search for: gtmpve

...s AD DC and two domain members as file servers with samba4. One of then work property, but the other not. My samba4 AD DC version is compiled from sources: [root at gtmad ~]# samba -V Version 4.5.5 The samba4 as domain member (files server) are installing from .rpm packages of CentOS7. [root at gtmpve /]# uname --all Linux gtmpve.gtm.onat.gob.cu 3.10.0-514.10.2.el7.x86_64 #1 SMP Fri Mar 3 00:04:05 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux [root at gtmpve /]# smbd -V Version 4.4.4 [root at gtmpve /]# nmbd -V Version 4.4.4 [root at gtmpve /]# winbindd -V Version 4.4.4 The problem is that I can n...

...e problem with shares in a domain member used as file server (I want to use it like that) I check from samba wiki some test that you suggest and all have been pass well. I try to make a new share using POSIX ACL and still not access. To make the share and apply the permissions and owners: [root at gtmpve lib]# mkdir -p /compartido/prueba/ [root at gtmpve lib]# chmod 2770 /compartido/prueba/ [root at gtmpve lib]# chown root:"ATGTM00\domain admins" /compartido/prueba/ My smb.conf look lik that: [root at gtmpve lib]# cat /etc/samba/smb.conf [global] netbios name = gtmpve security = ADS w...

...iskOperatorPrivilege Manage disk shares > SeSecurityPrivilege System security > >These were all run a Unix domain member, so it sounds like your >problems are down to a permissions problem. > >Rowland Thank Rowland for answer my email; You right, my mistake: root at gtmpve ~]# net rpc rights list privileges -UAdministrator Enter Administrator's password: SeMachineAccountPrivilege Add machines to domain SeTakeOwnershipPrivilege Take ownership of files or other objects SeBackupPrivilege Back up files and directories SeRestorePrivilege Restor...

On Thu, 13 Apr 2017 17:10:16 -0400 Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote: > > [root at gtmpve nagios]# net rpc rights list accounts > ATGTM00\Domain Admins > SeDiskOperatorPrivilege > > It look like the Domain admins yes have the > 'SeDiskOperatorPrivilege' privilege. I change the group of the share > with chgrp and try from Windows RSAT. I saw the Doamin admins...

...ot) > CREATOR OWNER > CREATOR GROUP > > All of then just with Specials permissions set. > > When I try to add some other user or group, in the moment of Accept > or Aply the system say: > > "Error trying to apply the security information to:" > "\\GTMPVE.GTM.ONAT.GOB.CU\compartir" > "Access denied" > > And then any change happens. > If the change occurs, but you get the 'error' message before, then you can ignore the error, it is being caused by the differences between Samba AD and windows AD. If the changes...

...ATOR GROUP >> >> All of then just with Specials permissions set. >> >> When I try to add some other user or group, in the moment of Accept >> or Aply the system say: >> >> "Error trying to apply the security information to:" >> "\\GTMPVE.GTM.ONAT.GOB.CU\compartir" >> "Access denied" >> >> And then any change happens. >> > >If the change occurs, but you get the 'error' message before, then you >can ignore the error, it is being caused by the differences between >Samba AD...

On Thu, 13 Apr 2017 09:28:09 -0400 Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote: > > I follow step by step Setting up a Share Using Windows ACLs from > wiki, but still I have an Access denied when try to change the > permissions of share or when try to change Security ACL. As sugesst > Rowland I do not change the permissions using Unix, just create the

...compartir] >> path = /test/compartir/ >> read only = no >> > >This sounds like a possible firewall or selinux/apparmor getting in the >way problem. > >Rowland Thank Rowland for answer me; I stop the SELinux and the firewall is not running: [root at gtmpve selinux]# cat /etc/selinux/config # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is l...

...uld not connect to server >127.0.0.1" > > I suppouse that must be 192.168.41.17 that is the IP addreess > > of samba4 AD DC. > >Privileges are stored on each host locally. Therefore you set it on >your >file server and not on the DC. > > > >> [root at gtmpve ~]# net rpc rights list privileges >SeDiskOperatorPrivilege -U 'ATGM00\administrator' >> Enter ATGM00\administrator's password: >> Bad SMB2 signature for message >> [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ >........ >> [0000] 85 28 83...

...; Here is where I see some problem. "Could not connect to server 127.0.0.1" > I suppouse that must be 192.168.41.17 that is the IP addreess > of samba4 AD DC. Privileges are stored on each host locally. Therefore you set it on your file server and not on the DC. > [root at gtmpve ~]# net rpc rights list privileges SeDiskOperatorPrivilege -U 'ATGM00\administrator' > Enter ATGM00\administrator's password: > Bad SMB2 signature for message > [0000] 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........ ........ > [0000] 85 28 83 F4 26 78 EB 45 1C DE 05...

...read only = no then from a RSAT of Windows7 loggin as Administrator in the domain I use the /Computer management/System tools/Shared folders/Shares to try to change permissions ACL and Security. I check again if user Administrator have the SeDiskOperatorPrivilege privilege and is Ok. [root at gtmpve samba]# net rpc rights list privileges -UAdministrator Enter Administrator's password: SeMachineAccountPrivilege Add machines to domain SeTakeOwnershipPrivilege Take ownership of files or other objects SeBackupPrivilege Back up files and directories SeRestorePrivilege Re...

On Wed, 12 Apr 2017 15:37:14 -0400 Rommel Rodriguez Toirac via samba <samba at lists.samba.org> wrote: > Why this diffents? what I be missing? You are missing the fact that you shouldn't mix using Unix permissions and ACLs, it will not work. Use one or the other, preferably the later, in fact if you use the DC as a fileserver, you MUST use the later. Follow these instructions