search for: ftlcomputing

...ntOS 7.6 - smbd version 4.8.3 from the samba-4.8.3-4.el7.x86_64 EPEL package - Added as a domain member using the realm command and specifying the use of winbind, not sssd *# smb.conf file on fileserver* [global] kerberos method = system keytab workgroup = FTLC security = ads realm = AD.FTLCOMPUTING.COM # Logging log file = /var/log/samba/%m.log log level = 5 # We're using the RID method of mapping SIDs to UID/GID idmap config FTLC : range = 2000000-2999999 idmap config FTLC : backend = rid idmap config * : range = 10000-999999 idmap config * : backend = tdb # All linux users, logging i...

> > > I am trying to auto create and mount home directories using a GPO, as per > > https://wiki.samba.org/index.php/User_Home_Folders. > > > > I currently have home directories being created, through the use of > > pam_mkhomedir.so. with 'obey pam restrictions = yes' in my smb.conf file. > > I have also setup the share permissions and Windows ACLs as

> > > Forgot to mention, are sure your time sync over AD is working correctly. > One to add to you list, check times of server and clients, (* yes again, > if needed just to be sure). > Yes, I have double check that time is correctly being synced. FYI, Rowland, the process outlined in the wiki for using chronyd does not work on Ubuntu 18.04 (my AD DC is on Ubuntu, but my file

On Mon, 29 Apr 2019 11:44:22 -0700 Mason Schmitt <mason at ftlcomputing.com> wrote: > > > > > It looks like the issue, with W10 clients needing to reboot each > > > morning to regain access to samba mapped drives, has been worked > > > around with a single smb.conf change. > > > > > > The only change I made (whic...

On Mon, 29 Apr 2019 13:01:54 -0700 Mason Schmitt <mason at ftlcomputing.com> wrote: > > > I have another file server, in a different domain, with a nearly > > > identical smb.conf to this one, which does not have an entry for > > > "smb encrypt". According to the man page, this means that it will > > > have "smb en...

On Thu, 25 Apr 2019 10:34:24 -0700 Mason Schmitt <mason at ftlcomputing.com> wrote: > > > > > > Forgot to mention, are sure your time sync over AD is working > > correctly. One to add to you list, check times of server and > > clients, (* yes again, if needed just to be sure). > > > > Yes, I have double check that time i...

On Mon, 29 Apr 2019 11:21:55 -0700 Mason Schmitt <mason at ftlcomputing.com> wrote: > Thanks Rowland and Louis for your suggestions! > > I think I'll go with the samba-tool option, as presumably this will > keep up with schema changes as samba evolves. A few things that Louis didn't say about creating an OU with samba-tool, if it is an OU off...

...official Wiki and it just works. I can confirm this for several versions from Samba 4.2.x to 4.9.x. And I never changed anything in the Windows 10 registry either. Viktor On 29.04.2019 22:15, Rowland Penny via samba wrote: > On Mon, 29 Apr 2019 13:01:54 -0700 > Mason Schmitt <mason at ftlcomputing.com> wrote: > >>>> I have another file server, in a different domain, with a nearly >>>> identical smb.conf to this one, which does not have an entry for >>>> "smb encrypt". According to the man page, this means that it will >>>> have...

On Thu, 21 Feb 2019 10:49:49 -0800 Mason Schmitt <mason at ftlcomputing.com> wrote: > Hi Rowland, > > > template homedir = /home/%U@%D > > > > Nothing to do with your problem, but is the above line a typo ? > > I would have expected the '@' to be a '/', in which case it is the > > default, so you can remove the l...

...h: client min protocol = NT1 client max protocol = SMB2 The last to are 2 Xen xcp-ng servers with samba 4.2.3. No configuration is done for this share. The above see if it helps you a bit. Greetz, Louis ________________________________ Van: Mason Schmitt [mailto:mason at ftlcomputing.com] Verzonden: dinsdag 30 april 2019 19:39 Aan: L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] Windows clients require reboot once a day in order to access mapped drives I would check 3 things here before this is reported as bug. Kerberos/Authentication. kr...

On Fri, 26 Apr 2019 15:03:07 -0700 Mason Schmitt via samba <samba at lists.samba.org> wrote: > Hey Rowland and Louis (and anyone else that has been following this > thread), > > It looks like the issue, with W10 clients needing to reboot each > morning to regain access to samba mapped drives, has been worked > around with a single smb.conf change. > > The only

Hi Rowland, I'm still seeing the problem that I described earlier. I have however uncovered some more information that might help resolve the issue. On Thu, 18 Apr 2019 at 13:10, Mason Schmitt <mason at ftlcomputing.com> wrote: > Hi Rowland, > > > I hope someone has seen this before and knows what's going on. Given >> > the time delay between the problem recurring, I'm guessing the issue >> > lies with Kerberos, but I'm not sure how to verify that or how to >&g...

...path = /srv/samba/users # Very important! Don't put the %U here! comment = Share for user home dirs guest ok = no read only = no *The full working smb.conf file* [global] kerberos method = system keytab workgroup = FTLC security = ads realm = FTLC.FTLCOMPUTING.COM # Netbios is dead, let's make it explicit # There's no need to run nmbd either, so disable it using systemctl disable nmbd disable netbios = yes # Encrypting SMB traffic is a good basic defense # As soon as Windows 7 goes away, we'll be able to # change this to 'required'...

Hi Louis, The idea I had with this thread is to just get an honest comparison between Windows and Samba when it comes to file sharing needs in the Windows world, the missing Windows Search capability was just an example to get the discussion going. If I understand your reference correctly, there is a solution, compatible with Apple's Spotlight, to index files on a Samba server using

...roup name? I know I can create a new group, add users to the new group, use the new group in an ACL, delete the old principal from the ACL, then finally delete the old group, but that's a fair bit of work. -- Mason Schmitt Faster Than Light Computing Inc. (250) 804-4365 Ext. 203 mason at ftlcomputing.com *Relationship-Driven IT Support Services*

...ycle:repository = Recycle_Bin/%U recycle:versions = Yes recycle:keeptree = Yes recycle:touch = Yes recycle:exclude = *.tmp,~$* recycle:exclude_dir = Recycle_Bin > Skickat fr?n min iPad > > 22 juni 2020 kl. 21:50 skrev Mason Schmitt <mason at ftlcomputing.com>: > > ? > Hello Anders, > > Here's a working example that creates a recycle bin inside the user's home > folder. > > [Home] > path = /srv/samba/Top/Home > comment = Share for user home dirs > guest ok = no > read onl...

...GPO doesn't have a trailing slash, but it does use a variable '%LogonUser%'. I also tried creating the GPO with the variable '%username%', which didn't work either. Here's my smb.conf [global] kerberos method = system keytab workgroup = FTLC security = ads realm = AD.FTLCOMPUTING.COM # Netbios is dead, let's make it explicit disable netbios = yes # Encrypting SMB traffic is a good basic defense # As soon as Windows 7 goes away, we'll be able to # change this to 'required' smb encrypt = desired # Logging log file = /var/log/samba/%m.log log level = 5 # We...

Hi Rowland, > I hope someone has seen this before and knows what's going on. Given > > the time delay between the problem recurring, I'm guessing the issue > > lies with Kerberos, but I'm not sure how to verify that or how to > > resolve the issue. If you need more info, please let me know. > > > > Problem: > > Each morning, windows users are

Hai, ... > > As I said, where is the fault, is it something that Windows 10 is or > isn't doing, or is it Samba ? > > Well, we cannot change Windows, so on that basis, I think you should > make a Samba bug report and let it work through the system. > > Rowland Well, yes, we can change windows, by allowing/disallowing SMB1. Which might help in detecting whats

Hi Samba 4.12 on Ubuntu 20.04 Windows 10 and 7 clients I have configured recycle on two shares, /Users and /Documents. vfs objects = recycle recycle:versions = yes recycle:keeptree = yes On the Users share I have recycle:repository = /share/data On the Documents share I have recycle:repository = .Papperskorg (recycle bin in Swedish) The Document share recycle works. Folder was created and the