similar to: UID of the windows Domain Administrator user?

Hello samba, I have an issue with OpenVPN 2.0 and Samba 3.0.14a. My setup consists in a routed VPN (thus server and clients are on different subnets) between a linux OpenVPN 2.0 server and some Windows 2000 VPN clients. Samba is the PDC and is a WINS server. The VPN clients work, broswing works, and I see the clients registering on the server's WINS in

I am looking for some way to grant or deny internet access (that is, changing iptables rules) based on Samba domain logon. When a user logs on, I would like to run a script that modifies firewall rules based on the group that the user belongs to (this determines if he has internet access or not) and based on the workstation's IP address (so I know which IP address to grant internet access

I have tried to read the documentation, but I was not able to find a clear solution to my problem. I run Samba 3.0.14a on a Debian system with Posix ACLs. I have a share on a file system that uses Posix ACLs, and I have two directories in that share. Both directories have default ACLs set, so that every new file (or directory) created under each directory (by Windows XP/2000 clients)

Using ldap as my sam backend and Samba 3.0.0-2, I'm showing that samba stops parsing a RID when it encounters a letter. For example, I have an accounting group with gid 2771 and therefore rid ad3. When I list the groups in the samba domain, however, I get this listing: Domain Admins (DOMAINSID-512) -> Domain Admins Domain Users (DOMAINSID-513) -> Domain Users Domain Guests

Hi, this is my first post to the list. I have googled a lot, and still cannot find a proper solution. I hope someone here will be able to shed some light on my doubts. I have set up a firewall using kernel 2.6.15 (Debian) that does NAT for 100 clients, and uses two different ISPs, using the howto found at http://lartc.org/howto/lartc.rpdb.multiple-links.html. I have *not*

Hi at all, i´am using samba 4.3.4 as "ad", "migrated by classicupgrade" some time ago from an nt4-domain. By trying samba_upgradedns --dns-backend=BIND9_DLZ i get the following error: Traceback (most recent call last): File "/usr/sbin/samba_upgradedns", line 262, in <module> paths, lp.configfile, lp) File

Hi, i have a problem upgrading an old samba 3.5.x to 4.0.9. The upgrade ends with: Setting password for administrator Administrator password has been set to password of user 'root' set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_OWNER. ERROR(runtime): uncaught exception - (-1073741734, 'NT_STATUS_INVALID_OWNER') File

Then I don't know what caused it. I had no problems prior to the upgrade, and the upgrade was done without errors.. Unfortunately, no, I don't have backups. 'sam.ldb' is still there, though, and so are the databases unter 'sam.ldb.d'. Yes, I tried restarting Samba, even rebooted the server but to no avail. Here are the results from running samba in the shell: lpcfg_load:

I am currently planning "half a migration" (and half a new configuration) from NT to Samba PDC, and I would like to have some help. I have read the howto and I have understood something useful, but I also understood that I don't know enough of Samba domain internals to be sure not to make terrible mistakes. I currently have a NT4 PDC that also shares files and

Hello Stephan, Monday, June 13, 2005, 12:58:54 PM, you wrote: SH> I am struggeling around with the permissions of the recycle-vfs-module. SH> While working mostly good( placing deleted files inside the .recycle- SH> folder), the touch-option does not work. I am experiencing the same problem. The recycle vfs module is quite buggy, IMHO. The touch option does not seem to work,

I am quite desperate. I have been trying to migrate a NT4 PDC to Samba. At the first try, I have used samba 3.2.5, which seemed to complete the vampire process but then I have found that there is a bug that prevents password from being migrated properly (and in fact passwords were not migrated properly). Then, I have removed the Linux server from the NT domain, deleted all TDB files, installed

I have to upgrade a 2.2.8a (Debian) installation to 3.0.14a (Debian too). I have quite everything clear but I am afraid I will get into trouble with the filename encoding on disk. The current samba installation has no explicit codepage declared for the file system, and running "testparm" gives only these settings (which are default) for codepages and charsets:

I have just run into two printer drivers (Brother 1870N and HP Deskjet 890cxi) that seem to crash windows explorer as soon as they are uploaded to the samba server. I have tried using "default devmode=yes" with no success for both drivers. I have found an horrible workaround that maybe should be useful to others, so I'll describe it here. First, uninstall the offending

Hi All, I've been trying to tackle this for some time and so far did not find a way to do this. The problem is simple - as I don't enable printing through Samba I'd like to disable it in such fashion that user would not even see the empty Printers share when he lists the available shares. How can I achieve that? Best Regards, Marek C.

On Sun, 16 Sep 2018 10:51:25 -0400 Bill Baird via samba <samba at lists.samba.org> wrote: > I ran the same thing with 4.8.5 and it work without any issues: > > Adding groups > Importing groups > Committing 'add groups' transaction to disk > Adding users > Importing users > Committing 'add users' transaction to disk > Adding users to groups >

I confirm that Malte M?ller says. If you want to set multiple group acces, you must use ACL. the valid user parameter in smb.conf force the right of directory but the unix right is only for group user. ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467

Does the domain administrator SID always end with -1000? I.e., if the SID for the domain is: S-1-2-33-4444444444-555555555-6666666666 does this mean that the domain administrator's SID would be: S-1-2-33-4444444444-555555555-6666666666-1000 ? How can I get the SID number for any given user? -- Tomek http://wpkg.org WPKG - software deployment and upgrades with Samba

On Sun, 16 Sep 2018 11:28:56 -0400 Bill Baird <Bill.Baird at phoenixmi.com> wrote: > Python is 2.6, but why wouldn't it throw an error during > configure/make? No, the python code isn't compiled. > > I'm using Amazon Linux. Would you like to raise a bug report ? Here: https://bugzilla.samba.org/ Rowland > > On Sun, Sep 16, 2018 at 11:22 AM Rowland Penny

On Fri, 15 Dec 2017 13:16:51 -0600 Taylor Hammerling <thammerling at tcsbasys.com> wrote: > ok, I followed the directions on that wikipage, made a hot backup, > copied the hot backup over to the new DC, renamed the hot backup > (thus replacing the existing idmap.ldb) and ran "samba-tool ntacl > sysvolreset" and it spat out the following after a minute or 2 of >

Hi, I have a little problem, sometimes the administrator must put a file in a home directory. But the owner of this file is root, not the user which have the home directory. Example : /rsrv/data1/home/toto toto Utilisateurs 0700 + toto.id root Administrateurs 0700 + fichier.xls toto Utilisateurs 0700 I would like to kown how I set up my