search for: sediskoperatorprivileges

On Mon, 10 Jun 2024 08:33:13 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sun, 9 Jun 2024 18:52:39 +0100 > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > Update: > > > > I have revoked the privilege to BUILIN\Administratos. As before, no > > root mapping. > > > > root at member:/# net rpc rights

On Mon, 10 Jun 2024 13:38:21 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Mon, 10 Jun 2024 08:33:13 +0100 > Rowland Penny via samba <samba at lists.samba.org> wrote: > > > On Sun, 9 Jun 2024 18:52:39 +0100 > > Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > > > Update: > > > > > > I

On Tue, Jun 11, 2024 at 05:04:11PM +0100, Rowland Penny wrote: >On Tue, 11 Jun 2024 15:52:45 +0100 >Luis Peromarta via samba <samba at lists.samba.org> wrote: > >> Again, my exact same experience. >> >> LP >> On Jun 11, 2024 at 14:58 +0100, Bailey Allison via samba >> <samba at lists.samba.org>, wrote: >> > Hey Rowland, >> >

Hi, I have a samba server setup as a domain member. I am trying to grant SeDiskOperatorPrivilege to some user accounts e.g. "domainaname\User", but I always get the above error. It doesnot matter what I specify as the server in -S option to the command. The command syntax I use is: net rpc rights grant "username" SeDiskOperatorPrivilege OR net -S ADserver -U

I have sssd configured and working with my domain member server and I now wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins" group. When I execute the command it appears to disregard the domain name and grant the privileges to the group "Unix Group\domain admins" net rpc rights list accounts -U'MYDOMAIN\administrator' Enter

Dear experts, I am having following problem on samba server side . please help me . 1) our device is running with samba server , in order to allow Microsoft windows mmc to change samba share permissions I am giving SeDiskOperatorPrivilege ( net rpc rights grant admin SeDiskOperatorPrivilege) privilege to samba users. This is working fine as long as our device is in standalone work group

On Sun, 9 Jun 2024 16:53:30 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Mmm? strange ? Or is this what you were expecting ? No > > root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege > -Uadministrator Password for [MAD\administrator]: > Could not connect to server 127.0.0.1 > The username or password was not correct. >

(Re-posting to list also.. Sorry forgot Cc. -Tom) Marc, Thanks for your help and clarifications. I was indeed addressing the domain controller (2012 R2) due to my misunderstanding. Addressing the request at the file server (Samba 4) to the file server fails too but with different errors. Rights list succeeds. $ net rpc rights list accounts -UDOMAIN\\Administrator Enter

On Sun, 9 Jun 2024 18:52:39 +0100 Luis Peromarta via samba <samba at lists.samba.org> wrote: > Update: > > I have revoked the privilege to BUILIN\Administratos. As before, no > root mapping. > > root at member:/# net rpc rights revoke "BUILTIN\Administrators" > SeDiskOperatorPrivilege -U "MAD\luis" Password for [MAD\luis]: > Successfully revoked

Mmm? strange ? Or is this what you were expecting ? root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uadministrator Password for [MAD\administrator]: Could not connect to server 127.0.0.1 The username or password was not correct. Connection failed: NT_STATUS_LOGON_FAILURE root at member:/# net rpc rights list privileges SeDiskOperatorPrivilege -Uadministrator Password

On Tue, 11 Jun 2024 09:08:54 -0700 Jeremy Allison via samba <samba at lists.samba.org> wrote: > On Tue, Jun 11, 2024 at 05:04:11PM +0100, Rowland Penny wrote: > >On Tue, 11 Jun 2024 15:52:45 +0100 > >Luis Peromarta via samba <samba at lists.samba.org> wrote: > > > >> Again, my exact same experience. > >> > >> LP > >> On Jun 11,

Hey Rowland, Just wanted to say you are 100% correct, and it does (seemingly) nothing, at least within the context of setting Windows ACLs. I believe I have made a post on here a while ago with the same observation, I will see if I can find it. For configuring of Windows ACLs, the only thing it initially cares about is the owner user or owner group on the directory you are sharing out. If you

Dear all, we are transitioning from an openldap / MIT KDC setup to a samba4 AD. I am doing this by setting up a samba NT4 domain, populating it from LDAP and sticking in the password hashes which I automatically extract from the MIT KDC arc4-hmac keys. Then I run the classicupgrade. I do this whole thing from cron in a script once a day to be able to slowly migrate services. The MIT / openldap

Mark, Below xxx.yyy. is my network prefix. [global] workgroup = DOMAIN realm = DOMAIN.LOCAL server string = Server %v security = ADS client signing = auto client use spnego = yes kerberos method = secrets and keytab log file = /var/log/samba/log.%m log level = 3 max log size = 50 load printers = No printcap name = /dev/null idmap config * :

Kind regards, Henry McLaughlin 0411 444 363 (Mobile) henry at incred.com.au PO Box 329 Romsey VIC 3434 On 15 January 2016 at 23:24, Rowland penny <rpenny at samba.org> wrote: > On 15/01/16 12:08, Henry McLaughlin wrote: > >> >> >> On 15 January 2016 at 22:28, Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>> wrote: >>

On 20 January 2016 at 06:43, Rowland penny <rpenny at samba.org> wrote: > On 19/01/16 19:34, Henry McLaughlin wrote: > >> I have sssd configured and working with my domain member server and I now >> wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins" >> group. When I execute the command it appears to disregard the domain name >>

I am having trouble giving the Domain Admin group the 'SeDiskOperatorPrivilege' privilege on a member server. Running 'net rpc rights list accounts -UAdministrator' Results in this: Enter Administrator's password: BUILTIN\Print Operators No privileges assigned BUILTIN\Account Operators No privileges assigned BUILTIN\Backup Operators No privileges assigned BUILTIN\Server

Hello, I've been setting up new file server using samba 4.8.3 (centos 7 RPM), as samba 4 AD member server using my earlier smb.conf when I realised that I was  previously somewhat circumventing the SeDiskOperatorPrivilege by using "admin users map" to SAMDOM\Domain admins" parameter in smb.conf. I decided to change my smb.conf and setup shares following samba wiki. All

We’ve just recently moved over to Samba 4. It looks as if “force directory security mode” doesn’t work in samba 4. So I’m trying to setup the Windows ACLs on our groups share. I’ve been working on this for a few days. I’ve read over the docs, it seems like all the google links are purple and I’m still stuck. Hopefully someone here will have an idea. We’re running Windows 2008R2 for our AD

Tim, Thanks for the hint. Usermap for root applied, locally made requests fail now systematically with "Could not connect to server <server address> Connection failed: NT_STATUS_LOCK_NOT_GRANTED" It is kind of improvement :) Random things scare me. -Tom On Tue, Mar 24, 2015 at 7:40 PM, Tim <lists at kiuni.de> wrote: > Hi Tom, > > have a look at this: >