search for: rintimtim

samba 4.1.13, server role is active directory domain controller. On Sat, Dec 20, 2014 at 6:23 AM, Tim <rintimtim at gmx.net> wrote: > What version and server mode are you talking about? > > Am 19. Dezember 2014 16:53:57 MEZ, schrieb Dongsheng Song > <dongsheng.song at gmail.com>: >> >> Is there have simplest way to make domain users which in remote >> desktop group can r...

On Sat, Dec 20, 2014 at 4:15 PM, Tim <rintimtim at gmx.net> wrote: > Then I would do it with a group policy. Have a look right here: > http://technet.microsoft.com/en-us/library/ee791928(v=WS.10).aspx > > Remind that you leave the default policies untouched. Create a new GPo and > link it to your desired OU. > After put dom...

...provisioned with rfc2307 it seems to me just a small step of setting uid in rfc2307 when a user or group is created by ADUC. Something for Samba Devs? Thanks Tim Gesendet:?Donnerstag, 11. Dezember 2014 um 10:56 Uhr Von:?"Rowland Penny" <rowlandpenny at googlemail.com> An:?Tim <rintimtim at gmx.net> Cc:?samba at lists.samba.org Betreff:?Re: [Samba] Samba 4 two DCs no matching UID/GID On 10/12/14 21:53, Tim wrote: > > Am 10. Dezember 2014 22:26:52 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >> On 10/12/14 21:05, Tim wrote: >>> Thanks fo...

On 11/12/14 13:21, rintimtim at gmx.net wrote: > I think for now, uid and gid would be enough, when these would be automatically set without the need of enabling nis domain in unix tab. Just because it is import to unix based fileservers. Every uid and gid would be replicated and available on every DC. ID-mapping would not...

...g file of the file server or does it get the ids from the AD DC so that I don't have to backup? The FS stores the ACL by using the IDs. I am using XFS. Thanks in advance Tim Am 10. Dezember 2014 13:48:40 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 10/12/14 12:21, rintimtim at gmx.net wrote: >> Thanks for the advice of copying the idmap.ldb. That works. >> After adding zum users the uid and gid begin to differ again. I read >> that it is not recommended to run a DC as a fileserver but in my case > >> it's not really an option. It's...

...tting right acls in the filesystem. Advantage of my solution will be that no Unix attributes have to be set in ADUC. If you are interested I will post it when I'm finished. Am 11. Dezember 2014 14:35:15 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 11/12/14 13:21, rintimtim at gmx.net wrote: >> I think for now, uid and gid would be enough, when these would be >automatically set without the need of enabling nis domain in unix tab. >Just because it is import to unix based fileservers. Every uid and gid >would be replicated and available on every DC. ID-ma...

On 10/12/14 12:21, rintimtim at gmx.net wrote: > Thanks for the advice of copying the idmap.ldb. That works. > After adding zum users the uid and gid begin to differ again. I read > that it is not recommended to run a DC as a fileserver but in my case > it's not really an option. It's a network of twelve...

...9;t have to backup? >> The FS stores the ACL by using the IDs. I am using XFS. >> >> Thanks in advance >> Tim >> >> Am 10. Dezember 2014 13:48:40 MEZ, schrieb Rowland Penny >> <rowlandpenny at googlemail.com>: >> >> On 10/12/14 12:21, rintimtim at gmx.net wrote: >> >> Thanks for the advice of copying the idmap.ldb. That works. >> After adding zum users the uid and gid begin to differ again. >> I read that it is not recommended to run a DC as a fileserver >> but in my case it...

...from M$ AD. Just my 2 cents... Regarding msSFUMaxGidNumber: The script first reads it, counts +1 and then writes this back after setting it. So I think it isn't that wrong. Am 13. Dezember 2014 20:43:34 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 13/12/14 18:24, rintimtim at gmx.net wrote: >> Here you are my working script for setting gidNumbers. You're welcome > >> to verify. >> WARNING: I'm not responsible for any damage. Use and test at your own > >> risk. Variables must be set correctly! >> # Groups >> maxGid=400...

But will this idmap.ldb change work for upcoming new users or groups so that uid/gid will not be different? The wiki tells us about built-in groups. Those have the right ids. Am 9. Dezember 2014 23:03:44 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/12/14 21:07, Tim wrote: >> Hello all, >> >> I have a fresh install of two CentOS 7 machines. On

On Fri, 19 Dec 2014 09:17:25 +0100 Tim <rintimtim at gmx.net> wrote: > I think Rowland meant to use rfc2307 attributes in your domain. > Therefore it is needed to provision your domain with --use-rfc2307 > parameter. When you have done this the schema doesn't need to be > extended. Hmmm well used rfc2307 on one of my previous...

...t I don't have to backup? The FS stores the ACL by >using >> the IDs. I am using XFS. Thanks in advance Tim Am 10. >Dezember >> 2014 13:48:40 MEZ, schrieb Rowland Penny >> <rowlandpenny at googlemail.com>: On 10/12/14 12:21, >> rintimtim at gmx.net wrote: Thanks for the advice of copying the >> idmap.ldb. That works. After adding zum users the uid and gid >> begin to differ again. I read that it is not recommended to >> run a DC as a fileserver but in my case it's not really an >>...

...ids from the AD DC so that I don't have to backup? > The FS stores the ACL by using the IDs. I am using XFS. > > Thanks in advance > Tim > > Am 10. Dezember 2014 13:48:40 MEZ, schrieb Rowland Penny > <rowlandpenny at googlemail.com>: > > On 10/12/14 12:21, rintimtim at gmx.net wrote: > > Thanks for the advice of copying the idmap.ldb. That works. > After adding zum users the uid and gid begin to differ again. > I read that it is not recommended to run a DC as a fileserver > but in my case it's not really an op...

On 13/12/14 18:24, rintimtim at gmx.net wrote: > Here you are my working script for setting gidNumbers. You're welcome > to verify. > WARNING: I'm not responsible for any damage. Use and test at your own > risk. Variables must be set correctly! > # Groups > maxGid=40000 > pathTmpFiles="/root...

Why only Domain Users and Domain Admins? I can't follow. But a good idea you've had. So a script can possibly be run on every DC the same. I will check and verify. What about built-in objects like system? These are not available in ADUC if my memory doesn't fail now. Will there be a problem when other built-in objects get a rfc gid/uid. E.g. for now wbinfo resolves uid 0 for

...ckup? The FS stores the ACL by using the IDs. I am >>> using XFS. Thanks in advance Tim Am 10. Dezember 2014 >>> 13:48:40 MEZ, schrieb Rowland Penny >>> <rowlandpenny at googlemail.com>: On 10/12/14 12:21, >>> rintimtim at gmx.net wrote: Thanks for the advice of >copying >>> the idmap.ldb. That works. After adding zum users the >uid >>> and gid begin to differ again. I read that it is not >>> recommended to run a DC as a fileserver but in my case...

...t supported by the internal >winbind for samba4? > >I realize it would probably be better to have the DC be a DC and have a >FS be a FS which is doable since I'm running a vmware platform. > >Rich > > >________________________________ > >From: Tim [mailto:rintimtim at gmx.net] >Sent: Friday, December 19, 2014 5:38 PM >To: Rich Webb; samba at lists.samba.org >Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >character >3 > > >Sorry, ignore me. I didn't read the rest... > > >Am 19. Dezember 2014 23:29:54 MEZ,...

...D DC > so that I don't have to backup? The FS stores the ACL by using > the IDs. I am using XFS. Thanks in advance Tim Am 10. Dezember > 2014 13:48:40 MEZ, schrieb Rowland Penny > <rowlandpenny at googlemail.com>: On 10/12/14 12:21, > rintimtim at gmx.net wrote: Thanks for the advice of copying the > idmap.ldb. That works. After adding zum users the uid and gid > begin to differ again. I read that it is not recommended to > run a DC as a fileserver but in my case it's not really an > option....

...gt;> using XFS. Thanks in advance Tim Am 10. >>>>> Dezember 2014 13:48:40 MEZ, schrieb Rowland >>>>> Penny <rowlandpenny at googlemail.com>: On >>>>> 10/12/14 12:21, rintimtim at gmx.net wrote: >Thanks >>>>> for the advice of copying the idmap.ldb. That >>>>> works. After adding zum users the uid and gid >>>>> begin to differ again. I read that it is not >>&g...

...to backup? The FS stores the ACL by using the IDs. I am >> using XFS. Thanks in advance Tim Am 10. Dezember 2014 >> 13:48:40 MEZ, schrieb Rowland Penny >> <rowlandpenny at googlemail.com>: On 10/12/14 12:21, >> rintimtim at gmx.net wrote: Thanks for the advice of copying >> the idmap.ldb. That works. After adding zum users the uid >> and gid begin to differ again. I read that it is not >> recommended to run a DC as a fileserver but in my case >>...