similar to: Changing ACLs dont work, clicking 'apply' restores old ACL

Hello, Jeremy and Jerry, I met both of you at LinuxWorld in Boston, where I learned tons and tons of great stuff from your presentations. I'm writing on deadline for publication and would really, really, really like to show off Samba's ability to map NT ACLs to POSIX ACLs. But right now, I can't make them work. I've spent some time on the Samba list trying to make this work, but

The nss_ldap has some performance problems and doesn't have any caching features that windbind does. What I was aways wondering is does IDMAP write UID/GID derived from SID to the extended schema in AD? Can winbindd use this extended schema, instead of using nss_ldap? -----Original Message----- From: samba-bounces+letz_samba=realmspace.com@lists.samba.org

Hello! I've been running a custom hacked samba 3.0rc1 to get winbindd to bind every SID simply to what getpwent returns as the UID. The newest versions of samba seem to support the possibility to have winbindd to use /etc/passwd and /etc/group as the storage backend. So basically what I need is that each time samba wants to know the SID of the username "joe" it would just query

Scenario: Samba-3.0.20b domain member server on SuSE 9.3 (w/ all available patches applied) providing kerberos authentication through a Windows 2000 domain with AD4Unix services installed. Problem(s): 1. Can only view users from one OU in Active Directory (default is: CN=Users, problem container is: OU=authenticated) 2. According to log.winbind and log.smbd authentication fails with error:

I have been digging around for information on this in either online and published books, but I haven't yet found the answer. I am interested in AD connective through AD Kerberos/LDAP/SFU or AD Kerberos/LDAP/AD4Unix. I have a pure win2k3 environment, so there is no backwards support via PDC emulator. Published books document older NT-like environments. *cries* If there are any documents,

Hello List-Friends ;-) O.K. I am a real beginner, so please don't hurt me ;-) but im still working since a few days to get it running and google is my best friend. I also bought O'Reilly 's Samba Book and a lot of other online stuff, but AD-Samba-winbind should be too new. I use Suse 9.1 and Samba 3.0.4 as ADS Member Server. We have an W2k Advanced Server (and a M$-Admin which

I'm trying to set up a Samba server with ACLS. Versions: - xfs in kernel-2.4.20. - samba-2.2.7a compiled with ACL support I'm trying first with smbcacls. But I can't manage to guess the syntax of the ACL command. I want the user "frankie" could RWX a file owned by "javi" #smbcacls //localhost/public te1st.txt -A ACL:frankie:0/0/RWX -U javi Failed to parse ACL

Hi, there's a bug on bugzilla.samba.org that I'd like to comment on but it's not letting me. It's bug #242, titled "Retrieving UNIX UID/GID directly through Active Directory from schema extension" The person who posted the request talks about using AD4Unix, but I've installed Microsoft's Services for Unix and it made similar schema changes. Specifically, it

On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > Hi, all, > > we run smbcacls tool from linux machine to set file permissions on > windows server. > > here is our environment: > > > Linux machine: Ubuntu 14.04 LTS, kernel version 3.13.0-112-generic > > Samba version: 4.3.11 > > Windows machine: Windows server 2012 > > >

Hi, all, we run smbcacls tool from linux machine to set file permissions on windows server. here is our environment: Linux machine: Ubuntu 14.04 LTS, kernel version 3.13.0-112-generic Samba version: 4.3.11 Windows machine: Windows server 2012 the cmd we run is something like following: /usr/bin/smbcacls -U 'Domain\Administrator'%'pwd' '//win_server/testshare'

(Is this the right place to post such question?) I can't seem to grasp the right syntax for smbcacls This is a 306rc2, security=user system w/ passwords set via smbpasswd, and smbclient gives expected r/w behavior.I've seen the same on a 302a security=domain or ads system (I believe), which is why I think I'm misinterpreting something (or is smbcacls broken??) -- or what

On Thu, Jun 08, 2017 at 02:40:49PM -0700, Jeremy Allison wrote: > On Thu, Jun 08, 2017 at 06:43:34PM +0200, Ralph Böhme via samba wrote: > > Hi Andy, > > > > On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > > > The smbcacls cmd worked before till recently. Due to the recent Windows > > > patch which disables SMB v1, we have to add the

Hi- I'm deploying a fileserver running Samba 3.0.2a in an environment that contains NT and UNIX users. I'd like to have my fileserver set up as follows: - Users connecting to the fileserver from NT boxes are authenticated against the Win2K ADS Domain Controller. - Users connecting to the fileserver from other UNIX boxes are authenticated locally using NIS and access the shared volume

I have installed Samba 3.5.2 and setup the service as a Domain member server, NT-4 style. Everything appears to be working just fine (NSS winbind is installed). The only problem is that the output from smbcacls when contacting this Samba server does not include the domain to which the server is joined. When I use smbcacls to test out an existing Windows server, the domain name is appended in

I am able to change owner from User1 to Administrator at Domain Controller/active-directory machine. And after that from linux box, using smbcacls -C DOMAIN\\User1 ...... command I am able to change owner from Administrator --> User1. But changing owner from User1 to Administrator using smbcacls is not working.   User1 is in Domain admins, Administrators , backup operators

On Thu, Jun 08, 2017 at 06:43:34PM +0200, Ralph Böhme via samba wrote: > Hi Andy, > > On Thu, Jun 08, 2017 at 09:23:50AM -0700, Andy Qian via samba wrote: > > The smbcacls cmd worked before till recently. Due to the recent Windows > > patch which disables SMB v1, we have to add the following line into the > > [global] section in smb.conf file on Linux machine so that

This is a long-standing issue going back at least a year from what I can see in mailing list archives. Still not working as of Samba 4.8.3. I think MS broke something with one of the Windows 10 updates. In my situation, this is a brand-new 4.8.3 install. For me the crashes happen when I try to edit the share folder permissions right out of the box from whatever Samba set in there by default.

Hi all, I'm using the smbcacls command to query a W2k server from a Linux Samba 2.2.7a client. (This is for the script that I'm writing, which I will post soon - I know at least one person was interested...) It all works fine, but it's very slow - it takes about 1 second per file. "Very" in this case is relative, but since I intend to run it on ~150k files... I've

hi. sorry for the "dumb" question, but I'm failing to figure out where the information printed by smbcacls come from. I have a 3.4.x server with basic settings, few shares and not much more. Share's access is controlled by unix file permissions. Filesystem has "acl" enabled, but no acl set up, so the standard unix permissions are being used. Still I have problem for a

Hello, I'm running a PDC and a secondary DC in privilegded lxc containers and try to setup a fileserver in an unprivileged lxc container. The shares of the file server are on the ZFS of the host and mapped via bind-mount. I've got the problem, that I get error messages when setting the ACLs of a samba share either via the Windows explorer or using the smbcacls command. On Windows