search for: utilisa

...tion'. Sorry if the translation is not that good, we're using a french Excel. By the way, Excel is correct that the users have read only access to these files... I've tried to find the cause to this problem, and it all seem to be linked to the ACL. All my users are members of 'Utilisa. du domaine', and it is their main group (as displayed by winbind) If I have this ACL, opening fails miserably (except for user marc) # file: my_file.xls # owner: GROUPESIGMA+marc # group: GROUPESIGMA+Utilisa.\040du\040domaine user::rwx group::r-x group:GROUPESIGMA+Admins\040du\040domaine:rw...

...oup (the last one being a Unix private group). > > Rowland > > Sorry for that but my request was not exacltly true... A user is set both as user and group. A group is set both as user and group too. Under windows, if the user ciril ( member of the group "sa-si" and "utilisa. du domaine" as default group) create a new file, a getfacl command on it return : # file: Fichiers/SA/Nouveau document texte.txt # owner: ciril # group: utilisa.\040du\040domaine user::rwx user:utilisa.\040du\040domaine:r-x _user:sa-si:rwx_ group::r-x group:utilisa.\040du\040domaine:r-x _gr...

...ixed-mode w2k domain, and I authenticate my users from the w2k DC with winbind/pam. I can wbinfo -u/-g/-t/-p without any problems and getent passwd/group give me the correct output. This setup is almost working as i expect it to. But... All my w2k domain users are in the primary group "DOMAIN\Utilisa. du domaine" ("DOMAIN\Domain Users" in the US version of w2k) wich winbind maps to GID 10000. When i try to ssh into my redhat server using a "DOMAIN+user" account, i got the following message: 'id: cannot find name for group ID 10000', but i can still login. If i...

Le 05/07/2016 à 19:40, Rowland penny a écrit : > On 05/07/16 17:56, Raphaël RIGNIER wrote: >> The strange behavior is the different output between group object and >> user object >> >> and >> net ads search -U administrator >> net ads search -P >> >> in Samba Wiki, primarygroupid refers to the one for User's "Unix >>

...each user... In the Windows side all seems ok : but not the result of getfacl ... root at Samba4:/Fichiers# getfacl /Fichiers/SA/Nouveau\ document\ texte.txt getfacl : suppression du premier « / » des noms de chemins absolus # file: Fichiers/SA/Nouveau document texte.txt # owner: ciril # group: utilisa.\040du\040domaine user::rwx user:utilisa.\040du\040domaine:r-x user:karine.hasani:r-x user:sa-si:rwx user:sa-cp:r-x user:john.doe:r-x user:essai:r-x group::r-x group:utilisa.\040du\040domaine:r-x group:karine.hasani:r-x group:ciril:rwx group:sa-si:rwx group:sa-cp:r-x group:john.doe:r-x group:essai:...

Hello, If I try to set acl under windows, something very strange appears. For instance, if I set something for the user samuel I get this with the command getfacl : default:_*group*_:samuel.ruet:r-x And if I set something for the group sa-si I get this : default:_*use*_r:sa-si:r-x Under windows all seems good... I recently change idmap config... ( add rid backend ) Here is my smb.conf :

...executing: [root@SERVRHAS root]# net rpc vampire -S servpdc -U Administrateur%ioan Fetching DOMAIN database SAM_DELTA_DOMAIN_INFO not handled Creating unix group: 'Admins du domaine' Error: Insufficient access at /usr/local/sbin//smbldap_tools.pm line 920. Creating unix group: 'Utilisa. du domaine' Error: Insufficient access at /usr/local/sbin//smbldap_tools.pm line 920. Creating unix group: 'Invit?s du domaine' Error: Insufficient access at /usr/local/sbin//smbldap_tools.pm line 920. And this repeats itself for all the accounts.. Could somebody tell me why the...

...g for an answer here... I've been fighting all week-end with samba-3.0 and there's still something I can't do... Basically: how can I add some of my users to the Domain admin group ? I use FreeBSD-5.1+samba3.0RC3. My group maps: Admins du domaine (S-1-5-21-xxxx-512) -> domainadmins Utilisa. du domaine (S-1-5-21-xxxx-513) -> domainusers Invites du domaine (S-1-5-21-xxxx-514) -> domainguests Ordinateurs du domaine (S-1-5-21-xxxx-515) -> domaincomputers All my users sambaPrimaryGroupSID are set to 513. Now, I added some users to the "domainadmins" group (with the me...

...e through smbcacls command. CIFS share is in french domain. SMBACLS for the file are: ==============================================================  smbcacls -n //10.10.18.19/Rahulk\ test /test.txt -U es1kr\\???reg;??%???reg;?? REVISION:1 OWNER:ES1KR+???reg;?? GROUP:ES1KR+Utilisa. du domaine ACL:+Tout le monde:DENIED/0/0x000d0116 ACL:ES1KR+???reg;??:ALLOWED/0/FULL  smbcacls  -n //10.10.18.19/Rahulk\ test /test.txt -U es1kr\\Administrateur%QXXXXy Failed to open \test.txt: NT_STATUS_ACCESS_DENIED  smbcacls  -C e...

...e: 4 whenCreated: 10/26/2011 13:32:54 whenChanged: 10/26/2011 13:33:03 displayName: Fr‚d‚ric POUGNAULT uSNCreated: 25902109 memberOf: CN=G_Administration,CN=Users,DC=cogesys,DC=com memberOf: CN=G_Infrastructure,CN=Users,DC=cogesys,DC=com memberOf: CN=G_GALITT,CN=Users,DC=cogesys,DC=com memberOf: CN=Utilisa. du domaine,CN=Users,DC=cogesys,DC=com uSNChanged: 25902130 name: fpt objectGUID: {40F8DBB9-5FEA-49BD-8EDF-E95A468E6076} userAccountControl: 66048 badPwdCount: 0 codePage: 0 countryCode: 0 badPasswordTime: 131418968459982852 lastLogoff: 0 lastLogon: 131418287663438944 scriptPath: logon logonHours:...

...bspool/pdf/nobody browseable = yes create mode = 666 writable = yes nt acl support = yes I put some basic acls ont his share : srvpdf:/var/smbspool/pdf# getfacl ./nobody # file: nobody # owner: nobody # group: nogroup user::rwx user:ICSB2K+administrateur:rwx group::rwx group:ICSB2K+utilisa.\040du\040domaine:r-x group:ICSB2K+technique:rwx mask::rwx other::rwx So ACLs on this share reports some members should get all privileges on this directory. Now let's go on a Win2k workstation an logon at Administrator... If I browse the share and open properties/security options : - users...

...UTF-8 dos charset = CP850 display charset = UTF-8 getwd cache = yes [homes] comment = Repertoire personnel writable = yes browseable = no read only = no create mask = 0700 directory mask = 0700 force user = %U force group = "Utilisa. du domaine" [test] comment = test path = /tmp browseable = no writable = yes read only = no I tried to add/change these parameters and still got the same error: auth methods = winbind algorithmic rid base = 9000 username map = /etc/samba/smbusers idmap uid = 900...

...UTF-8 dos charset = CP850 display charset = UTF-8 getwd cache = yes [homes] comment = Repertoire personnel writable = yes browseable = no read only = no create mask = 0700 directory mask = 0700 force user = %U force group = "Utilisa. du domaine" [test] comment = test path = /tmp browseable = no writable = yes read only = no I tried to add/change these parameters and still got the same error: auth methods = winbind algorithmic rid base = 9000 username map = /etc/samba/smbusers idmap uid = 900...

...Trusted domains list: DOMAINTEST S-1-5-21-769731554-1856840314-4054211777 Trusting domains list: DOMAINTEST S-1-5-21-769731554-1856840314-4054211777 I installed winbind, and I can get the user and group list from DOMAINTEST: # wbinfo -gu DOMAINTEST\admins du domaine DOMAINTEST\utilisa. du domaine DOMAINTEST\invitDOMAINTEST\ordinateurs du domaine DOMAINTEST\contrDOMAINTEST\administrateurs du schDOMAINTEST\administrateurs de l'entreprise DOMAINTEST\propriDOMAINTEST\dnsupdateproxy BUILTIN\administrators BUILTIN\print operators BUILTIN\backup operators BUILTIN\replicators DOMAI...

Hello, Yes I wrote a mistike its not v4.6.6 but 4.6.5. For "unix password sync = yes" it is an old parameters, it was ten years ago an sftp server was installed with samba server. Currently there is no ftp server. Here is the AD object with RID 7022 objectClass: top objectClass: group cn: FREDGROUP member: CN=fpt,CN=Users,DC=cogesys,DC=com distinguishedName: