similar to: create_canon_ace_lists: unable to map SID

Hi all, I'm trying to get a Samba server (which is a member of a Samba controlled domain) to store WinXP Pro user's profiles. The XP user is authenticating against a 2003 Active Directory server, which then tells it to store it's profile on my Samba server. The 'profiles' share exists and is writeable and under some circumstances we can get profiles to be stored there,

I have a samba server on linux with a LDAP DC, On a client server, I was do net join -S DOMSERV -Uadmin%PASSWORD and that's work The server member of DOMSERV have a share XFS filesystem. When I set manualy the acl (setfacl -m g:group:rwx the_file) It's ok, the other domain member see the ACL But when I set the acl with a Windows Workstation, that's don't work

I did search and found other folks with this issue but I didn't see a solution to my specific issue: I am running Samba 3.4.7 on ubuntu 10.04 LTS server configured to authenticate to active directory via Kerberos and LDAP for use with clients from OS X and Windows (no linux clients) On the advice of my local active directory team Winbind has been uninstalled and everything works nicely except

Hi Ian, Thanks for the fast answer. How can I find out whether this is the NT domains SID? The interesting is that i can see all files/Dirs without problems in the Filebrowser of Arcserve. Thx Stefan -----Urspr?ngliche Nachricht----- Von: Ian Clancy [mailto:clancyian@cel.ie] Gesendet: Freitag, 6. Mai 2005 16:41 An: Stefan Sabolowitsch; samba@lists.samba.org Betreff: Re: [Samba]

I'm running Samba 2.2.4 using security = DOMAIN and username map. I was able to join the Samba server to the NT domain. I can also access the Samba share from my W2K machine. I log on to my W2K machine using my domain account. I'm having problem adding permission (grant access to another user) to the file and folder I created. I get the following error: create_canon_ace_lists:

Hello, Lots of messages in smbd log file on a Samba file server, which is member of a Samba AD : [2018/07/24 10:30:00.822403, 0] ../source3/smbd/posix_acls.c:2080(create_canon_ace_lists)

I think I've looked over every post that has acl or sid or winbind in it. I don't think this has been discussed quite this way. The symptom is similar to other posts but the environment is a bit different. We can do perms through samba, and we can see acls that have been set using setfacl, but we can't change the acls (e.g., add a user). We get: [2002/11/15 17:02:17, 0]

On Tue, 24 Jul 2018 11:25:33 +0200 Henry Jensen via samba <samba at lists.samba.org> wrote: > Hello, > > Lots of messages in smbd log file on a Samba file server, which is > member of a Samba AD : > > [2018/07/24 10:30:00.822403, > 0] ../source3/smbd/posix_acls.c:2080(create_canon_ace_lists) > create_canon_ace_lists: unable to map SID >

Hi again, This is a follow up to a previous e-mail, but no luck so I have done some more digging. I don't understand why it is so difficult to map between a existing user on a Windows Server (SID) and an existing user on a Unix/Solaris (UID) user, since all information is available? unix# /usr/local/samba/bin/wbinfo -n andrew S-1-5-21-1984182827-583073959-8547516-2056 User (1) unix# tail

I have had a few replies and it looks that I am on a no win solution. I either set up LDAP and delete local UID on our UNIX boxes and let samba convert SID to UID, or just leave thinks as they are. I still don't under stand why it is so difficult to do what I want when all the information seems to be at hand. 1) User changes security of a file on a samba share to allow DCSNT\andrew access.

Hi. I have a problem with mapping SIDs to uids in Samba 2.2.6pre2. I am using Mandrake linux 8.2 with acls, and samba acting as PDC on my local net. My problem is what when I viewing permissions on my test WinXP box, it shows to me SIDs, but not a user or group, and of cource everyone... For example, I created user "test" on my linux box and added him to smbpasswd. Then, when I logon

I have: linux 2.6.18-1.2200.fc5 samba-3.0.23c-1.fc5 W2000 AD with SFU 3.5 uid and gid in SFU linux configured to use AD with ldap client for mapping users, groups and authentication winbind not configured Everyting works fine except ACL in the linux filesystem: I receive this error when I want to add an user access to a file: [2006/10/18 09:38:28, 0]

Hello, i just searched the archive, but had no luck with my problem. Perhaps somebody could help me please.. We use Linux with ACL Kernel 2.4.17. EXT3 File-System... My samba 2.2.8a server shows different output in the Security Tab of Files or Directorys.. If i create a new file in linux and set the permissions with setfacl -m to DOMAIN*GROUP testfile i see in the securty settings the following

I modified the CUPS access rights (defined in cupsd.conf). Before that only users of administrative group had access to the printer configuration parts. Now I removed all access restrictions, so that anyone can access all CUPS services (printers, jobs, ...) (we use this, because sometimes we need to hold printers manually ...). But, as I mentioned, I don't find the relationship between this

Thanks for the suggestions. I tried them without success. Strange that wbinfo works but getent does not. On Wed, May 31, 2023 at 10:55?AM Christian Naumer < christian.naumer at greyfish.net> wrote: > It works for us with Rocky Linux 8.8 and Samba 4.17.5. DCs are Samba > 4.18.2. > > > Looking at your conf I see this: > > I do _not_ have this: > > idmap config

I recently posted a mail about problems with winbind... I'll try to be more specific: I have Redat 7.3 Followed those steps: Compiled samba 2.2.4 Configured nsswitch.conf and the winbind libraries Configured smb.conf: winbind uid = 10000-20000 winbind gid = 10000-20000 winbind enum users = yes winbind enum groups = yes winbind use default domain = yes username map =

I'm running Samba 3.0.2a on Solaris 9. My shop also runs Active Directory on W2K (SP4). In an attempt to build a single sign-on solution, I thought I'd get Samba to allow Windows 2000 users to telnet/rlogin/ftp to my UNIX boxes without requiring those users to have a UNIX account. The Samba dox claim this is possible, because winbindd will map the AD account SID to a UNIX userid, and will

Hi, I was hoping someone could help me out or just point me in the correct directions as to what I am doing wrong. I have Samba 2.2.3a installed and configured with winbind for domain authentication using an ext3 file system with ACL support. It is working great! Thanks Samba Team! The problem that I am experiencing is I would like to use an application like "xcopy" to propagate the

Hi, I was hoping someone could help me out just point me in the correct directions as to what I am going wrong. I have Samba 2.2.3a installed and configured with winbind for domain authentication using an ext3 file system with ACL support. It is working great! The problem that I am experiencing is I would like to use an application like "xcopy" to propagate the ACL permissions to the

It works for us with Rocky Linux 8.8 and Samba 4.17.5. DCs are Samba 4.18.2. Looking at your conf I see this: I do _not_ have this: idmap config DOMAIN:unix_primary_group = yes I have and you don't: disable netbios = yes smb ports = 445 server min protocol = SMB2 client min protocol = SMB2 Different: kerberos method = secrets and keytab And this is deprecated: winbind nss info =