search for: zhabinskiy

...login as jefftest I can run commands using sudo back to my other user who I also added to sudoer I still can not run commands using sudo but as you suggested I do the "newgrp it" or "newgrp sudoer" and then I can run commands using sudo On Wed, Dec 9, 2015 at 8:20 AM, Mattias Zhabinskiy < mattiasz at thinklogical.com> wrote: > Jeff, > > > After ssh try to run: > > > newgrp it > > > and then sudo. See if it will work, then you'll have to figure out what's > going on with the users groups membership. > > > Regards, > > M...

...y to change/look at AUTH_SYS? Seems I have 28 groups now as my user I tried created a test user with much less groups but it turns out it is on all those other groups. As such I tried winbind nested groups=no but this doesn't seem to change anything. On Tue, Dec 8, 2015 at 5:05 PM, Mattias Zhabinskiy < mattiasz at thinklogical.com> wrote: > Jeff, > > > To find out maximum number of groups allowed per user run: > > cat /proc/sys/kernel/ngroups_max > or > sysctl kernel.ngroups_max > but AFAIK AUTH_SYS has a limit of 16, so I would try to either create a > test...

...newgrp it and then sudo. See if it will work, then you'll have to figure out what's going on with the users groups membership. Regards, Matt ________________________________ From: Jeff Sadowski <jeff.sadowski at gmail.com> Sent: Wednesday, December 9, 2015 10:08 AM To: Mattias Zhabinskiy; samba Subject: Re: [Samba] Adding an AD group to /etc/sudoers? # cat /proc/sys/kernel/ngroups_max 65536 # sysctl kernel.ngroups_max kernel.ngroups_max = 65536 Is there a way to change/look at AUTH_SYS? Seems I have 28 groups now as my user I tried created a test user with much less groups but it...

...older that has 0760 permissions with >> user as root and it as the group >> >> as for >> %it ALL=(ALL) ALL >> instead of: >> %it ALL=(ALL:ALL) ALL >> >> seems to work the same >> >> >> >> On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy < >> mattiasz at thinklogical.com> wrote: >> >>> Jeff, >>> >>> After the ssh did you run "id" command to verify that your account >>> belongs to the "it" group on the remote system? >>> >>> Did you try: >...

...does why would id alone give different results? which is odd because as my username I can get into a folder that has 0760 permissions with user as root and it as the group as for %it ALL=(ALL) ALL instead of: %it ALL=(ALL:ALL) ALL seems to work the same On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy < mattiasz at thinklogical.com> wrote: > Jeff, > > After the ssh did you run "id" command to verify that your account belongs > to the "it" group on the remote system? > > Did you try: > %it ALL=(ALL) ALL > instead of: > %it ALL=(ALL:ALL) ALL &g...

...either create a test account, add it to the "it" group and test it with sudo, or trim your account membership to 16 or less groups. Regards, Matt ________________________________ From: Jeff Sadowski <jeff.sadowski at gmail.com> Sent: Tuesday, December 8, 2015 4:59 PM To: Mattias Zhabinskiy; samba Subject: Re: [Samba] Adding an AD group to /etc/sudoers? # id username|sed "s/,/\n/g"|wc -l 155 # id|sed "s/,/\n/g"|wc -l 28 On Tue, Dec 8, 2015 at 2:56 PM, Jeff Sadowski <jeff.sadowski at gmail.com<mailto:jeff.sadowski at gmail.com>> wrote: wbinfo -r user...

...;a domain group>' should show the domain group. If you are running samba4 in AD mode, then you are running winbind, though you may not be **using** it. Can you post what OS & samba packages you are using. Rowland > > Rich. > > -----Original Message----- > From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] > Sent: Friday, December 19, 2014 12:15 AM > To: Rich Webb > Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character > 3 > > Hello Rich, > > First of all remove space in front of the group name "users": > &g...

...t;put quotes around it and not have to use the \ and the space. > >The problem is getent group only is listing local unix groups. I think >that is why setfacl is not able to add active directory groups to the >acl. > >Rich. > >-----Original Message----- >From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] >Sent: Friday, December 19, 2014 12:15 AM >To: Rich Webb >Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >character >3 > >Hello Rich, > >First of all remove space in front of the group name "users": > &gt...

...d because > as my username I can get into a folder that has 0760 permissions with user > as root and it as the group > > as for > %it ALL=(ALL) ALL > instead of: > %it ALL=(ALL:ALL) ALL > > seems to work the same > > > > On Tue, Dec 8, 2015 at 1:29 PM, Mattias Zhabinskiy < > mattiasz at thinklogical.com> wrote: > >> Jeff, >> >> After the ssh did you run "id" command to verify that your account >> belongs to the "it" group on the remote system? >> >> Did you try: >> %it ALL=(ALL) ALL >>...

...group. > >If you are running samba4 in AD mode, then you are running winbind, >though you may not be **using** it. > >Can you post what OS & samba packages you are using. > >Rowland >> >> Rich. >> >> -----Original Message----- >> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] >> Sent: Friday, December 19, 2014 12:15 AM >> To: Rich Webb >> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >> character >> 3 >> >> Hello Rich, >> >> First of all remove space in front of...

I just tried that and I got the same error. I think there is some extended acl support that I'm missing somewhere. It's like the setfacl command is not recognizing the AD groups as valid groups. I should also add the following information: This server is built up on CentOS 6.6 Minimal using the Sernet-Samba Enterprise packages. It looks like the binary that is running is

...ing to see buffer/cache optimised, not user memory. I would also look at the size of the directories on the server. I'm going to guess that your winbox has sufficient memory that once mapped it caches it locally, but discards this cache on WE close. HTH, Martin On 29/02/16 18:58, Mattias Zhabinskiy wrote: > Hello Richard, > > Not sure if it applies to your particular case, but I would try following. In windows explorer please right click on the mapped drive, select Properties, click on Customize tab and make sure that option "Optimize this folder for:" is set to "Gener...

...omain group. > > If you are running samba4 in AD mode, then you are running winbind, > though you may not be **using** it. > > Can you post what OS & samba packages you are using. > > Rowland >> Rich. >> >> -----Original Message----- >> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] >> Sent: Friday, December 19, 2014 12:15 AM >> To: Rich Webb >> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >> character >> 3 >> >> Hello Rich, >> >> First of all remove space in front of...

...d as a literal. I think I could also put quotes around it and not have to use the \ and the space. The problem is getent group only is listing local unix groups. I think that is why setfacl is not able to add active directory groups to the acl. Rich. -----Original Message----- From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] Sent: Friday, December 19, 2014 12:15 AM To: Rich Webb Subject: Re: [Samba] setfacl: Option -m: Invalid argument near character 3 Hello Rich, First of all remove space in front of the group name "users": setfacl -R -m g:MYDOM\\domain\users:rwx ./s...

...t;a domain group>' should show the domain group. If you are running samba4 in AD mode, then you are running winbind, though you may not be **using** it. Can you post what OS & samba packages you are using. Rowland > > Rich. > > -----Original Message----- > From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] > Sent: Friday, December 19, 2014 12:15 AM > To: Rich Webb > Subject: Re: [Samba] setfacl: Option -m: Invalid argument near > character > 3 > > Hello Rich, > > First of all remove space in front of the group name "users": &...

Hi, I manage quite a few boxes that are identical in OS and Samba version. (Debian Wheezy, Samba version 3.6.6) I have one box, where each time you open windows explorer and click on the mapped network share, a line moves across the top of explorer and it takes around 30-40 seconds to display the directory listing. Once it has done this once, it is quick thereafter, until you close explorer

...have to use the \ and the >space. > > The problem is getent group only is listing local unix >groups. I think > that is why setfacl is not able to add active directory >groups to the > acl. > > Rich. > > -----Original Message----- > From: Mattias Zhabinskiy >[mailto:mattiasz at thinklogical.com] > Sent: Friday, December 19, 2014 12:15 AM > To: Rich Webb > Subject: Re: [Samba] setfacl: Option -m: Invalid >argument near > character > 3 > > Hello Rich, > > First of all remove space in front of the group name &...

...group. > >If you are running samba4 in AD mode, then you are running winbind, >though you may not be **using** it. > >Can you post what OS & samba packages you are using. > >Rowland >> >> Rich. >> >> -----Original Message----- >> From: Mattias Zhabinskiy [mailto:mattiasz at thinklogical.com] >> Sent: Friday, December 19, 2014 12:15 AM >> To: Rich Webb >> Subject: Re: [Samba] setfacl: Option -m: Invalid argument near >> character >> 3 >> >> Hello Rich, >> >> First of all remove space in front of...

I think I see some heavy weather ahead of me: http://technet.microsoft.com/en-ca/library/dn303411.aspx specifically w.r.t. Server 2012 r2 (with which I will have to soon(ish) wrestle): > Features Removed or Deprecated in Windows Server 2012 R2 >... > RSAT: Identity management for Unix/NIS > > The Server for Network Information Service (NIS) Tools option of > Remote Server

Hello Richard, Not sure if it applies to your particular case, but I would try following. In windows explorer please right click on the mapped drive, select Properties, click on Customize tab and make sure that option "Optimize this folder for:" is set to "General Items", otherwise select it, check "Also apply this template to all subfolders" and click Apply. Also,