search for: talps

...9;ve tried to get password policies setting using the Windows GPMC from RSAT working. Unfortunately, no change. It just does not work. Here is the smb.conf for the AD DC: # Global parameters [global] ??????? dns forwarder = 78.110.208.34 ??????? netbios name = TESTADC1 ??????? realm = TESTDOM.TALPS ??????? server role = active directory domain controller ??????? workgroup = TESTDOM ??????? idmap_ldb:use rfc2307 = yes ??????? apply group policies = yes [sysvol] ??????? path = /var/lib/samba/sysvol ??????? read only = No [netlogon] ??????? path = /var/lib/samba/sysvol/testdom.talps/scr...

...get password policies setting using the Windows GPMC > from RSAT working. Unfortunately, no change. It just does not work. > Here is the smb.conf for the AD DC: > # Global parameters[global] dns forwarder = 78.110.208.34 > netbios name = TESTADC1 realm = TESTDOM.TALPS > server role = active directory domain controller workgroup = > TESTDOM idmap_ldb:use rfc2307 = yes apply group > policies = yes > [sysvol] path = /var/lib/samba/sysvol read only = No > [netlogon] path = /var/lib/samba/sysvol/t...

...icies setting using the Windows GPMC >> from RSAT working. Unfortunately, no change. It just does not work. >> Here is the smb.conf for the AD DC: >> # Global parameters[global] dns forwarder = 78.110.208.34 >> netbios name = TESTADC1 realm = TESTDOM.TALPS >> server role = active directory domain controller workgroup = >> TESTDOM idmap_ldb:use rfc2307 = yes apply group >> policies = yes >> [sysvol] path = /var/lib/samba/sysvol read only = No >> [netlogon] path = /var/lib/sa...

...the Windows GPMC > >> from RSAT working. Unfortunately, no change. It just does not work. > >> Here is the smb.conf for the AD DC: > >> # Global parameters[global] dns forwarder = 78.110.208.34 > >> netbios name = TESTADC1 realm = TESTDOM.TALPS > >> server role = active directory domain controller workgroup > >> = TESTDOM idmap_ldb:use rfc2307 = yes apply group > >> policies = yes > >> [sysvol] path = /var/lib/samba/sysvol read only = > >> No [netlogon]...

...PMC >>>> from RSAT working. Unfortunately, no change. It just does not work. >>>> Here is the smb.conf for the AD DC: >>>> # Global parameters[global] dns forwarder = 78.110.208.34 >>>> netbios name = TESTADC1 realm = TESTDOM.TALPS >>>> server role = active directory domain controller workgroup >>>> = TESTDOM idmap_ldb:use rfc2307 = yes apply group >>>> policies = yes >>>> [sysvol] path = /var/lib/samba/sysvol read only = >>>>...

...GPMC from RSAT working. Unfortunately, no change. It just does > >>>> not work. Here is the smb.conf for the AD DC: > >>>> # Global parameters[global] dns forwarder = 78.110.208.34 > >>>> netbios name = TESTADC1 realm = TESTDOM.TALPS > >>>> server role = active directory domain controller > >>>> workgroup = TESTDOM idmap_ldb:use rfc2307 = yes > >>>> apply group policies = yes > >>>> [sysvol] path = /var/lib/samba/sysvol read only = > >>...

...RSAT working. Unfortunately, no change. It just does >>>>>> not work. Here is the smb.conf for the AD DC: >>>>>> # Global parameters[global] dns forwarder = 78.110.208.34 >>>>>> netbios name = TESTADC1 realm = TESTDOM.TALPS >>>>>> server role = active directory domain controller >>>>>> workgroup = TESTDOM idmap_ldb:use rfc2307 = yes >>>>>> apply group policies = yes >>>>>> [sysvol] path = /var/lib/samba/sysvol read only = &...

...hange. It just does > >>>>>> not work. Here is the smb.conf for the AD DC: > >>>>>> # Global parameters[global] dns forwarder = > >>>>>> 78.110.208.34 netbios name = TESTADC1 realm = > >>>>>> TESTDOM.TALPS server role = active directory domain controller > >>>>>> workgroup = TESTDOM idmap_ldb:use rfc2307 = yes > >>>>>> apply group policies = yes > >>>>>> [sysvol] path = /var/lib/samba/sysvol read > >>>&...

...st does >>>>>>>> not work. Here is the smb.conf for the AD DC: >>>>>>>> # Global parameters[global] dns forwarder = >>>>>>>> 78.110.208.34 netbios name = TESTADC1 realm = >>>>>>>> TESTDOM.TALPS server role = active directory domain controller >>>>>>>> workgroup = TESTDOM idmap_ldb:use rfc2307 = yes >>>>>>>> apply group policies = yes >>>>>>>> [sysvol] path = /var/lib/samba/sysvol read >>&...

...ls = yes Then smbcontrol smbd reload-config and smbcontrol winbind reload-config *Windows Computer Management* * Starting Computer Management as Administrator * Connecting to the server * Selecting Shares and Properties of the share Migrtest *Tab Security* Owner: Administrator at private.talps -Permissions list- root (Unix User\root)??? Full Control??? This folder only Domain Admins (Private\Domain Admins)??? Read, write & Execute??? This folder only SYSTEM??? Full control??? This folder only If I click on OK, no complaints. But the share is not accessible by any users, except fo...

On Sat, 2023-08-26 at 11:49 +0200, Peter Milesson via samba wrote: > Hi folks, > > I just wonder why it is not possible to set domain password policies > with GPO, using the Windows RSAT Group Policy Manager? For most > other > settings, using GPOs through RSAT works. > > For somebody who sets up a Samba AD DC infrequently, this is a huge > trap. There should be a

...or there is something not working as it should. I would be very happy to get some explanations. Member server Debian Bookworm with Samba from backports (4.19.4) smb.conf below. Best regards, Peter [global] ??????? security = ADS ??????? server role = member server ??????? realm = PRIVATE.TALPS ??????? workgroup = PRIVATE ??????? dedicated keytab file = /etc/krb5.keytab ??????? kerberos method = secrets and keytab ??????? log level = 1 ??????? disable spoolss = Yes ??????? printcap name = /dev/null ??????? template homedir = /home/%U ??????? template shell = /bin/bash ??????? tim...

...very happy to get some explanations. > > Member server Debian Bookworm with Samba from backports (4.19.4) > > smb.conf below. > > Best regards, > > Peter > > > [global] > ??????? security = ADS > ??????? server role = member server > ??????? realm = PRIVATE.TALPS > ??????? workgroup = PRIVATE > ??????? dedicated keytab file = /etc/krb5.keytab > ??????? kerberos method = secrets and keytab > ??????? log level = 1 > ??????? disable spoolss = Yes > ??????? printcap name = /dev/null > ??????? template homedir = /home/%U > ??????? templat...

...= Yes ??????? debug pid = Yes ??????? debug uid = Yes ??????? dedicated keytab file = /etc/krb5.keytab ??????? disable netbios = Yes ??????? disable spoolss = Yes ??????? smb ports = 445 ??????? kerberos method = secrets and keytab ??????? printcap name = /dev/null ??????? realm = PRIVATE.TALPS ??????? restrict anonymous = 2 ??????? security = ADS ??????? server role = member server ??????? template homedir = /home/%U ??????? template shell = /bin/bash ??????? username map = /etc/samba/user.map ??????? min domain uid = 0 ??????? winbind enum groups = Yes ??????? winbind enum user...

...????? debug uid = Yes > ??????? dedicated keytab file = /etc/krb5.keytab > ??????? disable netbios = Yes > ??????? disable spoolss = Yes > ??????? smb ports = 445 > ??????? kerberos method = secrets and keytab > ??????? printcap name = /dev/null > ??????? realm = PRIVATE.TALPS > ??????? restrict anonymous = 2 > ??????? security = ADS > ??????? server role = member server > ??????? template homedir = /home/%U > ??????? template shell = /bin/bash > ??????? username map = /etc/samba/user.map > ??????? min domain uid = 0 > ??????? winbind enum...

...????? dedicated keytab file = /etc/krb5.keytab >> ??????? disable netbios = Yes >> ??????? disable spoolss = Yes >> ??????? smb ports = 445 >> ??????? kerberos method = secrets and keytab >> ??????? printcap name = /dev/null >> ??????? realm = PRIVATE.TALPS >> ??????? restrict anonymous = 2 >> ??????? security = ADS >> ??????? server role = member server >> ??????? template homedir = /home/%U >> ??????? template shell = /bin/bash >> ??????? username map = /etc/samba/user.map >> ??????? min domain...

On 1/30/24 16:27, Rowland Penny via samba wrote: > On Tue, 30 Jan 2024 16:13:41 +0100 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> Hi folks, >> >> It seems that the setting acl_xattr:ignore system acls = yes reduces >> Windows compatibility when defined for a share. In all attempts I >> have used Windows tools (except editing

...ile = /etc/krb5.keytab >>> ? ??????? disable netbios = Yes >>> ? ??????? disable spoolss = Yes >>> ? ??????? smb ports = 445 >>> ? ??????? kerberos method = secrets and keytab >>> ? ??????? printcap name = /dev/null >>> ? ??????? realm = PRIVATE.TALPS >>> ? ??????? restrict anonymous = 2 >>> ? ??????? security = ADS >>> ? ??????? server role = member server >>> ? ??????? template homedir = /home/%U >>> ? ??????? template shell = /bin/bash >>> ? ??????? username map = /etc/samba/user.map >&...

...es ??????? dedicated keytab file = /etc/krb5.keytab ??????? disable netbios = Yes ??????? disable spoolss = Yes ??????? kerberos method = secrets and keytab ??????? log level = 1 ??????? panic action = /usr/share/samba/panic-action %d ??????? printcap name = /dev/null ??????? realm = SAMDOM.TALPS ??????? restrict anonymous = 2 ??????? security = ADS ??????? server role = member server ??????? smb ports = 445 ??????? template homedir = /home/%U ??????? template shell = /sbin/nologin ??????? winbind use default domain = true ??????? timestamp logs = Yes ??????? username map = /etc/sa...