similar to: winbind + nested groups in ssh = permission denied

stock samba 3.0.21a works just fine, I generated an rpm from samba source, and everything works just fine! the enterprisesamba packages are what is broken. -----Original Message----- From: samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org [mailto:samba-bounces+bsmoke=lapo.state.ar.us@lists.samba.org] On Behalf Of Barry Smoke Sent: Tuesday, January 10, 2006 2:38 PM To: samba@lists.samba.org

I see a ton of past archive mails for pam_mkhomedir.so, but I don't see anyone else with my problem. Do others just not care that a bunch of extra folders with the machine names are getting created, or is it not happening for anyone else, and I have just done something wrong? RHEL 3.04 samba 2.0.14a-1 Barry Smoke Network Administrator AR Division of Leg. Audit -----Original

I have tried changing the valid users on the [homes] share to %D+%u, instead of leaving the default, thinking it might be trying %S, which might have been causing the machine name folders to be created, that was not it, I tried changing the location of the pam_mkhomedir.so session string. I moved it to /etc/pam.d/samba, I moved it to the last string in system-auth, nothing has made a

Well, it looks like we are stuck... I can't figure out what to do next. ads_connect: Program lacks support for encryption type here's the whole story: We've been using winbind successfully for over a year now, rhel3 variants(scientific linux 3), some run rhel3's default samba, others use the packages from http://enterprisesamba.com/ we started out using the NT4 compatability

Hello! Please, help! I have trouble with Dovecot's Deliver utility. I don't know how to avoid errors. Let me know what additional related information do you need? 1) Its call in Exim's configure: ========================================== local_delivery_spam_transport: driver = pipe command = /usr/local/libexec/dovecot/deliver -c

I'm trying to setup here at my school board an ADS domain member to Windows 2000 Server(s). I've setup Samba, configured nsswitch and /etc/krb5.conf. I'll be including them on this post. When I run << net join ADS -U<administrative_user>, I'm prompted for the password and I get this error message: [2006/01/12 15:21:35, 0] utils/net_ads.c:ads_startup(191)

For the record, with the support of TranquilIT we added a new server for DC an "demoted" this one to fileserver only and it's working like a charm. So I suppose the "single server" solution is not viable anyomre, or at least it doesn't seem so. -- Lorenzo Milesi - lorenzo.milesi at yetopen.it YetOpen S.r.l. - https://www.yetopen.it/ Via Salerno 18 - 23900 Lecco -

I never said the team does recommend it, still I don't see the purpose of saying "it's possible" when can be "fraught with problems". Maybe the wiki [1] should be more explicit on this, despite discouraging and suggesting better options it doesn't say it's highly problematic, it's still offered as an option.

> I would expect to only see that on a machine with the MIT kdc installed, > try this > > apt-get -s remove krb5-kdc > > This will prove one way or other if it is installed and what it wants to > remove along with it, it will not remove anything. Apparently nothing requires it: The following packages were automatically installed and are no longer required:

Hi, I tried again with some other options. After finding http://www.dovecot.org/list/dovecot/2013-November/093793.html I deleted every ACL from the directory Maildir and I also assigned the group "mail" to it, recursively: OmniOS-Xeon:/tank/home/olaf/Maildir/.Generiche $ ls -lV total 903 drwxrwxrwx 2 olaf mail 2 Sep 27 23:47 cur

> You missed that using a DC as a fileserver isn't recommended. It was between the lines of "I followed all the guidelines for doing things correctly in this specific situation" :) > From reading the samba log, it looks like Samba logons are not working, > but ldap connections are. This means Win clients are logging in via LDAP? Can this be related to the inaccessible

About the root problem of the thread, it seems a permission problem, but again I need some help on how to investigate further. I've just been reported a share wasn't accessible, I checked on another client and I was able to enter the folder but NOT to see the content, looked like empty. I have "hide unreadable" enabled, and while entering the share several times I noticed the

> Not sure, but that is the way it looks, just a thought, are you using > sssd ? no, not even installed > Just like a normal share, '[homes]' is a special share that doesn't use > 'path. There used to be something on the wiki about using '[home]' on a > DC, I didn't know it had gone until you mentioned it ;-) So if I use [home] it would be a normal

I have the following formula for a linear model: z <- lm(y~x + factor(a) + factor(b), data=NT2010) where a (groups) and b (Sub-groups) are categorical variables (factors), x is a continuous covariate, and y the response variable. Since b is nested within a, the formula can also be written as: z <- lm(y~x + factor(a) + factor(a)/factor(b), data=NT2010) and the same output is achieved

I'm having a weird situation with a freshly installed Samba v4.12.1 compiled from source. This is a single server with DC and fileserver, I followed all the guidelines for doing things correctly in this specific situation and I hope I haven't missed anything. The server works correctly as expected, I'm managing all the permissions from Windows. Unfortunately users occasionally

Hi, I have rsync set up to sync between two hard drives on the same Windows PC. I have a concern the results of the following rsync command: "c:\cygwin\bin\rsync.exe" --log-file=080725.pcsync.log --recursive --archive --modify-window=2 --update --backup /cygdrive/f/images/ /cygdrive/i/images/ This results in: rsync: failed to set permissions on "/cygdrive/i/images/.":

I have a standalone samba server for mailbackup purpose from Lotes Notes in a AD 2003 domain. I've created one share which holds the mailbackup-folders of my users. I've set the permissions on each folder so, that only users have access to their own mailbackup folder. drwxrwx- - - user1.root usersmailbackupfolder. I can write a backup.nsf to the usersmailbackuop folder. The permissions

> What OS is this ? Ubuntu 18.04.4 > Can you run the attached script on the DC and copy the output into a > post (sanitised if required) I don't see any attachment. -- Lorenzo Milesi - lorenzo.milesi at yetopen.it YetOpen S.r.l. - https://www.yetopen.it/ Via Salerno 18 - 23900 Lecco - ITALY - Tel +39 0341 220 205 - Fax +39 178 6070 222 Think green - Non stampare questa e-mail

> trying again. here's the output. thanks! Config collected --- 2020-05-18-23:08 ----------- Hostname: fileserver DNS Domain: wdc.mydomain.it Realm: WDC.MYDOMAIN.IT FQDN: fileserver.wdc.mydomain.it ipaddress: 10.0.0.3 ----------- This computer is running Ubuntu 18.04.4 LTS x86_64 ----------- running command : ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc

Thanks for the suggestions! > The latter is easiest to deal with, replace it with a CNAME in the AD dns. I did the CNAME, but when I remove the netbios alias I can see the shares list when accessing \\aliasname, but then I'm not allowed into any of them. I tried rebooting the client but same result, and I also don't see anything in the logs :( > The first will require a bit more