similar to: Using SeMachineAccountPrivilege returns NT_STATUS_NO_SUCH_PRIVILEGE

I am testing out Debian Etch, and ran into an issue granting SeMachineAccountPrivilege to an account... which granting that permission had been troublesome in the past. The command I am issuing is: net rpc rights grant LDS-DEMO\\ldsinst SeMachineAccountPrivilege And I try running the command with an account that is a member of the "Domain Admins" group. The command returns: Failed to

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Am 28.09.2015 um 13:22 schrieb Rowland Penny: > On 28/09/15 11:30, Steffen Weißgerber wrote: > Hello, > > after configuring kerberos and winbind for authentication against an A D > (Window 2008 R2) and succesful launching getent passwd I followed the > instructions https://wiki.samba.org/index.php/Shares_with_Windows_ACLs > for

As far as I understood this privilege is available only for domains which are Active Directory domains. As you are using Samba 3.6 you shouldn't have AD domain but NT4 domain. 2015-10-01 14:49 GMT+02:00 Steffen Weißgerber <steffen at weiszgerber.de>: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Am 28.09.2015 um 13:22 schrieb Rowland Penny: > > On 28/09/15

I found the solution, or at least a work around, for my posting: "Can not grant SeMachineAccountPrivilege on Debian Etch" I ended up: 1) ssh to Debian Etch as root 2) smbpasswd -a root 3) issue the "net rpc rights grant ..." command SUCCESS!!! So, that raises the question that what MUST be executed as user root verses a member of ntgroup="Domain Admins"? I suspect

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hmm why, the guy at https://raymii.org/s/tutorials/SAMBA_Share_with_Active_Directory_Login_o n_Ubuntu_12.04.html does exactly this. Also the manpage e.g. for smb.conf describes the config for a connection to an AD. And after granting file rights to the share via setfacl -m g:domänen-admins:rwx /var/samba/test I can mkdir and granting rights to

I have a share which a group write list. That group is mapped to a Linux group in /etc/group. That group in Linux has two users. The first user listed is suddenly unable to write, but the second one is. With the affected user logged in to Win2K, ifmember /list shows they are a member of the group, as does the working account. I am guessing one of those .tdb files or something got scrambled on the

Hello, i updated my samba to version 3.0.20 on a suse 9.2 system. I thought, some new net rpc commands need samba 3.0.13. But I get faults with the command: amd:~ # net rpc rights grant testuser10 SeMachineAccountPrivilege [2005/08/25 02:45:35, 0] param/loadparm.c:map_parameter(2536) Unknown parameter encountered: "enables privileges" [2005/08/25 02:45:35, 0]

Hi, I have recently upgraded to 3.0.11 and the new user privileges worked fine. Since I applied the user privileges and trust patch, I am now unable to grant privileges to users or groups. The error I am getting is Failed to grant privileges for longhill\Domain Admins (NT_STATUS_NO_SUCH_PRIVILEGE) I have tried all 5 privileges and I get the same error. I suspect it has something to do with

Giving a domain user group privilege SeDiskOperatorPrivilege fails with NT_STATUS_NO_SUCH_PRIVILEGE. The domain is controlled by a MS 2012 R2 DC. Has this privilege been renamed or replaced with some other privilege? How to give the domain user group necessary rights for defining file share permission settings from MS environment? The RHEL 7 file server is running Samba 4.1.1-38 and the id

On 01/10/15 14:32, Steffen Weißgerber wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hmm why, > > the guy at > https://raymii.org/s/tutorials/SAMBA_Share_with_Active_Directory_Login_o > n_Ubuntu_12.04.html > does exactly this. > > Also the manpage e.g. for smb.conf describes the config for a connection > to an AD. > > And after granting file

Hello, I am striving to give out globally to our developers a way to debug their C++ applications, but I do not want to give them Admin rights on the individual workstations. I thought I found the light when reading on MSDN that to debug users need to be members of the "Debugger Users" group (according to VS.Net). This group seems to be created with a random SID when installing

I'm having issues with a couple of areas of Samba Setup. I can see (from my Win 8.1 workstation) the shares for the server for my test share \\p30\download<file:///\\p30\download> and \\p30\bietz<file:///\\p30\bietz> my home folder. I don't have permissions to access the folders and/or can't create or delete files. I had an upgraded Active Directory domain from Windows

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================== Oplocks are strange -- Volker Lendecke ============================================================== Release Announcements ===================== This is a release candidate of the 3.0.20 code base and is provided for

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all, I've written a HowTo for 'Samba domain with LDAP back end' and am looking for people to test it and tell me the stupid things I did. I also wanted to put the HowTo out there in case others wanted to do something similar and because I know you've got nothing better to do on your weekend than play with Linux ;) I'm by no

First off, on the Windows side I use "ifmember.exe /list" to check the group membership in affect for the currently logged in domain user, works like a charm. However, Linux side is another story, specifically the net command. We have, among others, the following mapping in place: net groupmap modify ntgroup="Domain Admins" unixgroup=domadmin Based on this documentation:

Hello List, I have tried to grant SeMachineAccountPrivilege to an extra group. Users in this group should not have Admin rights but they should be able to join workstations to the domain. My first try was to grant the right to a single user wich is working as expected. net rpc rights grant "TOPTEST\toptest.r" SeMachineAccountPrivilege -U domainadmin net rpc rights shows:

(Re-posting to list also.. Sorry forgot Cc. -Tom) Marc, Thanks for your help and clarifications. I was indeed addressing the domain controller (2012 R2) due to my misunderstanding. Addressing the request at the file server (Samba 4) to the file server fails too but with different errors. Rights list succeeds. $ net rpc rights list accounts -UDOMAIN\\Administrator Enter

hi@all! i set up a system where samba is a primary and a secondary domain controller; the authentication is over ldap and everything works fine but.... i would like to test what happen when the pdc is down and so i shutdown the smb service on the pdc. the logins from all clients worked well on the bdc but when i try to join a new machine to the domain, it can't contact the domain

Greetings- I am wondering if anyone from the Samba team would happen to have interest in creating official builds for Ubuntu? To add a twist, unfortunately I would not be fishing for 7.10 packages, but rather 7.04 as we ran into too many issues with 7.10 whereas 7.04 seems rock solid stable. Or, are there packages built of Samba releases for Ubuntu external to samba.org? Thanks, -- Michael

Greetings- I am working through coming up with a Linux client integration to Samba PDC's. I mount several shares with this sort of syntax: /bin/mount -t cifs -o credentials=/home/userid/.smbcredentials,uid=userid,gid=userid,dmask=0777,fmask=0666 //ldslnx01/data /mnt/ldslnx01/data/ However when I create new files/dirs on the Samba share from the Linux workstation, the perms are not 0666/0777