search for: spoleto

...a user enabled to it. Only the user mapped in /etc/samba/user.map can manage the server via the ADUC interface and list, but I’ve assigned the SeDiskOperatorPrivilege to all domain admin Group root at SRVLNXWINTRA01:/home/data# net rpc rights list privileges SeDiskOperatorPrivilege -U "com_spoleto\adminserver" Enter com_spoleto\adminserver's password: SeDiskOperatorPrivilege: COM_SPOLETO\Domain Admins BUILTIN\Administrators Is there anyone can help me? Below my configuration files. ---------------------------------------------------------------------- My /etc/samba/smb.conf #...

...and as such, I cannot >help any further. > >Rowland Ok I try to purge sssd and configure winbind. apt-get remove --purge sssd && apt-get autoremove --purge I successfull removed and re-joined the Linux domain member root at SRVLNXWINTRA01:/home/data# net ads leave -U "com_spoleto\adminserver" Enter com_spoleto\adminserver's password: Deleted account for 'SRVLNXWINTRA01' in realm 'COMUNE.SPOLETO.LOCAL' root at SRVLNXWINTRA01:/home/data# net ads join -U "com_spoleto\adminserver" Enter com_spoleto\adminserver's password: Using short domai...

On Mon, 8 Jan 2018 20:55:22 +0100 Andrea Rossetti <andy.ros at gmail.com> wrote: > I’ve re-changed > > root at SRVLNXWINTRA01:/home/data# nano /etc/samba/smb.conf > > idmap config COM_SPOLETO : backend = ad > to > idmap config COM_SPOLETO : backend = rid > > root at SRVLNXWINTRA01:/home/data# systemctl restart smbd nmbd winbind > root at SRVLNXWINTRA01:/home/data# net cache flush > root at SRVLNXWINTRA01:/home/data# systemctl restart smbd nmbd winbind > root at SRV...

...lem was in the server role options I’ve modified it in “server member” and now I’m able to list the shares under \\linuxserver from any domain user authenticated in a Windows pc AD member. But now 1. Execute computer management from a Windows domain member client as a domain admin user (run as com_spoleto\rossetti.admin that is a “domain admins” member 2. Right click on computer management -> connect to another computer -> srvlnxwintra01 (the Linux server member) 3. I expand “System Tools” -> I expand “Shared Folders” -> click on “Shares” right click on “share” -> Click Properties -&...

...must have something misconfigured or >something missing, What do you have in /etc/hostname, /etc/hosts >and /etc/resolv.conf ? root at SRVLNXWINTRA01:~# cat /etc/hostname SRVLNXWINTRA01 root at SRVLNXWINTRA01:~# cat /etc/hosts 127.0.0.1 localhost 192.168.23.244 SRVLNXWINTRA01.comune.spoleto.local SRVLNXWINTRA01 # The following lines are desirable for IPv6 capable hosts ::1 ip6-localhost ip6-loopback fe00::0 ip6-localnet ff00::0 ip6-mcastprefix ff02::1 ip6-allnodes ff02::2 ip6-allrouters root at SRVLNXWINTRA01:~# cat /etc/resolv.conf # Dynamic resolv.conf(5) file for glibc re...

...the ADUC interface > and list, but I’ve assigned the SeDiskOperatorPrivilege to all domain > admin Group The only mapping in the user.map should be Administrator to root. > > root at SRVLNXWINTRA01:/home/data# net rpc rights list privileges > SeDiskOperatorPrivilege -U "com_spoleto\adminserver" Enter > com_spoleto\adminserver's password: SeDiskOperatorPrivilege: > COM_SPOLETO\Domain Admins > BUILTIN\Administrators > > Is there anyone can help me? > > Below my configuration files. > --------------------------------------------------------...

...> >Rowland > > Ok I try to purge sssd and configure winbind. > > apt-get remove --purge sssd && apt-get autoremove --purge > > I successfull removed and re-joined the Linux domain member > > root at SRVLNXWINTRA01:/home/data# net ads leave -U > "com_spoleto\adminserver" Enter com_spoleto\adminserver's password: > Deleted account for 'SRVLNXWINTRA01' in realm 'COMUNE.SPOLETO.LOCAL' > root at SRVLNXWINTRA01:/home/data# net ads join -U > "com_spoleto\adminserver" Enter com_spoleto\adminserver's password: &g...

...bjects = acl_xattr > >    map acl inherit = yes > >    store dos attributes = yes > > … > > see below my samba-debug-info.txt > > Collected config  --- 2018-02-26-12:57 ----------- > > Hostname: ubuntugis01 > > DNS Domain: comune.spoleto.local > > FQDN: ubuntugis01.comune.spoleto.local > > ipaddress: 192.168.23.70 > > ----------- > > Samba is running as a Unix domain member > > Checking file: /etc/os-release > > NAME="Ubuntu" > > VERSION="16.04.4 L...

...t;something missing, What do you have in /etc/hostname, /etc/hosts > >and /etc/resolv.conf ? > > root at SRVLNXWINTRA01:~# cat /etc/hostname > SRVLNXWINTRA01 > > root at SRVLNXWINTRA01:~# cat /etc/hosts > 127.0.0.1 localhost > 192.168.23.244 SRVLNXWINTRA01.comune.spoleto.local SRVLNXWINTRA01 > > # The following lines are desirable for IPv6 capable hosts > ::1 ip6-localhost ip6-loopback > fe00::0 ip6-localnet > ff00::0 ip6-mcastprefix > ff02::1 ip6-allnodes > ff02::2 ip6-allrouters > > root at SRVLNXWINTRA01:~# cat /etc/resolv.co...

...e options I’ve modified it > in “server member” and now I’m able to list the shares under > \\linuxserver from any domain user authenticated in a Windows pc AD > member. But now 1. Execute computer management from a Windows domain > member client as a domain admin user (run as > com_spoleto\rossetti.admin that is a “domain admins” member 2. Right > click on computer management -> connect to another computer -> > srvlnxwintra01 (the Linux server member) 3. I expand “System Tools” > -> I expand “Shared Folders” -> click on “Shares” right click on > “share” ->...

...#39; group, when I right click on the share and click on properties the 'security' tab is missing (see the attached screenshot). Where is the problem or how can I troubleshoot the problem? This is my smb.conf ----------------------------------------------------- [global] workgroup = COM_SPOLETO realm = COMUNE.SPOLETO.LOCAL client signing = yes client use spnego = yes kerberos method = secrets and keytab security = ads bind interfaces only = yes interfaces = lo enp0s3 enable privileges = yes idmap config * : backend = tdb idmap config * : range = 2000-9999...

...Domain admins Group. But when I try to manage the computer with the computer management from Windows as a user member of Domain admins Group, when I right click on the share and click on properties I don’t have the secirity tab. Where is the problem? This is my smb.conf [global] workgroup = COM_SPOLETO realm = COMUNE.SPOLETO.LOCAL client signing = yes client use spnego = yes kerberos method = secrets and keytab security = ads bind interfaces only = yes interfaces = lo enp0s3 enable privileges = yes idmap config * : backend = tdb idmap config * : range = 2000-9999...

...#39; group, when I right click on the share and click on properties the 'security' tab is missing (see the attached screenshot). Where is the problem or how can I troubleshoot the problem? This is my smb.conf ----------------------------------------------------- [global]    workgroup = COM_SPOLETO    realm = COMUNE.SPOLETO.LOCAL    client signing = yes    client use spnego = yes    kerberos method = secrets and keytab    security = ads    bind interfaces only = yes    interfaces = lo enp0s3    enable privileges = yes    idmap config * : backend = tdb    idmap config * : range = 2000-9999   ...