search for: thinklogical

...? Seems I have 28 groups now as my user I tried created a test user with much less groups but it turns out it is on all those other groups. As such I tried winbind nested groups=no but this doesn't seem to change anything. On Tue, Dec 8, 2015 at 5:05 PM, Mattias Zhabinskiy < mattiasz at thinklogical.com> wrote: > Jeff, > > > To find out maximum number of groups allowed per user run: > > cat /proc/sys/kernel/ngroups_max > or > sysctl kernel.ngroups_max > but AFAIK AUTH_SYS has a limit of 16, so I would try to either create a > test account, add it to the "...

...S? Seems I have 28 groups now as my user I tried created a test user with much less groups but it turns out it is on all those other groups. As such I tried winbind nested groups=no but this doesn't seem to change anything. On Tue, Dec 8, 2015 at 5:05 PM, Mattias Zhabinskiy <mattiasz at thinklogical.com<mailto:mattiasz at thinklogical.com>> wrote: Jeff, To find out maximum number of groups allowed per user run: cat /proc/sys/kernel/ngroups_max or sysctl kernel.ngroups_max but AFAIK AUTH_SYS has a limit of 16, so I would try to either create a test account, add it to the "it&q...

...commands using sudo back to my other user who I also added to sudoer I still can not run commands using sudo but as you suggested I do the "newgrp it" or "newgrp sudoer" and then I can run commands using sudo On Wed, Dec 9, 2015 at 8:20 AM, Mattias Zhabinskiy < mattiasz at thinklogical.com> wrote: > Jeff, > > > After ssh try to run: > > > newgrp it > > > and then sudo. See if it will work, then you'll have to figure out what's > going on with the users groups membership. > > > Regards, > > Matt > > > -----------...

...>> user as root and it as the group >> >> as for >> %it ALL=(ALL) ALL >> instead of: >> %it ALL=(ALL:ALL) ALL >> >> seems to work the same >> >> >> >> On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy < >> mattiasz at thinklogical.com> wrote: >> >>> Jeff, >>> >>> After the ssh did you run "id" command to verify that your account >>> belongs to the "it" group on the remote system? >>> >>> Did you try: >>> %it ALL=(ALL) ALL >>>...

...different results? which is odd because as my username I can get into a folder that has 0760 permissions with user as root and it as the group as for %it ALL=(ALL) ALL instead of: %it ALL=(ALL:ALL) ALL seems to work the same On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy < mattiasz at thinklogical.com> wrote: > Jeff, > > After the ssh did you run "id" command to verify that your account belongs > to the "it" group on the remote system? > > Did you try: > %it ALL=(ALL) ALL > instead of: > %it ALL=(ALL:ALL) ALL > > Regards, > Matt &gt...

...e different results? which is odd because as my username I can get into a folder that has 0760 permissions with user as root and it as the group as for %it ALL=(ALL) ALL instead of: %it ALL=(ALL:ALL) ALL seems to work the same On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy <mattiasz at thinklogical.com<mailto:mattiasz at thinklogical.com>> wrote: Jeff, After the ssh did you run "id" command to verify that your account belongs to the "it" group on the remote system? Did you try: %it ALL=(ALL) ALL instead of: %it ALL=(ALL:ALL) ALL Regards, Matt _________________...

...show the domain group. If you are running samba4 in AD mode, then you are running winbind, though you may not be **using** it. Can you post what OS & samba packages you are using. Rowland > > Rich. > > -----Original Message----- > From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] > Sent: Friday, December 19, 2014 12:15 AM > To: Rich Webb > Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character > 3 > > Hello Rich, > > First of all remove space in front of the group name "users": > > setfacl -R -m g:MYDOM\\domain\...

...have to use the \ and the space. > >The problem is getent group only is listing local unix groups. I think >that is why setfacl is not able to add active directory groups to the >acl. > >Rich. > >-----Original Message----- >From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] >Sent: Friday, December 19, 2014 12:15 AM >To: Rich Webb >Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >character >3 > >Hello Rich, > >First of all remove space in front of the group name "users": > >setfacl -R -m g:MYDOM\\domain\us...

...an get into a folder that has 0760 permissions with user > as root and it as the group > > as for > %it ALL=(ALL) ALL > instead of: > %it ALL=(ALL:ALL) ALL > > seems to work the same > > > > On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy < > mattiasz at thinklogical.com> wrote: > >> Jeff, >> >> After the ssh did you run "id" command to verify that your account >> belongs to the "it" group on the remote system? >> >> Did you try: >> %it ALL=(ALL) ALL >> instead of: >> %it ALL=(ALL:A...

...ning samba4 in AD mode, then you are running winbind, >though you may not be **using** it. > >Can you post what OS & samba packages you are using. > >Rowland >> >> Rich. >> >> -----Original Message----- >> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] >> Sent: Friday, December 19, 2014 12:15 AM >> To: Rich Webb >> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >> character >> 3 >> >> Hello Rich, >> >> First of all remove space in front of the group name "users"...

I just tried that and I got the same error. I think there is some extended acl support that I'm missing somewhere. It's like the setfacl command is not recognizing the AD groups as valid groups. I should also add the following information: This server is built up on CentOS 6.6 Minimal using the Sernet-Samba Enterprise packages. It looks like the binary that is running is

...re running samba4 in AD mode, then you are running winbind, > though you may not be **using** it. > > Can you post what OS & samba packages you are using. > > Rowland >> Rich. >> >> -----Original Message----- >> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] >> Sent: Friday, December 19, 2014 12:15 AM >> To: Rich Webb >> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >> character >> 3 >> >> Hello Rich, >> >> First of all remove space in front of the group name "users":...

...d also put quotes around it and not have to use the \ and the space. The problem is getent group only is listing local unix groups. I think that is why setfacl is not able to add active directory groups to the acl. Rich. -----Original Message----- From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] Sent: Friday, December 19, 2014 12:15 AM To: Rich Webb Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character 3 Hello Rich, First of all remove space in front of the group name "users": setfacl -R -m g:MYDOM\\domain\users:rwx ./shared For example, following com...

...d show the domain group. If you are running samba4 in AD mode, then you are running winbind, though you may not be **using** it. Can you post what OS & samba packages you are using. Rowland > > Rich. > > -----Original Message----- > From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] > Sent: Friday, December 19, 2014 12:15 AM > To: Rich Webb > Subject: Re: [Samba] setfacl: Option -m: Invalid argument near > character > 3 > > Hello Rich, > > First of all remove space in front of the group name "users": > > setfacl -R -m g:MYDOM\\d...

...e. > > The problem is getent group only is listing local unix >groups. I think > that is why setfacl is not able to add active directory >groups to the > acl. > > Rich. > > -----Original Message----- > From: Mattias Zhabinskiy >[mailto:mattiasz at thinklogical.com] > Sent: Friday, December 19, 2014 12:15 AM > To: Rich Webb > Subject: Re: [Samba] setfacl: Option -m: Invalid >argument near > character > 3 > > Hello Rich, > > First of all remove space in front of the group name >"users": > > se...

...ning samba4 in AD mode, then you are running winbind, >though you may not be **using** it. > >Can you post what OS & samba packages you are using. > >Rowland >> >> Rich. >> >> -----Original Message----- >> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] >> Sent: Friday, December 19, 2014 12:15 AM >> To: Rich Webb >> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >> character >> 3 >> >> Hello Rich, >> >> First of all remove space in front of the group name "users"...

Hello Richard, Not sure if it applies to your particular case, but I would try following. In windows explorer please right click on the mapped drive, select Properties, click on Customize tab and make sure that option "Optimize this folder for:" is set to "General Items", otherwise select it, check "Also apply this template to all subfolders" and click Apply. Also,