similar to: joined to ads, mapped permissions

I have posted several questions now and have ben unsuccessful in getting any responses, so i thought i would take a different tack. I know adjusting permissions on Samba shares, through the Microsoft MMC is possible when you have POSIX ACL support compiled in your kernel. I don't think that level of control is necessary for me and short of recompiling the kernel for that support i have been

s there is trick to fully copying an existing local profile over to your new domain profile after you join the Samba domain? I tried the profile copy under System Properties, on the advanced tab and although it completed, I log on and MS office wants to load files from the CD and my start menu seems to be missing the entire left side column. When I look at the size and number of files my

On 14/05/2023 20:32, Kees van Vloten via samba wrote: > The uid + gid are the unique identifier of a user in Linux, the name is > only relevant for the translation of number (uid) to name. > > I.e. a local-user == domain-user when uid + gid are identical. > > My nsswitch.conf prefers local-users over domain-users: > > passwd:???????? files systemd winbind >

On 14-05-2023 21:39, Rowland Penny via samba wrote: > > > On 14/05/2023 20:32, Kees van Vloten via samba wrote: > >> The uid + gid are the unique identifier of a user in Linux, the name >> is only relevant for the translation of number (uid) to name. >> >> I.e. a local-user == domain-user when uid + gid are identical. >> >> My nsswitch.conf prefers

On 14/05/2023 20:47, Kees van Vloten via samba wrote: > > On 14-05-2023 21:39, Rowland Penny via samba wrote: >> >> >> On 14/05/2023 20:32, Kees van Vloten via samba wrote: >> >>> The uid + gid are the unique identifier of a user in Linux, the name >>> is only relevant for the translation of number (uid) to name. >>> >>> I.e. a

On 14-05-2023 21:58, Rowland Penny via samba wrote: > > > On 14/05/2023 20:47, Kees van Vloten via samba wrote: >> >> On 14-05-2023 21:39, Rowland Penny via samba wrote: >>> >>> >>> On 14/05/2023 20:32, Kees van Vloten via samba wrote: >>> >>>> The uid + gid are the unique identifier of a user in Linux, the >>>> name

Hi, I'm an old admin used to configure computers by using a few command lines, that used to quite similar for about 20 years now. For example there was a quite simple method to add a smbpasswd for a unix user to allow access to samba shares. Sometimes I like to share directories with the foreign AD world and sometimes I want to keep the directories inside the unix realm. For example a

On 14-05-2023 21:21, Rowland Penny via samba wrote: > > > On 14/05/2023 17:29, Michael Tokarev via samba wrote: >> Hi! >> >> We faced another issue with not having samba (ad-dc) users in local >> /etc/password: >> this way, we can't easily have services run as users this way, since >> winbindd is >> started later than most services are (and

On 14/05/2023 21:05, Kees van Vloten via samba wrote: > > On 14-05-2023 21:58, Rowland Penny via samba wrote: >> >> >> On 14/05/2023 20:47, Kees van Vloten via samba wrote: >>> >>> On 14-05-2023 21:39, Rowland Penny via samba wrote: >>>> >>>> >>>> On 14/05/2023 20:32, Kees van Vloten via samba wrote: >>>>

On 14/05/2023 17:29, Michael Tokarev via samba wrote: > Hi! > > We faced another issue with not having samba (ad-dc) users in local > /etc/password: > this way, we can't easily have services run as users this way, since > winbindd is > started later than most services are (and it requires working network). > Also, > user-defined cron @reboot jobs aren't being

Hi! We faced another issue with not having samba (ad-dc) users in local /etc/password: this way, we can't easily have services run as users this way, since winbindd is started later than most services are (and it requires working network). Also, user-defined cron @reboot jobs aren't being run, for the same reason: cron is stared before winbindd on most systems. This is quite difficult to

Mandi! L.P.H. van Belle via samba In chel di` si favelave... > Full qouta search list : > https://bugzilla.samba.org/buglist.cgi?quicksearch=quota&list_id=25312 I don't think it's a samba bug! Simply i'm pointing out that disabling 'winbind enum' can lead to some 'glitches', mostnotably 'getent passwd' return no domin users (by design) and

I have a samba 3.0.14 server attached to a 2003 ADS server. (verified with: wbinfo -u/-g, getent passwd/group, net ads testjoin) And i can attach to the Samba server using an XP workstation's MMC, but when i attempt to change ACL's (share perms or security tab) i get a warning window popup stating, "Changes cannot be saved. Access is denied" I am logged into the AD/DC as

Hi there, I have a Samba installation acting as a Domain Member with a disk share (the partiton is mounted with acl and user_xattr options). I am not using winbind, because I want the domain users to be mapped to Unix users. Everything works right, excepting the users in the Windows Explorer security tab. I will try to explain the situation with an example. I have username map, that maps

I'm setting up a linux mashine with samba for filesharing to windowsclients. I use samba 3 and Linux rh9 and swat. We are just a small group of trusted people. I need to create a folder with rights for any windowsuser in the workgroup to: -connect to and add subfolders and files. -read all the subfolders and files. -change in subfolders and files. Basicly we will store the economysystem,

Hi Jerry et al, the parsing of the 'username map' file seems to be broken in 3.0.5pre1 and a few earlier releases. The '!' at the beginning of a line is ignored. Something like !lp = lp !chbeyer = chbeyer !guest = guest nobody = * doesn't work anymore :-( from the man page: [ snip ] If any line begins with an '!' then the processing will stop

I have a (mbox/IMAP) directory under my mail directory with these permissions: drwxrws--- 4 tlhackque mail 4096 Dec 1 10:34 Vendors/ It contains a subdirectory: -rw-rw---- 1 thlackque mail 84805345 Dec 1 10:34 Vendors/AVendor If I try to rename the AVendor folder (client is Thunderbird 17.0), I get this error: Unable to rename across conflicting directory permisssions If I chmod g-s

Hi list, I have a (naive?) question about samba local users. My system: CentOS 6.6 w/Samba 3.6, connected to an AD Domain through Winbind. When creating a local user, I always first create a Unix user with passwd and then I use smbpasswd -a <unixuser> to establish the mapping between the tdbsam database and the local /etc/passwd file. I wonder if, using the tdbsam in conjunction with

/etc/samba/user_and_group_map.txt contains Windows username/group to linux username/group mappings. In our setup, all users exist in ldap, as do the directory groups, but the linux user and group information (namely uid/gid) do not. This has been setup such that the users connect to samba as the windows username (ex. PRODUCTION+user1) for an authroized group (PRODUCTION+group1), but the files

That's good, but i believe that the "allow trusted domains" must be set to "No" when using idmap_rid backend. See: http://us5.samba.org/samba/docs/man/Samba-HOWTO-Collection/ idmapper.html#id2587685 On Sep 19, 2005, at 10:41 AM, stefanke@micodat.com wrote: > I have fixed my problem. I do not have configured a range for the > BUILTIN domain! So the following