search for: atgtm00

...the Security tab never let me, because of Not access, permission denied. From the network, I can see the share, but can not access to it or the content. Locally (in the CentOS7 PC with samba4) I can change the owner and permission of the directory: chmod -R 770 /samba/bibliografia/ chown -R 'ATGTM00\Administrator':'ATGTM00\Domain Admins' /samba/bibliografia/ I test and I guest is Ok: [root at gtmpve /]# getfacl --access /samba/bibliografia getfacl: Eliminando '/' inicial en nombres de ruta absolutos # file: samba/bibliografia # owner: ATGTM00\134administrator # group: ATG...

...uggest and all have been pass well. I try to make a new share using POSIX ACL and still not access. To make the share and apply the permissions and owners: [root at gtmpve lib]# mkdir -p /compartido/prueba/ [root at gtmpve lib]# chmod 2770 /compartido/prueba/ [root at gtmpve lib]# chown root:"ATGTM00\domain admins" /compartido/prueba/ My smb.conf look lik that: [root at gtmpve lib]# cat /etc/samba/smb.conf [global] netbios name = gtmpve security = ADS workgroup = ATGTM00 realm = GTM.ONAT.GOB.CU log file = /var/log/samba/%m.log log level = 10 idmap config *:backend = tdb idmap config...

On Thu, 13 Apr 2017 17:10:16 -0400 Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote: > > [root at gtmpve nagios]# net rpc rights list accounts > ATGTM00\Domain Admins > SeDiskOperatorPrivilege > > It look like the Domain admins yes have the > 'SeDiskOperatorPrivilege' privilege. I change the group of the share > with chgrp and try from Windows RSAT. I saw the Doamin admins group > with Special permissions set; but can ch...

On Thu, 13 Apr 2017 14:18:16 -0400 Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote: > > I can change the permissions of share and I can change and add (or > remove) the owners of that share using the Share permissions tab, but > when try to change something with the Security tab there is when > happen the Access denied. I work in that tab, When I open it

El 6 de abril de 2017 15:43:11 GMT-04:00, Rowland Penny via samba <samba at lists.samba.org> escribió: >On Thu, 06 Apr 2017 15:19:04 -0400 >Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote: > >> >> I follow your guides to configure the Domain member server and the >> file server. In this message I send the result of some checks that

*************************************** Hello Rowland; thanks for write me back. Is that first I had to join the PC to the domain :-O Now it does work: $ sudo net ads join -U Administrator [sudo] password for administrator: ? Enter Administrator's password: Using short domain name -- ATGTM00 Joined 'P107' to dns domain 'gtm.onat.gob.cu' $ sudo systemctl start winbind.service $ sudo systemctl status winbind.service -l ??winbind.service - Samba Winbind Daemon ??Loaded: loaded (/lib/systemd/system/winbind.service; enabled; vendor preset: enabled) ??Active:?active (running...

.../krb5.conf ### [libdefaults] dns_lookup_realm = false dns_lookup_kdc = true default_realm = GTM.ONAT.GOB.CU ### The configuration of /etc/resolv.conf looks like this: ### search gtm.onat.gob.cu nameserver 192.168.41.17 ### and /etc/samba/smb.conf ### [global] workgroup = ATGTM00 security = ADS realm = GTM.ONAT.GOB.CU winbind refresh tickets = Yes vfs objects = acl_xattr map acl inherit = Yes store dos attributes = Yes dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind use default domain = yes username map = /etc/samb...

...rce shutdown from a remote system SePrintOperatorPrivilege Manage printers SeAddUsersPrivilege Add users and groups to the domain SeDiskOperatorPrivilege Manage disk shares SeSecurityPrivilege System security [root at gtmpve nagios]# net rpc rights list accounts -U'ATGTM00\administrator' Enter ATGTM00\administrator's password: BUILTIN\Print Operators No privileges assigned BUILTIN\Account Operators No privileges assigned BUILTIN\Backup Operators No privileges assigned BUILTIN\Server Operators No privileges assigned ATGTM00\Domain Admins SeDiskOperat...

...lookup_kdc = true > default_realm = GTM.ONAT.GOB.CU > ### > > The configuration of /etc/resolv.conf looks like this: > > ### > search gtm.onat.gob.cu > nameserver 192.168.41.17 > ### > > and /etc/samba/smb.conf > > ### > [global] > workgroup = ATGTM00 > security = ADS > realm = GTM.ONAT.GOB.CU > > winbind refresh tickets = Yes > vfs objects = acl_xattr > map acl inherit = Yes > store dos attributes = Yes > > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab >...

...amba.org> escribi?: >On 17/09/2020 14:11, Rommel Rodriguez Toirac via samba wrote: >> *************************************** >> Hello Rowland; >> thanks for write me back. >> >> >> ?Now verifying that everything was fine: >> >> $ getent passwd ATGTM00\\rommel.rodriguez >> rommel.rodriguez:*:11144:10513::/home/rommel.rodriguez:/bin/bash >> >> $ getent group ATGTM00\\informatica >> informatica:x:11142: >> >> ?It look tha be Ok;?but when I try to login as a user of my network >and is impossible. >Can you l...

...# cat /etc/samba/smb.conf ?# Global parameters [global] ???????netbios name = GTMAD1 ???????realm = GTM.ONAT.GOB.CU ???????server role = active directory domain controller ???????server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate ???????workgroup = ATGTM00 ???????idmap_ldb:use rfc2307 ?= yes [sysvol] ???????path = /usr/local/samba/var/locks/sysvol ???????read only = No [netlogon] ???????path = /usr/local/samba/var/locks/sysvol/gtm.onat.gob.cu/scripts ???????read only = No-- Rommel Rodriguez Toirac?rommelrt at nauta.cu

..., kcc, dnsupdate time server = Yes tls cafile = /var/lib/samba/private/tls/cacert.pem tls certfile = /var/lib/samba/private/tls/gtmad.gtm.onat.gob.cu.cert tls enabled = Yes tls keyfile = /var/lib/samba/private/tls/gtmad.gtm.onat.gob.cu.key workgroup = ATGTM00 idmap_ldb:use rfc2307 = yes [netlogon] path = /var/lib/samba/sysvol/gtm.onat.gob.cu/scripts read only = No [sysvol] path = /var/lib/samba/sysvol read only = No Any idea of what could be bad? -- Rommel Rodriguez Toirac rommelrt at nauta.cu

...to change it directly on the samba4 server and that's when they can start their sessions. This situation is happening to me only with PCs with Windows XP operating systems. What could be happening? This is my samba configuration on AD DC server: # Global parameters [global] workgroup = ATGTM00 realm = GTM.ONAT.GOB.CU netbios name = GTMAD server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes time server = yes eventlog list = Application System Security...

...> time server = Yes > tls cafile = /var/lib/samba/private/tls/cacert.pem > tls certfile = /var/lib/samba/private/tls/gtmad.gtm.onat.gob.cu.cert > tls enabled = Yes > tls keyfile = /var/lib/samba/private/tls/gtmad.gtm.onat.gob.cu.key > workgroup = ATGTM00 > idmap_ldb:use rfc2307 = yes > >[netlogon] > path = /var/lib/samba/sysvol/gtm.onat.gob.cu/scripts > read only = No > >[sysvol] > path = /var/lib/samba/sysvol > read only = No > > Any idea of what could be bad? > Is this...

...# cat /etc/samba/smb.conf ?# Global parameters [global] ???????netbios name = GTMAD1 ???????realm = GTM.ONAT.GOB.CU ???????server role = active directory domain controller ???????server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate ???????workgroup = ATGTM00 ???????idmap_ldb:use rfc2307 ?= yes [sysvol] ???????path = /usr/local/samba/var/locks/sysvol ???????read only = No [netlogon] ???????path = /usr/local/samba/var/locks/sysvol/gtm.onat.gob.cu/scripts ???????read only = No-- Rommel Rodriguez Toirac?rommelrt at nauta.cu No, sorry but I refuse to try a...

...to change it directly on the samba4 server and that's when they can start their sessions. This situation is happening to me only with PCs with Windows XP operating systems. What could be happening? This is my samba configuration on AD DC server: # Global parameters [global] workgroup = ATGTM00 realm = GTM.ONAT.GOB.CU netbios name = GTMAD server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes time server = yes eventlog list = Application System S...