dos attributes = Yes > [ALLSTUDENTS] > > path = /home/ALLSTUDENTS > # valid users = %S > readonly = no > writable = yes > printable = no > create mode = 0700 > directory mode = 0700 > > I turned up the logs for idmap, here's what I see: > > log.winbindd-idmap...

Thank you Rowland, so it looks like kerberos should be my authentication method and that I'll need to install rfc2307 extensions in my Active Directory environment in order to use your approach. Your approach supports UPN names for access to shares and It also appears that I won't need to use nslcd at all. Does all of that sound correct to you? Thanks again! John On Mon, Apr 20, 2015 at

...waiting for Winbind to provide the name and Winbind is waiting for the domain controller: editshare at es-exp1:~$ time groups dwill627 dwill627 : domain users _adsso_editors editors exp1-promos groups: cannot find name for group ID 16777230 16777230 KUTZTOWN\computeradministrativeaccessclassrooms allstudents KUTZTOWN\oitfs_software_r KUTZTOWN\computeradministrativeaccessconferencerooms KUTZTOWN\mediasiteviewonly pcns kup-passpol-stu-temp editshareusers BUILTIN\users real 1m21.472s user 0m0.064s sys 0m0.000s However, the user dwill627 is apparently not a member of the group with ID 16777230:...

...he same problem: > > editshare at es-exp1:~$ time groups dwill627 > dwill627 : groups: cannot find name for group ID 131073 > 131073 _adsso_editors editors exp1-promos domain users KUTZTOWN\ > computeradministrativeaccesslabs > KUTZTOWN\computeradministrativeaccessclassrooms > allstudents KUTZTOWN\oitfs_software_r KUTZTOWN\ > computeradministrativeaccessconferencerooms > KUTZTOWN\mediasiteviewonly pcns kup-passpol-stu-temp editshareusers > BUILTIN\users > > real 3m56.156s > user 0m0.072s > sys 0m0.000s > > editshare at es-exp1:~$ getent group 1...

On Wed, 13 Sep 2017 11:58:27 -0400 Sonic <sonicsmith at gmail.com> wrote: > On Wed, Sep 13, 2017 at 11:32 AM, Rowland Penny via samba > <samba at lists.samba.org> wrote: > > On Wed, 13 Sep 2017 11:18:59 -0400 > > Sonic via samba <samba at lists.samba.org> wrote: > > > >> Should be more like: > >> idmap config STUDENTS : range =

...ons.) Despite that, I still have the same problem: editshare at es-exp1:~$ time groups dwill627 dwill627 : groups: cannot find name for group ID 131073 131073 _adsso_editors editors exp1-promos domain users KUTZTOWN\ computeradministrativeaccesslabs KUTZTOWN\computeradministrativeaccessclassrooms allstudents KUTZTOWN\oitfs_software_r KUTZTOWN\ computeradministrativeaccessconferencerooms KUTZTOWN\mediasiteviewonly pcns kup-passpol-stu-temp editshareusers BUILTIN\users real 3m56.156s user 0m0.072s sys 0m0.000s editshare at es-exp1:~$ getent group 131073 editshare at es-exp1:~$ echo $? 2 Is i...

...t; editshare at es-exp1:~$ time groups dwill627 > > dwill627 : groups: cannot find name for group ID 131073 > > 131073 _adsso_editors editors exp1-promos domain users KUTZTOWN\ > > computeradministrativeaccesslabs > > KUTZTOWN\computeradministrativeaccessclassrooms > > allstudents KUTZTOWN\oitfs_software_r KUTZTOWN\ > > computeradministrativeaccessconferencerooms > > KUTZTOWN\mediasiteviewonly pcns kup-passpol-stu-temp editshareusers > > BUILTIN\users > > > > real 3m56.156s > > user 0m0.072s > > sys 0m0.000s > > >...