search for: filemodes

Thanks Elias. But I run samba-tool ntacl sysvolreset and: root at DC02:~# samba-tool ntacl sysvolreset lp_load_ex: refreshing parameters Initialising global parameters Processing section "[global]" Processing section "[netlogon]" Processing section "[sysvol]" Processing section "[sistemas]" ldb_wrap open of idmap.ldb lp_load_ex: refreshing parameters

2017-06-06 15:54 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 6 Jun 2017 15:35:42 -0300 > Epsilon Minus via samba <samba at lists.samba.org> wrote: > >> Hi. I have a problem applying GPO. I do not know where to look >> Reviewing I found this: >> >> # samba-tool ntacl sysvolcheck >> lp_load_ex: refreshing parameters

Hi. I have a problem applying GPO. I do not know where to look Reviewing I found this: # samba-tool ntacl sysvolcheck lp_load_ex: refreshing parameters Initialising global parameters Processing section "[global]" Processing section "[netlogon]" Processing section "[sysvol]" Processing section "[sistemas]" ldb_wrap open of idmap.ldb Module

This is my smb.conf root at DC02:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = CLINICAGUEMES realm = CLINICAGUEMES.COM.AR netbios name = DC02 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes ldap server require strong

> > onnect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and > 'force unknown acl user = true' for service Unknown Service (snum == -1) > connect_acl_xattr: setting 'inherit acls = true' 'dos filemode = true' and > 'force unknown acl user = true' for service Unknown Service (snum == -1) > lp_load_ex: refreshing

Helllo, I have clean sernet-samba-ad install, and then join to existing domain. When I tried samba-tool ntacl sysvolreset I have ERROR: [root at dc04 ~]# samba-tool ntacl sysvolreset rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[netlogon]" Processing section "[sysvol]" Processing section "[netlogon]" Processing

On Tue, 6 Jun 2017 15:35:42 -0300 Epsilon Minus via samba <samba at lists.samba.org> wrote: > Hi. I have a problem applying GPO. I do not know where to look > Reviewing I found this: > > # samba-tool ntacl sysvolcheck > lp_load_ex: refreshing parameters > Initialising global parameters > Processing section "[global]" > Processing section

Hello. I have a problem with GPO manage. Sorry for my english is not the best. On the windows, GPO manage, the system send me this error: "The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory. It is recommended that these permissions be consistent. To change the SYSVOL permissions to those in Active Directory, click OK. For more

Maybe this link help. https://wiki.samba.org/index.php/Updating_Samba#Fixing_Incorrect_Sysvol_and_Directory_ACLs On Tue, Jun 6, 2017 at 4:09 PM, Epsilon Minus via samba < samba at lists.samba.org> wrote: > 2017-06-06 15:54 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org > >: > > On Tue, 6 Jun 2017 15:35:42 -0300 > > Epsilon Minus via samba <samba at

i don't know if the problem with the command samba-tool gpo aclcheck is connect with the original problem, but is necesary resolv all warinings. I put de log level = 5 to check the report. this is the output: root at DC04:~# samba-tool gpo aclcheck INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5

Hi folks, I'm trying to set up a share with samba 2.2.8a (SuSE SLES 8) with ACL support and winbind where every user with write access to a file should be able to change the permissions of that file. According to the man page "dos filemode = yes" should do it - but not for me. It seems that this param is doing nothing at all. I'm I dump ?? What could be wrong here ??

Hi Rowland, Sorry, migration using BIND9_DLZ gives the same result Not sure if the following from the migration is of a concern Could not add posix attrs for AD entry for sid=S-1-5-21-3936576374-1604348213-1812465911-3034, ((21, 'Element loginShell has empty attribute in ldb message ()!')) Could not add posix attrs for AD entry for sid=S-1-5-21-3936576374-1604348213-1812465911-3040,

Hi, I've a question about the 'dos filemode' option (samba 3.0.24, debian etch). I want to use this option to allow group members with write access to add/change permissions. man smb.conf: dos filemode (S) only the owner of a file/directory is able to change the permissions on it. However, this behavior is often confusing to DOS/Windows users. Enabling this parameter allows a

Hi Guys, Setup: Versions: Samba: 4.6.7 Bind9: 9.10.3 Firewall disabled AD Provision: Migrated from samba 3 to 4 using classic upgrade. samba-tool domain classicupgrade --dbdir=/var/lib/samba.PDC/dbdir --realm=TEST.LOCAL --dns-backend=BIND9_FLATFILE /etc/samba.PDC/smb.PDC.conf The following was the section in regards to the upgrade Processing section

Hello, After an upgrade to samba 3.5.8 (from 3.2.5) the option 'dos filemode' does not seem to work anymore. If I (as a user) do not own the file I can't change permissions. I am user 'felix' and member of supplementary group 'Development'. To test things I use the following share definition: [Temp] path = /srv/samba/file-shares/tmp browseable =

dear all, switching from 3.0.22 to 3.023b, we can't get the parameter "dos filemode" to work (giving members of a group with full control the ability to change the acl's). in previous versions we were using "acl group control" which served well (now marked deprecated). the share section of smb.conf is: [test] comment = testshare path = /media/samba/test public =

Hello, I was hoping to reprovision the same domain by specifying the domain GUID in the command line tool 'samba-tool domain provision' but I am not sure if I missed something or if there is a bug but the specified domain GUID is not the one which is created for my domain. Specifying the domain SID seems to work as I would expect. I tested it with Samba shipped by Debian 11 (samba2

Hi, I'm using the "dos filemode" option to get Windows like acl handling. Now I noticed the following line: "Note that a user belonging to the group owning the file will not be allowed to change permissions if the group is only granted read access" Is there anyway to achive this so the group can change permissions even when the group has read-only rights? This is exacly

According to the smb.conf man page, the "dos filemode" parameter will allow a user who is not the owner of a file to affect permissions changes on a file or folder provided he has write access to that object. This does not appear to be the case. Users with write access via user or group ACEs receive an "Access denied" error when attempting to make ACL changes via windows,

ok, I've investigated the problem more closely. First of all, I didn't mention that I have 2 domain controllers: dc(initial) and bdc (backup). Rsync command /usr/bin/rsync -XAavz --delete-after dc:/usr/local/samba/var/locks/sysvol/* /usr/local/samba/var/locks/sysvol/ fires every 5 minutes on bdc. However, if I try to gpupdate from bdc I get the above error. Gpupdating from dc works