Displaying 11 results from an estimated 11 matches for "plymouthhistory".
2016 Sep 22
2
Domain Member Server: Domain Users cannot access shares
...e retained the ACLs I had set
previously and we're accessible without modification. I just wish I could
find some indication that this is a known issue, my Google fu fails to
reveal any evidence supporting the theory.
Kind Regards,
JS
On Thu, Sep 22, 2016 at 7:21 PM, Jason Secord <it at plymouthhistory.org>
wrote:
> Hi Rowland,
>
>
> *Apparently I accidentally replied directly to you instead of the list,
> this is from a couple days ago...*
>
> First off, thanks again for your help, your insight is invaluable.
>
> I have completed the changes you suggested:
>
>...
2016 Sep 22
0
Domain Member Server: Domain Users cannot access shares
...names
# file: mnt/md0/samba_shares/Accounts
# owner: itwerks
# group: domain\040admins
user::rwx
group::rwx
other::rwx
default:user::rwx
default:group::rwx
default:group:domain\040admins:rwx
default:mask::rwx
default:other::rwx
Regards,
JS
On Thu, Sep 22, 2016 at 1:35 AM, Jason Secord <it at plymouthhistory.org>
wrote:
> I ran another test of a share on the raid array after making the changes
> you suggested Rowland. I reset the ACLs on /mnt/md0/samba_shares/test as
> outlined in the wiki and set the default group to domain admins. I
> executed setfacl commands g=rwx and chgrp domain...
2016 Sep 20
5
Domain Member Server: Domain Users cannot access shares
...o is a member of the "Domain Users" group fails, I am prompted to enter
credentials, I do so and the are rejected. Domain Admins can both view all
shares and access their contents without a problem.
My smb.conf:
# Global parameters
[global]
workgroup = PHM
realm = PHM.PLYMOUTHHISTORY.ORG
netbios name = phmsrv01
security = ads
printing = CUPS
printcap name = /dev/null
encrypt passwords = yes
bind interfaces only = yes
interfaces = lo eno2
log file = /var/log/samba/samba.%m.log
log level = 2
dedicated keytab file...
2016 Sep 21
0
Domain Member Server: Domain Users cannot access shares
...on here? The system drive is hosted by the same
controller... I've successfully used RAID arrays and mdadm to host shares
at other locations. I'd really love to understand what's going awry in
this setup.
Kind regards,
JS
On Sep 20, 2016 4:30 PM, "Jason Secord" <it at plymouthhistory.org> wrote:
> Hello to the Samba devs and mailing list subscribers,
>
> I've run into a bit of trouble getting a new domain member server setup.
>
> I've got three Ubuntu 14.04 64 bit VMs running the latest stable build of
> Samba built from source acting as Domain Con...
2016 Sep 21
0
Domain Member Server: Domain Users cannot access shares
On Wed, 21 Sep 2016 11:09:15 -0400
Jason Secord <it at plymouthhistory.org> wrote:
> Hi Rowland,
>
> I've already removed all "admin users" and "valid users" entries from
> my smb.conf, they ended up there after hours of confusion trying to
> drill down to the root of the problem.
>
> To remove the aforementioned UID/...
2016 Sep 23
2
Domain Member Server: Domain Users cannot access shares
.... I just
> > wish I could find some indication that this is a known issue, my
> > Google fu fails to reveal any evidence supporting the theory.
> >
> >
> > Kind Regards,
> >
> > JS
> >
> > On Thu, Sep 22, 2016 at 7:21 PM, Jason Secord <it at plymouthhistory.org>
> > wrote:
> >
> > > Hi Rowland,
> > >
> > >
> > > *Apparently I accidentally replied directly to you instead of the
> > > list, this is from a couple days ago...*
> > >
> > > First off, thanks again for your help, y...
2016 Sep 23
0
Domain Member Server: Domain Users cannot access shares
...we're accessible without modification. I just
> wish I could find some indication that this is a known issue, my
> Google fu fails to reveal any evidence supporting the theory.
>
>
> Kind Regards,
>
> JS
>
> On Thu, Sep 22, 2016 at 7:21 PM, Jason Secord <it at plymouthhistory.org>
> wrote:
>
> > Hi Rowland,
> >
> >
> > *Apparently I accidentally replied directly to you instead of the
> > list, this is from a couple days ago...*
> >
> > First off, thanks again for your help, your insight is invaluable.
> >
> &g...
2016 Sep 25
3
Domain Member Server: Domain Users cannot access shares
...v01:~$ cat /etc/samba/smb.conf | grep "store dos attributes"
store dos attributes = yes
itwerks at phmsrv01:~$
*Step 4: Ensure admin accounts have SeDiskOperatorPrivilege assigned:*
itwerks at phmsrv01:~$ net rpc rights list accounts -U'PHM\administrator' -I
phmadc01.phm.plymouthhistory.org
PHM\Administrator
SeDiskOperatorPrivilege
PHM\itwerks
SeDiskOperatorPrivilege
PHM\Domain Admins
SeDiskOperatorPrivilege
Since I've already gone through the process of creating directories and we
know that Domain Admins have Full Control I'm skipping those steps from the
wiki.
Ste...
2016 Sep 25
0
Domain Member Server: Domain Users cannot access shares
...onf | grep "store dos
> attributes" store dos attributes = yes
> itwerks at phmsrv01:~$
>
> *Step 4: Ensure admin accounts have SeDiskOperatorPrivilege assigned:*
>
> itwerks at phmsrv01:~$ net rpc rights list accounts
> -U'PHM\administrator' -I phmadc01.phm.plymouthhistory.org
>
> PHM\Administrator
> SeDiskOperatorPrivilege
>
> PHM\itwerks
> SeDiskOperatorPrivilege
>
> PHM\Domain Admins
> SeDiskOperatorPrivilege
>
>
>
> Since I've already gone through the process of creating directories
> and we know that Domain Adm...
2016 Sep 25
1
Domain Member Server: Domain Users cannot access shares
...gt; attributes" store dos attributes = yes
> > itwerks at phmsrv01:~$
> >
> > *Step 4: Ensure admin accounts have SeDiskOperatorPrivilege assigned:*
> >
> > itwerks at phmsrv01:~$ net rpc rights list accounts
> > -U'PHM\administrator' -I phmadc01.phm.plymouthhistory.org
> >
> > PHM\Administrator
> > SeDiskOperatorPrivilege
> >
> > PHM\itwerks
> > SeDiskOperatorPrivilege
> >
> > PHM\Domain Admins
> > SeDiskOperatorPrivilege
> >
> >
> >
> > Since I've already gone through the proce...
2016 Oct 08
0
Best Practices: Samba AD with multiple DCs/BIND9 DNS servers
Rowland: I set up all domain controllers bind installs the same, followed
the wiki.
Marc: that's the piece of information i needed... Now, I'll double check
this, but the other night I created a new record using the DNS snap-in from
RSAT on DC1. After a few minutes i checked DC2's DNS zones and the record
was not visible. I checked that drs showrepl was reporting successful