search for: fpicabia

...ault_realm = AD.MYDOM.CA dns_lookup_realm = false dns_lookup_kdc = true Here is the tmp share currently: [tmp] path = /tmp browseable = No read only = No If I upload a new file to the tmp share, the ownership shows the expected mapped user. -rwxr--r-- 1 fpicabia domain users 1112 Jun 30 08:10 2017.csr If I touch a file in /tmp using root shell, and chown it to the same user, it cannot be overwritten or deleted. ls in smbclient shows this for a file uploaded over samba: 2017.csr A 1112 Fri Jun 30 08:21:05 2017 A fil...

On Fri, Jun 30, 2017 at 8:52 AM, francis picabia <fpicabia at gmail.com> wrote: > > > On Thu, Jun 29, 2017 at 4:46 PM, Rowland Penny via samba < > samba at lists.samba.org> wrote: > >> On Thu, 29 Jun 2017 16:28:38 -0300 >> francis picabia via samba <samba at lists.samba.org> wrote: >> >> > On Thu, J...

...be useful to copy a file from Windows to the /tmp share and see who owns it. ls -l shows it is the user configured as under "valid users". So everything seems to be working as designed, except the UID isn't really the same, or something like that. Within ls -l /tmp : -rwxr--r-- 1 fpicabia domain users 242 Apr 2 2015 debug.log # getfacl /tmp/debug.log # file: /tmp/debug.log # owner: fpicabia # group: domain users user::rwx group::r-- #effective:r-- mask:rwx other:r-- I'm wondering if there is any way to see how I'm connected when I test with smbclien...

On Thu, Jun 29, 2017 at 3:48 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > > > Well, no it isn't actually on that page, you need to follow an > hyperlink to this page: > > https://wiki.samba.org/index.php/Idmap_config_rid > > It is really confusing. rid or tdb. I don't know what it wants because the second link has both. Here is the

On Tue, Aug 9, 2016 at 1:58 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 13:37:18 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > > > > getent passwd username > > > > (or "theusername") is not the literal command. I substitute > > 'username' here to protect the user id. > > genent passwd on the user does work and it returns uid and gui...

On Tue, Aug 9, 2016 at 12:29 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 11:58:42 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > > > $ smbclient -L //debian2 -U username > > Enter username's password: > > session setup failed: NT_STATUS_UNSUCCESSFUL > > > > > > > When I do a wbinfo look up on my user with a UID of 1000, it has > > > &g...

...the /tmp > share and see who owns it. > > ls -l shows it is the user configured as under "valid users". So > everything seems to be working as designed, except the UID isn't > really the same, or something like that. > > Within ls -l /tmp : > -rwxr--r-- 1 fpicabia domain users 242 Apr 2 2015 debug.log > > # getfacl /tmp/debug.log > > # file: /tmp/debug.log > # owner: fpicabia > # group: domain users > user::rwx > group::r-- #effective:r-- > mask:rwx > other:r-- > > > I'm wondering if there...

On 2016-08-09 at 17:58 +0100, Rowland Penny via samba wrote: > On Tue, 9 Aug 2016 13:37:18 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > > > > getent passwd username > > > > (or "theusername") is not the literal command. I substitute > > 'username' here to protect the user id. > > genent passwd on the user does work and it returns uid and...

On Tue, Aug 9, 2016 at 10:21 AM, Rowland Penny <rpenny at samba.org> wrote: > On Tue, 9 Aug 2016 09:37:13 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > Thanks for the detailed response. > > > > It is very extensive for my purposes, but it still feels over > > analytical for what we need. I believe the Unix UID doesn't exceed > > 65534. If this is a constant, why don't we just...

On Tue, 9 Aug 2016 14:49:37 -0300 francis picabia <fpicabia at gmail.com> wrote: > On Tue, Aug 9, 2016 at 1:58 PM, Rowland Penny via samba < > samba at lists.samba.org> wrote: > > > On Tue, 9 Aug 2016 13:37:18 -0300 > > francis picabia <fpicabia at gmail.com> wrote: > > > > > > > > > > gete...

...owns it. > > > > ls -l shows it is the user configured as under "valid users". So > > everything seems to be working as designed, except the UID isn't > > really the same, or something like that. > > > > Within ls -l /tmp : > > -rwxr--r-- 1 fpicabia domain users 242 Apr 2 2015 debug.log > > > > # getfacl /tmp/debug.log > > > > # file: /tmp/debug.log > > # owner: fpicabia > > # group: domain users > > user::rwx > > group::r-- #effective:r-- > > mask:rwx > > other:...

On Tue, Aug 9, 2016 at 3:00 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 9 Aug 2016 14:49:37 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > On Tue, Aug 9, 2016 at 1:58 PM, Rowland Penny via samba < > > samba at lists.samba.org> wrote: > > > > > On Tue, 9 Aug 2016 13:37:18 -0300 > > > francis picabia <fpicabia at gmail.com> wrote: > > > > > &...

...Jeremy Allison via samba < samba at lists.samba.org> wrote: > On Tue, Aug 09, 2016 at 07:50:12PM +0200, Michael Adam via samba wrote: > > On 2016-08-09 at 17:58 +0100, Rowland Penny via samba wrote: > > > On Tue, 9 Aug 2016 13:37:18 -0300 > > > francis picabia <fpicabia at gmail.com> wrote: > > > > > > > > > > > > > > getent passwd username > > > > > > > > (or "theusername") is not the literal command. I substitute > > > > 'username' here to protect the user id. &gt...

On Mon, Aug 8, 2016 at 10:54 AM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 8 Aug 2016 10:24:03 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > I have a couple of Debian 8.5 systems set up in similar manner. > > Samba is version 4.2.10-Debian > > > > Here is the essential config... > > > > # testparm /etc/samba/smb.conf > > Load smb config files from /etc/samba/smb....

On Mon, Aug 8, 2016 at 12:43 PM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 8 Aug 2016 11:48:42 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > On Mon, Aug 8, 2016 at 10:54 AM, Rowland Penny <rpenny at samba.org> > > wrote: > > > > > On Mon, 8 Aug 2016 10:24:03 -0300 > > > francis picabia <fpicabia at gmail.com> wrote: > > > > > > > I have...

On Mon, 8 Aug 2016 11:48:42 -0300 francis picabia <fpicabia at gmail.com> wrote: > On Mon, Aug 8, 2016 at 10:54 AM, Rowland Penny <rpenny at samba.org> > wrote: > > > On Mon, 8 Aug 2016 10:24:03 -0300 > > francis picabia <fpicabia at gmail.com> wrote: > > > > > I have a couple of Debian 8.5 systems set up...

On Mon, Aug 8, 2016 at 5:06 PM, Michael Adam <obnox at samba.org> wrote: > On 2016-08-08 at 16:31 -0300, francis picabia wrote: > > I'm reading the man page for idmap_rid over and over and I can't > understand > > it. I think it needs a rewrite so a normal user can understand. Using a > > practical example. > > I admit it is a little terse. > But

On Mon, Aug 8, 2016 at 4:16 PM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 8 Aug 2016 15:27:44 -0300 > francis picabia <fpicabia at gmail.com> wrote: > > > OK, that was my bad for copy/pasting some config lines I found with > > a report of "this works!" on a bug report (only the second login > > connects bug). > > > > I've included the domain and fixed the range so it won'...

...chael Adam <obnox at samba.org> wrote: > On 2016-08-09 at 11:58 -0300, francis picabia via samba wrote: > > On Tue, Aug 9, 2016 at 10:21 AM, Rowland Penny <rpenny at samba.org> wrote: > > > > > On Tue, 9 Aug 2016 09:37:13 -0300 > > > francis picabia <fpicabia at gmail.com> wrote: > > > > > > > Thanks for the detailed response. > > > > > > > > It is very extensive for my purposes, but it still feels over > > > > analytical for what we need. I believe the Unix UID doesn't exceed > > &g...

On Mon, 8 Aug 2016 16:31:09 -0300 francis picabia <fpicabia at gmail.com> wrote: > I'm reading the man page for idmap_rid over and over and I can't > understand it. I think it needs a rewrite so a normal user can > understand. Using a practical example. > > Step 1: determine the highest UID in use for your /etc/passwd file >...