search for: vipco

...An: sambalist Betreff: Re: [Samba] Cannot change directory permissions On 07/08/15 12:25, Felix Matouschek wrote: > Hi Rowland, > > > Regarding my permissions problem: > > Newly created files, no permission changes yet: > > ls -la: > drwxrwx--- 3 fmatouschek vipco-users 4096 Aug 7 13:12 . > drwxr-xr-x 55 root vipco-users 4096 Aug 4 10:12 .. > drwxrwx--- 2 fmatouschek vipco-users 4096 Aug 7 13:11 Directory > -rw-rw---- 1 fmatouschek vipco-users 0 Aug 7 13:12 File.txt > > getfacl:...

On 07/08/15 12:25, Felix Matouschek wrote: > Hi Rowland, > > > Regarding my permissions problem: > > Newly created files, no permission changes yet: > > ls -la: > drwxrwx--- 3 fmatouschek vipco-users 4096 Aug 7 13:12 . > drwxr-xr-x 55 root vipco-users 4096 Aug 4 10:12 .. > drwxrwx--- 2 fmatouschek vipco-users 4096 Aug 7 13:11 Directory > -rw-rw---- 1 fmatouschek vipco-users 0 Aug 7 13:12 File.txt > > getfacl:...

Hi Rowland, yes I do have two separate config files for smbd/nmbd and winbindd. You can tell winbindd to load a separate config file via the "-s" command line switch. Therefore I set "WINBINDD_EXTRA_OPTS" in "/etc/default/sernet-samba" to "-s /etc/samba/winbindd.conf". The "cached_login" option for pam is also set and working. The problem was

Hello, I have different Sites in my domain and want the different members to use the respective domain controller of their site. I can't get this to work right. I have a member that is in site B but executing "net ads info" outputs the DC of site A as active. I read about enabling "winbind_krb5_locator", but it is already located in

...reff: [Samba] winbind_krb5_locator usage > >Hi Rowland, > >/var/run/samba/smb_krb5 does not exist. > >However /var/cache/samba/smb_krb5 exists, there is a file >named "krb5.conf.INTRANET". > >Contents: > >[libdefaults] > default_realm = INTRANET.VIPCO.DE > default_tgs_enctypes = aes256-cts-hmac-sha1-96 >aes128-cts-hmac-sha1-96 RC4-HMAC DES-CBC-CRC DES-CBC-MD5 > default_tkt_enctypes = aes256-cts-hmac-sha1-96 >aes128-cts-hmac-sha1-96 RC4-HMAC DES-CBC-CRC DES-CBC-MD5 > preferred_enctypes = aes256-cts-hmac-sha1-...

Hi Rowland, /var/run/samba/smb_krb5 does not exist. However /var/cache/samba/smb_krb5 exists, there is a file named "krb5.conf.INTRANET". Contents: [libdefaults] default_realm = INTRANET.VIPCO.DE default_tgs_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 RC4-HMAC DES-CBC-CRC DES-CBC-MD5 default_tkt_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96 RC4-HMAC DES-CBC-CRC DES-CBC-MD5 preferred_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha...

...onfig * : backend = tdb idmap config * : range = 1000000 - 1999999 idmap config INTRANET : backend = ad idmap config INTRANET : schema_mode = rfc2307 idmap config INTRANET : range = 5000 - 40000 map untrusted to domain = yes unix extensions = no invalid users = root, vipco-admin acl allow execute always = yes printing = bsd printcap name = /dev/null disable spoolss = yes load printers = no deadtime = 10 use sendfile = yes socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE Greetings, Felix

...ge = 1000000 - 1999999 > idmap config INTRANET : backend = ad > idmap config INTRANET : schema_mode = rfc2307 > idmap config INTRANET : range = 5000 - 40000 > > map untrusted to domain = yes > > unix extensions = no > invalid users = root, vipco-admin > > acl allow execute always = yes > > printing = bsd > printcap name = /dev/null > disable spoolss = yes > load printers = no > > deadtime = 10 > use sendfile = yes > socket options = TCP_NODELAY IPTOS_LOWDELAY...

Hi David, I experienced this issue as well, it's currently a limitation of Samba 4.2.2. Samba 4.2.2 DCs do not support pulling home directories and login shells from AD via rfc2307. I solved this issue with the "template homedir" and "template shell" directives. You lose some flexibility but at least it works. Excerpt from my DC smb.conf: winbind nss info =

Hi, I can reproduce that behaviour. Our winbindd crashes as well when setting that option. Greetings, Felix -----Ursprüngliche Nachricht----- Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von Jeremy Allison Gesendet: Dienstag, 25. August 2015 18:18 An: Sven Schwedas Cc: samba at lists.samba.org Betreff: Re: [Samba] Questions about Samba 4 On Tue, Aug 25, 2015 at 08:36:14AM

Hi, I set the "User must change password on next logon" flag on an account. After that using this account to logon to SSH crashes winbind. Greetings, Felix -----Ursprüngliche Nachricht----- Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von Rowland Penny Gesendet: Mittwoch, 26. August 2015 11:05 An: samba at lists.samba.org Betreff: Re: [Samba] Questions about Samba

Hi @all, if have configured my XEN-Virtualizations next to this tutorial: http://www.howtoforge.com/debian_etch_xen_3.1_p4 and it works fine. But i don''t understand how the nat networking really work. On the domU''s I configured the interfaces with a gateway (10.0.0.254), but in the hole virtual network (10.0.0.0/8), there is no interface with this ip. when i changed the

Hi David, > Just to clarify, is it only the DC that doesn't return desired values of HomeDirectory and Shell? Yes, it is only the DC that doesn't pull HomeDirectory and Shell via rfc2307. (when using winbindd) Member servers with winbindd do pull the desired values without problems, I have it setup like this and it works without problems. I have only two ideas to solve your problem:

Hello, I occasionally need to remove the write permissions from directories inside a share to prevent users from accidentally deleting files inside that directory. My problem is that I neither can view nor can change the permissions of directories on my shares. Curiously enough viewing and changing permissions of files in the same shares works without a problem. Is there anything I

Hi Rowland, when saying 'I' I theoretically meant any user that has write access to the share. It should be possible to right click the directory in windows, the go to security tab and remove the write permissions on the directory. This behaviour already works with files, I'm trying to figure out how to make it also work for directories. Greetings, Felix -----Ursprüngliche

Hi Rowland, my users are known to the OS, they also have the correct permissions to alter the settings. Doing so on the CLI does work when logged in via SSH. When opening the Security Tab the users and groups are displayed, only on directories there are no checkmarks under Read, Write etc. I also cannot set any checkmarks for Read, Write etc. When viewing the Security Tab of a file everything

Hi Rowland, I had to split smbd and winbindd config to work around some bugs in credentials offline caching. I have a separate winbindd.conf, it looks like this: [global] ### Network ### netbios name = Fileserver server string = Fileserver (%h V:%v) ### ad member ### workgroup = INTRANET realm = INTRANET.MYCOMPANY.DE security = ADS kerberos method = secrets and