search for: shares_with_windows_acls

I now have my DC working and member server working. I am using this guide to create a file server with Windows ACLs: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs I am unsure of this section of the guide: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#Enable_extended_ACL_support_in_smb.conf The following is only required on Domain Members and not on Domain Controllers, where this setting is hard coded enabled. Add the following to your [global]...

...t; >>> have you given Domain Admins the required rights ? >>> >>> net rpc rights grant DOMAIN\\"Domain Admins" >>> SeDiskOperatorPrivilege -UAdministrator >>> >> Yes. I followed this wiki example: >> https://wiki.samba.org/index.php/Shares_with_Windows_ACLs >> >> Here is some output: >> >> [nienberg at gecko ~]$ net rpc rights list accounts -U'STA\myAdminAccount' >> >> STA\Domain Admins >> SeDiskOperatorPrivilege >> Do your Domain Admins have 'Full control' as a permission and 'This...

...d Penny via samba < samba at lists.samba.org> wrote: > have you given Domain Admins the required rights ? > > net rpc rights grant DOMAIN\\"Domain Admins" > SeDiskOperatorPrivilege -UAdministrator > Yes. I followed this wiki example: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs Here is some output: [nienberg at gecko ~]$ net rpc rights list accounts -U'STA\myAdminAccount' STA\Domain Admins SeDiskOperatorPrivilege

Hi, I have installed samba 4.4.4 and configured and works perfect, now I need to configure roaming profiles and reading https://wiki.samba.org/index.php/Shares_with_Windows_ACLs I have detected that I can't configure chgrp "Domain Admins" /srv/samba/Demo/ I'm creating this share on our dc, but seem that with # getent group "Domain Admins" any samba AD group is recovered I have found "If you don't get an output showing the querie...

...have you given Domain Admins the required rights ? > > net rpc rights grant DOMAIN\\"Domain Admins" > SeDiskOperatorPrivilege -UAdministrator > > Yes. I followed this wiki example: > https://wiki.samba.org/index.php/Shares_with_Windows_ACLs > <https://wiki.samba.org/index.php/Shares_with_Windows_ACLs> > > Here is some output: > > [nienberg at gecko ~]$ net rpc rights list accounts > -U'STA\myAdminAccount' > > STA\Domain Admins >...

...he new "Domain Member" page. In combination with the file-/printserver and other docs, everything is covered and no more duplicated. * https://wiki.samba.org/index.php/Shares_with_POSIX_ACLs Major rewrite. More/detailed information, restructured. * https://wiki.samba.org/index.php/Shares_with_Windows_ACLs Major rewrite. More/detailed information, restructured. Works without "username map", like often suggested. * https://wiki.samba.org/index.php/Setup_a_Samba_print_server https://wiki.samba.org/index.php/Configuring_Point'n'Print_automatic_printer_driver_deployment Major re...

Dear Samba users and admins, I am trying to deploy Samba4 as a domain controller and a file server and having some issues.* The domain have been well provisioned with option --use-rfc2307 I am then trying to create share by following this samba wiki https://wiki.samba.org/index.php/Shares_with_Windows_ACLs The problem is that i cannot succeed to change the group owner of the folder I want to share as recommended with the following command chgrp "Domain Admins" /home/demo When I try the chgrp command I receive and error : invalid group "Domain Admins'. I then read the article...

...rinter_drivers/ Is wrong in my opinion. # chmod -R 2775 /srv/samba/Printer_drivers/ Looks better to me. How else are "members of domain admins" allowed to write in the /srv/samba/Printer_drivers/ folder? Rowland, can you confirm this? But i use the https://wiki.samba.org/index.php/Shares_with_Windows_ACLs setup. This is my share setup: [print$] comment = Printer Drivers path = /home/samba/printing/drivers acl_xattr:ignore system acl = yes writable = yes guest ok = no last tip. ( for win64 drivers ) cd /smb/Printer_drivers ln -s x64 X64 i noticed some drivers used capital X in th...

I am not 100% clear as to when the following is required in smb.conf on a member server: vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#Enable_extended_ACL_support_in_smb.conf I have confirmed Samba is compiled with ACL support: [root at centos7member ~]# smbd -b | grep HAVE_LIBACL HAVE_LIBACL [root at centos7member ~]#

...23.09.2015 um 10:45 schrieb Matthias Leopold: >> this seems to be a mat{,t}hias discussion ;-) > > oh, sorry. :-) > > > > >> Marc, you said i can have windows ACLs on a standalone server. How do i >> accomplish the >> "https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#SeDiskOperatorPrivilege" >> >> part when i don't have a domain? > > Skip the domain part or use the hostname, to use a local account. > > > Regards, > Marc > > > Hi Marc, thanks for your help so far, maybe you can answer one more question. Is it pos...

I am not 100% clear as to when the following is required in smb.conf on a member server: vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#Enable_extended_ACL_support_in_smb.conf I have confirmed Samba is compiled with ACL support: [root at centos7member ~]# smbd -b | grep HAVE_LIBACL HAVE_LIBACL [root at centos7member ~]#

You can be on the same machine where and 'configured Domino also filserver? If that directives should I enter in the smb.conf? Il 08/12/2016 20:33, Rowland Penny via samba ha scritto: > On Thu, 08 Dec 2016 20:24:28 +0100 > Micha Ballmann via samba <samba at lists.samba.org> wrote: > >> https://wiki.ubuntuusers.de/Samba_Winbind/ >> > I cannot recommend that

...of mind. > you should be able to manage access to a share on a domain member from a > windows machine, Should be, that much I've gathered from wiki. But it is already nine months that I'm unable to implement it. > see this page on the wiki: > https://wiki.samba.org/index.php/Shares_with_Windows_ACLs > If you follow the various pages on the wiki, you should be able make it > work, if you cannot, you are doing something wrong. So, what I'm doing wrong? I've followed the wiki multiple times to the point. If you have any diagnostics in mind, please suggest, because this is tiring....

...;; idmap config for domain MYDOMAIN >> idmap config MYDOMAIN : backend = ad >> idmap config MYDOMAIN : schema_mode = rfc2307 >> idmap config MYDOMAIN : range = 10000-99999 >> > Are you following this wiki page ? > > https://wiki.samba.org/index.php/Shares_with_Windows_ACLs Yes, the page is linked in the "Preparatory work" section of the "User home drives" page <https://wiki.samba.org/index.php/User_home_drives> However it is not very specific as to what permissions should actually be configured: "Go to the "Security" tab,...

> > It is probably the only way, but I would read this before you start: Ok. > Do you mean you will be using the DC as a fileserver ? No. I was thinking of using the old samba server (NT4-style) as a file server. AD stays separate. On Wed, Sep 21, 2016 at 2:06 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Wed, 21 Sep 2016 13:33:43 -0300 > Elias

Hai Mourik Jan/Victor. > MJ definitely understands the problem I'm facing.... Yes, and i do to but you wont listen... ALL My client pc's, windows and linux computers, dont have any uid/gid assigned. My client pc's do access the DCs and multiple member servers with shares. I do distribute settings and files with GPO and these files are on a member server. Yes also as

...> Thanks > > > 2016-07-07 9:56 GMT+02:00 Trenta sis <trenta.sis at gmail.com>: > >> Hi, >> >> I have installed samba 4.4.4 and configured and works perfect, now I need >> to configure roaming profiles and reading >> https://wiki.samba.org/index.php/Shares_with_Windows_ACLs >> >> I have detected that I can't configure >> >> chgrp "Domain Admins" /srv/samba/Demo/ >> >> >> I'm creating this share on our dc, but seem that with >> # getent group "Domain Admins" >> >> any samba AD group...

...errors and joined to your domain, you can now manage it. You’ll have to setup the shares via the smb.conf file, which is all documented here (and I recommend using Windows ACLs since it feels to me like you’re using Windows workstations to access the file shares): https://wiki.samba.org/index.php/Shares_with_Windows_ACLs <https://wiki.samba.org/index.php/Shares_with_Windows_ACLs> then reload the configuration with the command: smbcontrol all reload-config and then the shares should be visible and accessible on your network. I can’t say anything except that this recent file server build for me was the firs...

...n with the file-/printserver and other docs, everything >> is covered and no more duplicated. >> >> * https://wiki.samba.org/index.php/Shares_with_POSIX_ACLs >> Major rewrite. More/detailed information, restructured. >> >> * https://wiki.samba.org/index.php/Shares_with_Windows_ACLs >> Major rewrite. More/detailed information, restructured. >> Works without "username map", like often suggested. >> >> * https://wiki.samba.org/index.php/Setup_a_Samba_print_server >> >> https://wiki.samba.org/index.php/Configuring_Point'n...

...auth:6 syslog = 9 syslog only = yes #============================ Share Definitions ============================== [PTA_test] path = /srv/PTA_test writable = yes _________________________________________________________________________ Using https://wiki.samba.org/index.php/Shares_with_Windows_ACLs, we would like to create a share with Windows (extended) ACLs. As we are using "acl_xattr:ignore system acls = yes" I initially thought that only system rights (UGO, no ACL) are taken in account by samba to check if it can write. According to that forcing 777 on the share didn't same...