similar to: SFU Samba Permission Denied

Hi all I'm having some problems trying to configure ACLs from a Win2000 SP3 client. I'm running Samba 2.2.5 on kernel 2.4.18 (with acl + ext attr), Samba is compiled with acl support etc. Samba is configured with security=domain, and is running with local groups etc rather than thru winbind, I haven't been game enough to tread those waters yet. With the debug level set to 5

Hi all, I have a 2.2.7a member server (on Debian unstable), acting as a file server for a W2k domain (which also has some NT4 clients, ie. mixed mode). I'm also using ACLs. Imagine I have a file on the server with an ownership of DOMAIN+foo (full permission - rwx). I also have a user ACL on that file of DOMAIN+bar, also rwx. This all works fine. I was initially running into a problem

Hi list, I'd like to raise the issue discussed in the thread below. I've faced exactly the same problem and came to exactly the same way out - shutdown winbindd and use "force unknown acl user". We use "simple" mapping in the environment - all AD accounts have corresponding NIS accounts (the same name) and the mapping is being done by smbd. The problem here is that

Whenever I try to add or remove a user for access to a file I get the following error: "Unable to save permission change on <filename>. Access is denied". I took a look at my smbd log file and found this: [2002/08/29 10:40:00, 5] smbd/posix_acls.c:unpack_nt_owners(433) unpack_nt_owners: validating owner_sids. [2002/08/29 10:40:00, 5] smbd/posix_acls.c:unpack_nt_owners(474)

Hi, I'm practising to do a classicupgrade of my samba3 domain. When I run the upgrade, I get this error : unpack_nt_owners: owner sid mapped to uid 0 idmapping sid_to_xid failed for id[0]=S-1-5-32-544: NT_STATUS_NONE_MAPPED unpack_nt_owners: unable to validate group sid. set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER. ERROR(runtime): uncaught exception - (-1073741734,

Hello, I was hoping to reprovision the same domain by specifying the domain GUID in the command line tool 'samba-tool domain provision' but I am not sure if I missed something or if there is a bug but the specified domain GUID is not the one which is created for my domain. Specifying the domain SID seems to work as I would expect. I tested it with Samba shipped by Debian 11 (samba2

Hi, I joined a new samba-4.7 DC to our AD, replicated everything over, then turned off the old DCs, seized fsmo roles, and added two extra 4.7 DCs. Everything above succeeded without warnings, and everything seems to be running very well finally, except for the sysvolcheck / sysvolreset. We're on xfs, and the File System Support checks on the samba wiki page all pass, although at the

Hi, Search on the net but not getting enough information to resolve the issue. As per suggestion to check the sysvol but mine got issues. Currently using CentOS 8.1.1911 and a compiled samba 4.11.4 based on Fedora 31. I tried also to delete the broken GPO policy E4108E65-68AB-4E2D-9A00-A9063B1558E3 but I can't delete it (using samba-tool gpo del {31B2F340-016D-11D2-945F-00C04FB984F9}

Dear all We run Samba 3.5.8 on a Solaris 11 box on top of ZFS We got the impression that the VFS module acl_xattr provides the best way of keeping Windows ACLs. We don't have concurrent NFS or local users so it's Windows only. The clients as well as the Samba server are members of an AD domain. Creating files/directories works as expected and also manipulating permissions for the initial

Is anyone else experiencing problems with offline files and folders on Win 2K (SP4)? They are set up OK but when the Win2K machine goes off line and files are modified it won't sync back when back on the network. Error message from the file sync on windows is 'Access denied' (on the server) But I can easily do the overwrite manually so permissions are OK. Below is the log (level 10)

I am trying to run Samba 2.2.4 on solaris 2.8 with W2K clients. I have an NT app installed onto the Solaris 8 server which i would like to run off of the mapped samba network drive. When i try to start the NT app it attempts to read a file on the samba drive called .root.passwords but fails (This file can be accessed with notepad). The following is an extract from the samba error log. I get the

At the suggestion of Stas, I'm starting a new thread on this one. This pretty much covers where I'm at right now: Doug, thanks, here's a complete listing of the config file, and some logging, hopefully this will be illuminating to somebody. > Neither of these lines set the log level. Yes, I've been setting it in the init script. When I do ps -ef | grep smbd, I see that

Hello all, I'm having a problem with Winbind resolving some users from AD on a W2KSP4 server running SFU 3.5 [8.0.1969.1]. All users and groups in the AD domain have been assigned UIDs and GIDs via SFU. The Linux fileserver is running CentOS 5.3 with Samba 3.0.33-3.7.el5. The fileserver has been joined to the domain using authconfig with proper modifications made to nsswitch and pam.

I'm trying to upgrade from samba3 -> 4. I ran this command: WORKDIR=/usr/local/mobius /usr/local/samba/bin/samba-tool domain classicupgrade --dbdir=$WORKDIR/var --use-xattrs=yes --realm=infinityhealthcare.com $WORKDIR/smb.conf but it failed with the error given in this email's subject. What does it mean, and how do I fix it? This is just another is a growing line of errors that

Maybe I'm doing somthing really stupid, but while copying some windows share onto a samba server, on some random subdirectory robocopy says ERROR 87 (0x00000057) Copying NTFS Security to Destination Directory... The samba logfile has lots of these lines. modules/vfs_posixacl.c:349(smb_acl_to_posix) smb_acl_to_posix: ACL is invalid for set (Das Argument ist ung?ltig) The strange thing is

ClassicUpgrade of my samba3 data to samba4 fails, with this error: ERROR(<class 'passdb.error'>): uncaught exception - Unable to get id for sid Full log of the classicupgrade is at the end of this email. Project member on this list, Andrew Barlett, wrote that the issue is probably that my Samba 3 passdb was passable in an NT 4 DC mode, but is actually 'invalid' :

On Thu, 2017-10-26 at 11:38 +0200, mj via samba wrote: > Hi, > > I joined a new samba-4.7 DC to our AD, replicated everything over, then > turned off the old DCs, seized fsmo roles, and added two extra 4.7 DCs. > > Everything above succeeded without warnings, and everything seems to be > running very well finally, except for the sysvolcheck / sysvolreset. > >

Hi My configuration: smb.conf # Global parameters [global] workgroup = MYSERVER realm = interno.mydomain.com.br netbios name = DC-LINUX server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate idmap_ldb:use rfc2307 = yes ldap server

If I try to create a clearcase view on a Windows 2000 Server share then it creates a subdirectory tree. If I try it on a Samba share, it creates the first directory correctly with the right user mapping and permissions and then returns permission denied. I am able to manually create files and directories on the samba share using explorer, so I guess that clearcase must be using some different SMB

Problem solved. Sort-of. I just don't know why the solution works. Here's what I found... First, I tried updating SFU 3.5 with the following hotfixes: 913030, 886655, 887531, 932143, 883520, 894186, 931930, 892561, 896428, 888993, 932143, and 939778. No change. Second, I used ADSI Edit from the Win2k support tools to compare side-by-side a working account with a "Could not get