Displaying 17 results from an estimated 17 matches for "thinklog".
Did you mean:
thinking
2015 Dec 09
2
Adding an AD group to /etc/sudoers?
...?
Seems I have 28 groups now as my user
I tried created a test user with much less groups
but it turns out it is on all those other groups.
As such I tried
winbind nested groups=no
but this doesn't seem to change anything.
On Tue, Dec 8, 2015 at 5:05 PM, Mattias Zhabinskiy <
mattiasz at thinklogical.com> wrote:
> Jeff,
>
>
> To find out maximum number of groups allowed per user run:
>
> cat /proc/sys/kernel/ngroups_max
> or
> sysctl kernel.ngroups_max
> but AFAIK AUTH_SYS has a limit of 16, so I would try to either create a
> test account, add it to the &q...
2015 Dec 09
0
Adding an AD group to /etc/sudoers?
...S?
Seems I have 28 groups now as my user
I tried created a test user with much less groups
but it turns out it is on all those other groups.
As such I tried
winbind nested groups=no
but this doesn't seem to change anything.
On Tue, Dec 8, 2015 at 5:05 PM, Mattias Zhabinskiy <mattiasz at thinklogical.com<mailto:mattiasz at thinklogical.com>> wrote:
Jeff,
To find out maximum number of groups allowed per user run:
cat /proc/sys/kernel/ngroups_max
or
sysctl kernel.ngroups_max
but AFAIK AUTH_SYS has a limit of 16, so I would try to either create a test account, add it to the "...
2015 Dec 09
1
Adding an AD group to /etc/sudoers?
...commands using sudo
back to my other user who I also added to sudoer
I still can not run commands using sudo
but as you suggested I do the "newgrp it" or "newgrp sudoer"
and then I can run commands using sudo
On Wed, Dec 9, 2015 at 8:20 AM, Mattias Zhabinskiy <
mattiasz at thinklogical.com> wrote:
> Jeff,
>
>
> After ssh try to run:
>
>
> newgrp it
>
>
> and then sudo. See if it will work, then you'll have to figure out what's
> going on with the users groups membership.
>
>
> Regards,
>
> Matt
>
>
> -------...
2015 Dec 08
2
Adding an AD group to /etc/sudoers?
...>> user as root and it as the group
>>
>> as for
>> %it ALL=(ALL) ALL
>> instead of:
>> %it ALL=(ALL:ALL) ALL
>>
>> seems to work the same
>>
>>
>>
>> On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy <
>> mattiasz at thinklogical.com> wrote:
>>
>>> Jeff,
>>>
>>> After the ssh did you run "id" command to verify that your account
>>> belongs to the "it" group on the remote system?
>>>
>>> Did you try:
>>> %it ALL=(ALL) ALL
>>...
2015 Dec 08
2
Adding an AD group to /etc/sudoers?
...different results?
which is odd because
as my username I can get into a folder that has 0760 permissions with user
as root and it as the group
as for
%it ALL=(ALL) ALL
instead of:
%it ALL=(ALL:ALL) ALL
seems to work the same
On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy <
mattiasz at thinklogical.com> wrote:
> Jeff,
>
> After the ssh did you run "id" command to verify that your account belongs
> to the "it" group on the remote system?
>
> Did you try:
> %it ALL=(ALL) ALL
> instead of:
> %it ALL=(ALL:ALL) ALL
>
> Regards,
> Matt...
2015 Dec 09
0
Adding an AD group to /etc/sudoers?
...e different results?
which is odd because
as my username I can get into a folder that has 0760 permissions with user as root and it as the group
as for
%it ALL=(ALL) ALL
instead of:
%it ALL=(ALL:ALL) ALL
seems to work the same
On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy <mattiasz at thinklogical.com<mailto:mattiasz at thinklogical.com>> wrote:
Jeff,
After the ssh did you run "id" command to verify that your account belongs to the "it" group on the remote system?
Did you try:
%it ALL=(ALL) ALL
instead of:
%it ALL=(ALL:ALL) ALL
Regards,
Matt
_____________...
2014 Dec 19
3
setfacl: Option -m: Invalid argument near character 3
...show the domain group.
If you are running samba4 in AD mode, then you are running winbind,
though you may not be **using** it.
Can you post what OS & samba packages you are using.
Rowland
>
> Rich.
>
> -----Original Message-----
> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com]
> Sent: Friday, December 19, 2014 12:15 AM
> To: Rich Webb
> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character
> 3
>
> Hello Rich,
>
> First of all remove space in front of the group name "users":
>
> setfacl -R -m g:MYDOM\\dom...
2014 Dec 19
2
setfacl: Option -m: Invalid argument near character 3
...have to use the \ and the space.
>
>The problem is getent group only is listing local unix groups. I think
>that is why setfacl is not able to add active directory groups to the
>acl.
>
>Rich.
>
>-----Original Message-----
>From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com]
>Sent: Friday, December 19, 2014 12:15 AM
>To: Rich Webb
>Subject: Re: [Samba] setfacl: Option -m: Invalid argument near
>character
>3
>
>Hello Rich,
>
>First of all remove space in front of the group name "users":
>
>setfacl -R -m g:MYDOM\\domai...
2015 Dec 08
0
Adding an AD group to /etc/sudoers?
...an get into a folder that has 0760 permissions with user
> as root and it as the group
>
> as for
> %it ALL=(ALL) ALL
> instead of:
> %it ALL=(ALL:ALL) ALL
>
> seems to work the same
>
>
>
> On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy <
> mattiasz at thinklogical.com> wrote:
>
>> Jeff,
>>
>> After the ssh did you run "id" command to verify that your account
>> belongs to the "it" group on the remote system?
>>
>> Did you try:
>> %it ALL=(ALL) ALL
>> instead of:
>> %it ALL=(A...
2014 Dec 19
3
setfacl: Option -m: Invalid argument near character 3
...ning samba4 in AD mode, then you are running winbind,
>though you may not be **using** it.
>
>Can you post what OS & samba packages you are using.
>
>Rowland
>>
>> Rich.
>>
>> -----Original Message-----
>> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com]
>> Sent: Friday, December 19, 2014 12:15 AM
>> To: Rich Webb
>> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near
>> character
>> 3
>>
>> Hello Rich,
>>
>> First of all remove space in front of the group name "users&q...
2014 Dec 18
6
setfacl: Option -m: Invalid argument near character 3
I just tried that and I got the same error. I think there is some
extended acl support that I'm missing somewhere.
It's like the setfacl command is not recognizing the AD groups as valid
groups.
I should also add the following information:
This server is built up on CentOS 6.6 Minimal using the Sernet-Samba
Enterprise packages.
It looks like the binary that is running is
2014 Dec 19
3
setfacl: Option -m: Invalid argument near character 3
...re running samba4 in AD mode, then you are running winbind,
> though you may not be **using** it.
>
> Can you post what OS & samba packages you are using.
>
> Rowland
>> Rich.
>>
>> -----Original Message-----
>> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com]
>> Sent: Friday, December 19, 2014 12:15 AM
>> To: Rich Webb
>> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near
>> character
>> 3
>>
>> Hello Rich,
>>
>> First of all remove space in front of the group name "users&qu...
2014 Dec 19
0
setfacl: Option -m: Invalid argument near character 3
...d also
put quotes around it and not have to use the \ and the space.
The problem is getent group only is listing local unix groups. I think
that is why setfacl is not able to add active directory groups to the
acl.
Rich.
-----Original Message-----
From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com]
Sent: Friday, December 19, 2014 12:15 AM
To: Rich Webb
Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character
3
Hello Rich,
First of all remove space in front of the group name "users":
setfacl -R -m g:MYDOM\\domain\users:rwx ./shared
For example, following...
2014 Dec 19
0
setfacl: Option -m: Invalid argument near character 3
...d show the domain group.
If you are running samba4 in AD mode, then you are running winbind,
though you may not be **using** it.
Can you post what OS & samba packages you are using.
Rowland
>
> Rich.
>
> -----Original Message-----
> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com]
> Sent: Friday, December 19, 2014 12:15 AM
> To: Rich Webb
> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near
> character
> 3
>
> Hello Rich,
>
> First of all remove space in front of the group name "users":
>
> setfacl -R -m g:MYDO...
2014 Dec 20
0
setfacl: Option -m: Invalid argument near character 3
...e.
>
> The problem is getent group only is listing local unix
>groups. I think
> that is why setfacl is not able to add active directory
>groups to the
> acl.
>
> Rich.
>
> -----Original Message-----
> From: Mattias Zhabinskiy
>[mailto:mattiasz at thinklogical.com]
> Sent: Friday, December 19, 2014 12:15 AM
> To: Rich Webb
> Subject: Re: [Samba] setfacl: Option -m: Invalid
>argument near
> character
> 3
>
> Hello Rich,
>
> First of all remove space in front of the group name
>"users":
>
>...
2014 Dec 19
0
setfacl: Option -m: Invalid argument near character 3
...ning samba4 in AD mode, then you are running winbind,
>though you may not be **using** it.
>
>Can you post what OS & samba packages you are using.
>
>Rowland
>>
>> Rich.
>>
>> -----Original Message-----
>> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com]
>> Sent: Friday, December 19, 2014 12:15 AM
>> To: Rich Webb
>> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near
>> character
>> 3
>>
>> Hello Rich,
>>
>> First of all remove space in front of the group name "users&q...
2016 Feb 29
0
Slow file listing : Debian Wheezy, Samba Version 3.6.6
Hello Richard,
Not sure if it applies to your particular case, but I would try following. In windows explorer please right click on the mapped drive, select Properties, click on Customize tab and make sure that option "Optimize this folder for:" is set to "General Items", otherwise select it, check "Also apply this template to all subfolders" and click Apply.
Also,