search for: logonuser

Following the "User Home Folders" page on the wiki using Group Policy https://wiki.samba.org/index.php/User_Home_Folders I see this page was last updated in March 2017. Not sure if anything has changed. Although I can access the shares, the %LogonUser% directory does not seem to be automatically generating. Thoughts? Share definition: [users] path = /server/users read only = no force create mode 0600 force directory mode = 0700 # chgrp "Domain Users" /server/users # chmod 2750 /server/users

The application's running environment: wine 1.2 ubuntu 10.04 E The application asks for a username and password, then calls the LogonUser() in windows advapi32.dll. to authenticate the user. The UI is displaying, but the authentication always returns true, even if a wrong password is given to the user. Is there any patch I can install to fix it? Thanks, Qing

Hello we are testing samba 4.11.2 and we try automatic mapping shares folders for users that their have permissions on fileserver, on the logon time, like logon script on Windows. Any have a method to do this ? I explain, instead of the user go to "File Browser" and navigate and map the share folders on the fileserver, we try to automatic map this folders on logon time. regards. PD:

...t; You need to create a GPO. > There's a very good description here: > https://activedirectorypro.com/map-network-drives-with-group-policy/ > You can map drive per user, per group or a combination, with or without > exclusions. > There is a mistake in the article; you should use %LogonUser% instead of > %username%. > > Best regards > > jmpatagonia via samba <samba at lists.samba.org> escreveu no dia segunda, > 14/09/2020 ?(s) 14:22: > >> Hello we are testing samba 4.11.2 and we try automatic mapping shares >> folders for users that their have pe...

...I was impressed. Now the bad news: ;-) Not working was: 1. Running as Service (Service-Registering was successful, but ...) (Ok, no big problem, running as UserProcess was working, but are there plans, to simulate the Win-ServiceControlmanager?) 2. Win-Authentication and -Impersonation (LogonUser- and ImpersonateLoggedOnUser-APIs - already mapped?) 3. "Global ServerSingletons" using ROT-Entries with FileMoniker-Binding 4. "RPCServer-internal Singletons" (CoMarshalInterThreadInterfaceInStream and CoGetInterfaceAndReleaseStream against the IUnknown-Interface). Any Ide...

...ng > >> Group Policy > >> > >> https://wiki.samba.org/index.php/User_Home_Folders > >> > >> I see this page was last updated in March 2017. > >> Not sure if anything has changed. > >> > >> Although I can access the shares, the %LogonUser% directory > >> does not seem to be automatically generating. > >> > >> Thoughts? > >> > >> Share definition: > >> > >> [users] > >> path = /server/users > >> read only = no > >> force create mode 0600 > &g...

...with user identity root. [576] 18:30:34:921: Prepending default domain. [576] 18:30:34:921: SAM-Account-Name is "DOMAIN\root". [576] 18:30:34:921: NT-SAM Authentication handler received request for DOMAIN\root. [576] 18:30:34:921: Processing MS-CHAP v2 authentication. [576] 18:30:34:968: LogonUser succeeded. [576] 18:30:34:968: NT-SAM User Authorization handler received request for DOMAIN\root. [576] 18:30:34:968: Using downlevel dial-in parameters. [576] 18:30:34:968: DS not installed for domain DOMAIN. [576] 18:30:34:968: Connecting to SAM server on \\SERVER. [576] 18:30:35:093: Connecting...

...in ADUC selecting "connect to" in the user's profile to map the home share will create the directory when a new user is created but it doesn't end up mapping the drive. I went into GP and set a windows preference for drive mapping and told it to map the P drive to \\server\home\%logonuser% and it still won't map the user's drive. Also I was getting access denied to everything until I set the unix attributes (which I thought were just for granting permissions under Unix.) I guess I'm not real clear about what the unix attributes tab is for. I thought it was for mapp...

...e a GPO. >> There's a very good description here: >> https://activedirectorypro.com/map-network-drives-with-group-policy/ >> You can map drive per user, per group or a combination, with or without >> exclusions. >> There is a mistake in the article; you should use %LogonUser% instead of >> %username%. >> >> Best regards >> >> jmpatagonia via samba <samba at lists.samba.org> escreveu no dia segunda, >> 14/09/2020 ?(s) 14:22: >> >>> Hello we are testing samba 4.11.2 and we try automatic mapping shares >>>...

...rom Windows, because there is a change on the Unix side, > 'Domain Admins' now has the required Unix permissions. Correct. In Computer Manager I can not access anything on the share except for the share permissions. I've also been trying to create "user directory" using %LogonUser% via a group profile. That deosn't seem to be working, but I don't know if it's related. > > One other thing, I cannot remember asking if Apparmor or Selinux is > installed and enabled. > > Rowland I tried sestatus and apparmor_status and bith returned 'command no...

...ain Admins' now has the required Unix permissions. > >> > >> Correct. In Computer Manager I can not access anything on the > >> share except for the share permissions. > >> > >> I've also been trying to create "user directory" using %LogonUser% > >> via a group profile. That deosn't seem to be working, but I don't > >> know if it's related. > >> > > >> > One other thing, I cannot remember asking if Apparmor or > Selinux is > >> > installed and enabled. > >> &...

Hey, You need to create a GPO. There's a very good description here: https://activedirectorypro.com/map-network-drives-with-group-policy/ You can map drive per user, per group or a combination, with or without exclusions. There is a mistake in the article; you should use %LogonUser% instead of %username%. Best regards jmpatagonia via samba <samba at lists.samba.org> escreveu no dia segunda, 14/09/2020 ?(s) 14:22: > Hello we are testing samba 4.11.2 and we try automatic mapping shares > folders for users that their have permissions on fileserver, on the logon &g...

...t; You need to create a GPO. > There's a very good description here: > https://activedirectorypro.com/map-network-drives-with-group-policy/ > You can map drive per user, per group or a combination, with or without > exclusions. > There is a mistake in the article; you should use %LogonUser% instead of > %username%. > > Best regards > > jmpatagonia via samba <samba at lists.samba.org> escreveu no dia segunda, > 14/09/2020 ?(s) 14:22: > >> Hello we are testing samba 4.11.2 and we try automatic mapping shares >> folders for users that their have pe...

This isn't exactly a Samba question, but I heard Luke Leighton say something at LISA NT that I'd like to know a little more about. In reference to gina.dll and user authentication, Luke said that NT makes a call to something along the lines of "LogonUserEx()", which isn't documented (although "LogonUser()" is). What I'd like to know is: how did he know? Is there some tool that allows one to "sniff" system calls? (Even better, might it possible to puzzle out what's going on in the kernel while it's proces...

...a change on the Unix side, > > 'Domain Admins' now has the required Unix permissions. > > Correct. In Computer Manager I can not access anything on the > share except for the share permissions. > > I've also been trying to create "user directory" using %LogonUser% > via a group profile. That deosn't seem to be working, but I don't > know if it's related. > > > > One other thing, I cannot remember asking if Apparmor or Selinux is > > installed and enabled. > > > > Rowland > > I tried sestatus and appa...

...ere's a very good description here: > >> https://activedirectorypro.com/map-network-drives-with-group-policy/ > >> You can map drive per user, per group or a combination, with or without > >> exclusions. > >> There is a mistake in the article; you should use %LogonUser% instead of > >> %username%. > >> > >> Best regards > >> > >> jmpatagonia via samba <samba at lists.samba.org> escreveu no dia segunda, > >> 14/09/2020 ?(s) 14:22: > >> > >>> Hello we are testing samba 4.11.2 and we tr...

...w has the required Unix permissions. >> >> >> >> Correct. In Computer Manager I can not access anything on the >> >> share except for the share permissions. >> >> >> >> I've also been trying to create "user directory" using %LogonUser% >> >> via a group profile. That deosn't seem to be working, but I don't >> >> know if it's related. >> >> > >> >> > One other thing, I cannot remember asking if Apparmor or >> Selinux is >> >> > installed and e...

...[576] 18:30:34:921: Prepending default domain. > [576] 18:30:34:921: SAM-Account-Name is "DOMAIN\root". > [576] 18:30:34:921: NT-SAM Authentication handler received request for > DOMAIN\root. > [576] 18:30:34:921: Processing MS-CHAP v2 authentication. > [576] 18:30:34:968: LogonUser succeeded. > [576] 18:30:34:968: NT-SAM User Authorization handler received request for > DOMAIN\root. > [576] 18:30:34:968: Using downlevel dial-in parameters. > [576] 18:30:34:968: DS not installed for domain DOMAIN. > [576] 18:30:34:968: Connecting to SAM server on \\SERVER. >...

On 2019-02-19 3:47 pm, Rowland Penny via samba wrote: > On Tue, 19 Feb 2019 15:25:51 -0500 >> What exactly does "START AGAIN" imply? Just chmod? > > 'ls' shows the correct ownership and Unix permissions: > > drwxrwx---+ 4 root domain admins 4096 Feb 17 19:13 programs > > But 'getfacl' show something different: > > getfacl:

...A Google search turns up potential issues with DNS or with the share name being specified using a trailing slash in the GPO. Given the mapping of the other share works just fine, I can rule out DNS. My share definition in the GPO doesn't have a trailing slash, but it does use a variable '%LogonUser%'. I also tried creating the GPO with the variable '%username%', which didn't work either. Here's my smb.conf [global] kerberos method = system keytab workgroup = FTLC security = ads realm = AD.FTLCOMPUTING.COM # Netbios is dead, let's make it explicit disable netbios =...