search for: pischta

...file is located in. Example: You can't give accounting access to \\samba\IT\management\budget.ods without also giving them rights to \\samba\IT and \\samba\IT\management. There may be other limitations, but I haven't found them. -----Urspr?ngliche Nachricht----- > Von:Pisch Tam?s <pischta at gmail.com> > Gesendet: Die 9 Juni 2015 12:49 > An: samba at lists.samba.org > Betreff: [Samba] using the DC as a file Server in AD > > Hi, > > there is a recommendation in the Samba AD DC howto: "We do not recommend > using the Domain Controller as a file Server...

...ould be better to use a separate dc, but I didn't > > want it on that site. > Hi Pisch, that wasn't aimed at you, but it does show why you should > never hijack an existing thread, my fault for not forking it off into a > new thread, sorry ;-) No problem :) Pisch Tam?s <pischta at gmail.com> ezt ?rta (id?pont: 2019. aug. 12., H, 8:13): > > > >> You have to give any users you require visible on Unix a uidNumber attribute > > > Ok, I can do it with samba-tool user edit... > > >> You have to give 'Domain Users' a gidNumber attr...

...ew, or half, or sometimes a majority of the domain users. Only cure appears to be a complete power-off of all computers ----- 1. start up samba server, 2. start up domain user computers. Conclusion: stop/start samba daemon as a last resort. On Tue, Jun 9, 2015 at 6:47 AM, Pisch Tam?s <pischta at gmail.com> wrote: > Hi, > > there is a recommendation in the Samba AD DC howto: "We do not recommend > using the Domain Controller as a file Server." We have two sites. We have > two Samba3 servers now with ldap on site1, and one Samba3 BDC on site2. We > have ~20...

...ain users. Only cure appears to be a complete power-off > of all computers ----- 1. start up samba server, 2. start up domain user > computers. Conclusion: stop/start samba daemon as a last resort. > > > > > > > > > On Tue, Jun 9, 2015 at 6:47 AM, Pisch Tam?s <pischta at gmail.com> wrote: > >> Hi, >> >> there is a recommendation in the Samba AD DC howto: "We do not recommend >> using the Domain Controller as a file Server." We have two sites. We have >> two Samba3 servers now with ldap on site1, and one Samba3 BDC on...

Hi, there is a recommendation in the Samba AD DC howto: "We do not recommend using the Domain Controller as a file Server." We have two sites. We have two Samba3 servers now with ldap on site1, and one Samba3 BDC on site2. We have ~200 users, and around 50 clients connect to the servers at the same time on site1, and around 20 clients connect to the BDC on site2. On the BDCs there are

Pisch Tam?s <pischta at gmail.com> ezt ?rta (id?pont: 2019. j?l. 4., Cs, 13:15): > > >OK, I set up Buster RC3 in a VM > Thanks a lot! > > >I could add 'Domain Admins' to the 'Properties' on the share without any > >problem. > :o > > > Back to Buster machine: &gt...

...in "classic mode" > which should means that this domain is a NT4 domain. And as far as I'm > aware of NT4 domains don't support Kerberos. > > Could you post your smb.conf files please? For both server srv3 and srv7. > > 2016-07-22 10:37 GMT+02:00 Pisch Tamás <pischta at gmail.com>: > >> Hi, >> >> I upgraded our servers from Wheezy to Jessie. I use samba in classic mode, >> with openldap backend. After the upgrade, on the PDC (srv3) everything >> seems to be ok, it authetnicates, the netlogon share is accessible on it, >&gt...

On 09/08/2019 10:33, Pisch Tam?s via samba wrote: >> You have to give any users you require visible on Unix a uidNumber attribute > Ok, I can do it with samba-tool user edit... >> You have to give 'Domain Users' a gidNumber attribute. >> You have to give any group you require to be visible a gidNumber > I know that I can set gidNumber when I create a group, but how

> >>>> Run this : getfacl /home/users > >>> getfacl: Removing leading '/' from absolute path names > >>> # file: home/users > >>> # owner: root > >>> # group: A\\domain\040admins > >>> user::rwx > >>> user:root:rwx > >>> user:10512:rwx > >>> group::rwx > >>>

Hi, I upgraded our servers from Wheezy to Jessie. I use samba in classic mode, with openldap backend. After the upgrade, on the PDC (srv3) everything seems to be ok, it authetnicates, the netlogon share is accessible on it, but on the BDC (srv7), what is the file server, the authentication doesn't work, shares are inaccessible. I compared and syncronized the configuration files to as similar

Hello, I have a PDC with master ldap backend and a BDC with slave ldap backend (both are SaMBa 3.2 on Debian Lenny). I want to install an additional SaMBa server on an another site (on Debian Squeeze). The two sites is connected with VPN (on not so reliable ADSL lines). I read an interesting network scenario in the Samba Guide chapter 6: theoretically it is possible to install one PDC on both

Hi, there was a topic in 2017 with this subject (I don't know, whether my mail will be a new topic, or will be appended to the old). >> > If you just run 'samba-tool user create testuser' you will get a >> > user without a uidNumber. See example5 from 'samba-tool user create >> > --help' for how to create a user with a uidNumber, but there is a

Thanks for the answers. >Here is the tool: > > https://gitlab.com/JonathonReinhart/adam > > Also, look for my post on the mailing list: "Announcing "adam" - > Active Directory Automated Maintenance tool". > > Cheers, > Jonathon > > On Fri, Jun 21, 2019 at 9:46 AM Tom <kleyoneo at hotmail.com> wrote: > > > > It's really a

> > Hi, > > > > I would like to set filesystem permissions on shares (users, at the > > moment) with Windows 10 (1809). > > On the Samba side, the filesystem is ext4. I tested the extended > > attributes usability with setfattr/getfattr, and setfacl/getfacl, and > > they work. > > I set the followings in smb.conf: > > [global] > > vfs

> >> Run this : getfacl /home/users > > getfacl: Removing leading '/' from absolute path names > > # file: home/users > > # owner: root > > # group: A\\domain\040admins > > user::rwx > > user:root:rwx > > user:10512:rwx > > group::rwx > > group:A\\domain\040admins:rwx > > mask::rwx > > other::--- > >

Firstly, Louis, and Rowland, thanks for your answers. > Yes, you used the samba docs, that good. > https://wiki.samba.org/index.php/User_Home_Folders It turned out, no :( I followed it, and it caused me some days to find out why I cannot set acls. Sorry Rowland for the lot of works for me, but I just followed the wiki. > Ps2 in general, a good read :

> Yes, there is an repo for Debian Buster. I have not published it yet but if you want you can use it set up test environment. > As it says on the apt.van-belle.nl site. ;-) > > ... > Debian (10) Buster: > Per 28-June 2018 in buster-experimental repo, when released to the public it will be this repo. > Samba 4.10 is repo name : buster-samba410, current package list is empty

Hi, I would like to connect our AD to the Azure AD. As I see, it needs 2012_R2 functional level. I don't have any Windows AD DC. Is it safe to raise the functional level to 2012_R2 in production environment? I read that 4.19 has initial support for 2019 schema, and for the 2016 functional level, but the 2012 support is still not complete. Thanks, Tamas Pisch

Hi, I'm walking through Samba-Guide, chapter making happy users on Debian lenny. It's hard to me, because I'm new to ldap. I add users with smbldap-useradd -m -a xyz, smbldap-passwd xyz, smbpasswd xyz and they run without error. getent passwd xyz:x:1008:513:System User:/data/users/xyz:/bin/bash id xyz uid=1008(xyz) gid=513(Domain Users) groups=513(Domain Users) Ok, so far, but:

Hi, I go trough the SaMBa guide Making happy users secondly. I configure Debian Lenny on XEN. I have problem with PAM. When i try to change a user's password with smbldap-passwd it runs without error, but when i try to log in I get the "Login incorrect" message. When I try to change a user's password with passwd I get the "Authentication service cannot retrieve