search for: hartnegg

Many first time users of Samba-4 seem to struggle with the same issues. I suggest the Wiki should have a Readme First similar like this: http://www.klaus-hartnegg.de/gpo/14-03-12-samba4.html It basicly says that Samba 4 can behave either like Samba 3, or as AD-DC, in which case it should do nothing else. Then it lists the main differences, limitations, and requirements. I would love to see a link to such a text on https://wiki.samba.org/index.php/Main_Pa...

..., I meant "store dos attributes". It's pretty clear now that I need to keep the parameter 'store dos attributes=no' since 1) the server is an AD member server and 2) the map* parameters don't do the right thing under ZFS / NFSV4 ACLs. I've read that the steps Klaus Hartnegg listed resolves the issue on ZFS on Linux; however, I don't believe that SA based xattrs have been implemented in ZFS on FreeBSD (the OpenZFS website has "??" next to FreeBSD). Atime is already disabled on the zpool. At this point I'll have to wait until I get a proper testing en...

On Wed, May 13, 2015 at 1:20 PM, Klaus Hartnegg <hartnegg at uni-freiburg.de> wrote: > Am 13.05.2015 um 17:30 schrieb S?bastien Le Ray: > >> No they aren't >>> >> >> Yes they are >> > > Not sure about this, but mostly irrelevant anyway, because of this effect > in the other direction: &g...

On 11/28/2014 9:23 AM, Klaus Hartnegg wrote: > > Is there anything else that I could try, > or do I just have to stay on protocol NT1 > as long as we still use this old software? > > Klaus Try in [global] acl allow execute always=true -- Regards -------------------------------------- Gerald Drouillard Technology Arc...

Missing features from memory from following this mailinglist: - Win7 join to AD still requires two registry changes. - SYSVOL is not replicated, use a cronjob with rsync. - Domain-Trust works only in one direction (which one?). - winbind does not work on DCs, use a separate file server. - Joining an AD requires one of its DCs in the same subnet? - Cluster filesystems destroy TDB files, use CTDB. -

Hello all, Mine is Active Directory domain. I have already reinstall my server. It was fresh install. But of course I am still following this topic. Regards Le 3 juil. 2016 13:05, "Klaus Hartnegg" <hartnegg at uni-freiburg.de> a écrit : > On 20.06.2016 at 12:16 Jules Houantonon wrote: > >> please is it possible to change samba4 domaine name ? >> Did someone have a how to or can explain to acheive it ? >> > > If it is Active Directory, then the recom...

On Fri, 24 Apr 2015, Klaus Hartnegg wrote: > Am 24.04.2015 um 01:02 schrieb Carl G. Riches: >> I'm unable to join a Windows 7 PC >> to the Samba 4 domain when "hosts allow" is defined > >> hosts allow = 127 10.208.29. 10.108.29. > > Maybe the new version insists there must be a dot after t...

Am 10.06.2015 um 03:25 schrieb Mike: > I'm learning to be very deliberate with changing posix and windows acl's so > I don't disturb users' access to files and folders. > I check acl's on a specific file/folder on the server with getfacl. > Then make one small acl modification to one file in a sub-directory of a > share. > Then record the difference reported

...m on both sides, because it accesses the "change journal". (https://technet.microsoft.com/en-us/library/cc773238%28v=ws.10%29.aspx) Can I use DFS-R between samba4 and windows if I use ntfs-3g? If not is it planned to support DFS-R in a future version of samba? thanks, Klaus -- Klaus Hartnegg, Universität Freiburg, Institut für Anatomie und Zellbiologie, Albert-Straße 23, 79104 Freiburg Tel.: (0761) 203 - 8419, Fax: 8417 Email: hartnegg at uni-freiburg.de

Am 29.09.2016 um 16:26 schrieb v g via samba: > Really? Easy and useful, huh? Live sync of directories is VERY useful. So useful that I just try to kill the purchase of EMC Isilon, precisely because it cannot replicate with Windows.

On Tue, 2015-03-10 at 11:37 +0100, Klaus Hartnegg wrote: > Am 10.03.2015 um 11:00 schrieb Sergio Rizzi: > > By reading https://wiki.samba.org/index.php/Roadmap#Trust_support seems > > that trust support is not finished yet, btw in changelogs seems that in > > 4.2.* (with winbindd) interdomain trusts are now working. > >...

...of: * wpkg (but it seems it's development is not too active) * wpkg-gp using the group policies * www.opsi.org (Client Management System for Windows clients) * standard windows software deployment, but I think that's msi-only This page also has al lot interesting reading: http://www.klaus-hartnegg.de/gpo/ However, I'm looking for some praktical tips or experiences. What are you using, do you like it? Would you recommend it? The samba wiki also has a page on this subject: https://wiki.samba.org/index.php/Software_deployment_on_Samba but it only talks about wpkg, and history tells me it...

Upgrading Win7-32 (connected to Samba as NT-PDC) to Win10 requires - disable HardenedUncPaths (MutualAuth & Integrity) - install NTVDM - enable LegacyConsole otherwise the logon-script in Netlogon does not run, even if samba.cnf contains "server max level = NT1" Is Samba as NT-PDC supposed to handle HardenedUncPaths? Did I miss that I should have enabled that somehow in smb.conf?

Hi, Following the wiki page Setting_up_a_Share_Using_Windows_ACLs windows shows me this error after clicking on Shares: Disk Management could not start the Virtual Disk Service (VDS) on 'COMPUTER'. This can happen if the remote computer does not support VDS, or if a connection cannot be established because it was blocked by Windows Firewall. Tested on a new provisioned AD-DC server.

WOW! That's could be a nice idea! 2016-09-29 14:13 GMT-03:00 Jeremy Allison via samba <samba at lists.samba.org>: > On Thu, Sep 29, 2016 at 05:31:12PM +0200, Klaus Hartnegg via samba wrote: > > Am 29.09.2016 um 16:26 schrieb v g via samba: > > >Really? Easy and useful, huh? > > > > Live sync of directories is VERY useful. > > > > So useful that I just try to kill the purchase of EMC Isilon, precisely > > because it cannot r...

Hi, Is it normal that "chown $user $file" and "chown :$group $file" destroy the Windows-ACLs? Is it normal that changing the file owner in Windows does not change the file owner in Linux, but changing the file owner in Linux does change the file owner in Windows? This should be mentioned in >

Am 20.04.2015 um 00:24 schrieb Andrey Repin: > First, I don't see "guest ok = yes" on your share. > Second, try with "map to guest = bad user", if you don't want to fix the link > to your domain proper. And probably you must also make sure that the user specified at "map to guest" actually exists, and has read permission in the shared directory.

...ore to the point, I'd be seriously concerned about the results. This is not something I'm prepared to test in a production environment and a test environment may not reveal all the problems, at least not within the time frame I need to deal with. regards, John On 25/08/16 19:49, Klaus Hartnegg via samba wrote: > On 24.08.2016 at 05:40 John Gardeniers via samba wrote: >> As a result of a company restructure and name change we need to change >> our AD domain. I know that we can't change the AD domain name in Samba >> 4, so I'm looking at the smoothest way to mi...

On Fri, May 15, 2015 at 4:37 AM, Klaus Hartnegg <hartnegg at uni-freiburg.de> wrote: > Not sure which email you mean. I don't think that this can happen. If the > Linux acls are modified, the Windows ACLs are destroyed and all is based on > the Linux permissions and acls (which looks strange when viewed from > Window). If...

Hi, The group that is mapped to rid=512 cannot be used in "valid users", the users cannot map the share (error 5). Is this normal? Should I file a bug? Version 4.1.6-Ubuntu server role = classic primary domain controller smb.conf: valid users = +smbadmin command: net groupmap add ntgroup="Domain Admins" unixgroup=smbadmin rid=512 type=d As soon as I remove the group