search for: tdc01

On 10/03/15 11:48, Bob of Donelson Trophy wrote: > > > Okay, so I tried a "Bob thing" and it made no difference. So, no comment > on that. However, I am learning. > > This is 'wbinfo -*' from my DC1: > > root at tdc01:~# wbinfo -u > Administrator > Guest > krbtgt > dns-tdc01 > dns-TDC02 > root at tdc01:~# wbinfo -g > Enterprise Read-Only Domain Controllers > Domain Admins > Domain Users > Domain Guests > Domain Computers > Domain Controllers > Schema Admins > Enterprise...

...ves an award!!" On 2015-03-10 06:57, Rowland Penny wrote: > On 10/03/15 11:48, Bob of Donelson Trophy wrote: > >> Okay, so I tried a "Bob thing" and it made no difference. So, no comment on that. However, I am learning. This is 'wbinfo -*' from my DC1: root at tdc01:~# wbinfo -u Administrator Guest krbtgt dns-tdc01 dns-TDC02 root at tdc01:~# wbinfo -g Enterprise Read-Only Domain Controllers Domain Admins Domain Users Domain Guests Domain Computers Domain Controllers Schema Admins Enterprise Admins Group Policy Creator Owners Read-Only Domain Controllers DnsUpd...

Gentlemen, First, let me point out that sometimes (and sometimes not) the mailing list will strip out some backslash marks in cut and paste. So, if there is a backslash missing . . . well, ignore that missing mark. Louis, When your script runs it creates the following default permissions: root at mbr01:~# ls -alh /home/samba/TEST/profiles total 8.0K drwxr-xr-t 2 root root 4.0K Feb 21 18:39

Okay, so I tried a "Bob thing" and it made no difference. So, no comment on that. However, I am learning. This is 'wbinfo -*' from my DC1: root at tdc01:~# wbinfo -u Administrator Guest krbtgt dns-tdc01 dns-TDC02 root at tdc01:~# wbinfo -g Enterprise Read-Only Domain Controllers Domain Admins Domain Users Domain Guests Domain Computers Domain Controllers Schema Admins Enterprise Admins Group Policy Creator Owners Read-Only Domain Controllers DnsUpd...

I was on the "Check and fix DNS entries on DC joins" page of the wiki and discovered: root at tdc01:~# host -t CNAME a486dd66-59c8-411b-9c04-98f03d998226._msdcs.test.bob a486dd66-59c8-411b-9c04-98f03d998226._msdcs.test.bob is an alias for tdc01.test.bob. a486dd66-59c8-411b-9c04-98f03d998226._msdcs.test.bob is an alias for TDC02.test.bob. I noticed that my first DC is all small case letters in t...

...ofiles read only = no admin users = +"TESTDomain Admins" profile acls = yes csc policy = disable [data] path = /home/samba/TEST/companydata read only = no [software] path = /home/samba/software read only = no And wbinfo: root at mbr01:~# wbinfo -u administrator dns-tdc02 dns-tdc01 krbtgt guest root at mbr01:~# wbinfo -g allowed rodc password replication group enterprise read-only domain controllers denied rodc password replication group read-only domain controllers group policy creator owners ras and ias servers domain controllers enterprise admins domain computers cert pu...

Okay, so I did this to myself. I overlooked an important sentence on the "https://wiki.samba.org/index.php/Samba_%26_Windows_Profiles". The sentence that instructs to do "Profile share using Windows ACLs" ***OR*** "Profile share with using POSIX ACLs". So, I have reset the permissions to how they were before I messed them up doing the "POSIX ACLs" part.

...> profile acls = yes > csc policy = disable > >[data] > path = /home/samba/TEST/companydata > read only = no > >[software] > path = /home/samba/software > read only = no > >And wbinfo: > >root at mbr01:~# wbinfo -u >administrator >dns-tdc02 >dns-tdc01 >krbtgt >guest > >root at mbr01:~# wbinfo -g >allowed rodc password replication group >enterprise read-only domain controllers >denied rodc password replication group >read-only domain controllers >group policy creator owners >ras and ias servers >domain controller...