similar to: home shares and thunderbird profiles

On 10/12/2016 1:34 PM, Mark Nienberg via samba wrote: > Well, the easy fix is to add this to the share definition: > > admin users = "@STA\domain admins" > > The wiki implies that this should not be necessary, so I don't know if the > wiki is wrong or if I failed to follow it correctly. This was my first > share using Windows ACLS and it was an interesting

On Fri, Oct 7, 2016 at 12:38 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > have you given Domain Admins the required rights ? > > net rpc rights grant DOMAIN\\"Domain Admins" > SeDiskOperatorPrivilege -UAdministrator > Yes. I followed this wiki example: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs Here is some output: [nienberg at

On 10/12/2016 7:32 PM, Mark Nienberg wrote: > Yes, it looks like this: > > https://wiki.samba.org/index.php/Implementing_roaming_profiles#Profile_share_using_Windows_ACLs > > but as I say, it works now that I have added the admin users, so I am > satisfied for now. > > On Wed, Oct 12, 2016 at 11:31 AM, lingpanda101--- via samba > <samba at lists.samba.org

I'm using procmail as the local delivery agent for Maildir style mailboxes. I discovered that I was able to send mail to other users but was unable to send mail to myself. Examples from verbose procmail log: **** Successful message to another user **** procmail: [24589] Fri Jun 2 15:03:34 2006 procmail: Assigning

I've set up a profiles share according to the wiki article: https://wiki.samba.org/index.php/Implementing_roaming_profiles Users are able to create new roaming profiles and they cannot browse each others' profiles, so all that is working. The only issue is that the group "domain admins" does not have privileges to read or delete user profiles. The acls on the profiles directory

Yes, it looks like this: https://wiki.samba.org/index.php/Implementing_roaming_profiles#Profile_share_using_Windows_ACLs but as I say, it works now that I have added the admin users, so I am satisfied for now. On Wed, Oct 12, 2016 at 11:31 AM, lingpanda101--- via samba < samba at lists.samba.org> wrote: > On 10/12/2016 1:34 PM, Mark Nienberg via samba wrote: > >> Well, the

I'm working on a shell script to create new users on a AD DC. Currently we use ADUC, but that is slow and error-prone. My (untested) command looks like this: samba-tool user create $USERNAME $PASSWORD \ --nis-domain=sta \ --unix-home=/home/${USERNAME} \ --uid-number=${NEXTID} \ --login-shell=/sbin/nologin \ --gid-number=513 \ --use-username-as-cn \ --home-drive=Z \

I'm configuring a new samba 4.1 server with NT4 style domain. I've copied most of the configuration from our working 3.6 server, making some changes as needed for the newer samba version. So far, I have been unable to get roaming profiles to work. It seems like the users cannot write in the profiles directory, but I don't see why not. Here is the relevant part of smb.cond [global]

On Fri, 7 Oct 2016 12:19:09 -0700 Mark Nienberg via samba <samba at lists.samba.org> wrote: > I've set up a profiles share according to the wiki article: > https://wiki.samba.org/index.php/Implementing_roaming_profiles > > Users are able to create new roaming profiles and they cannot browse > each others' profiles, so all that is working. The only issue is that >

On Wed, 19 Apr 2017 16:06:52 -0700 Mark Nienberg via samba <samba at lists.samba.org> wrote: > I'm working on a shell script to create new users on a AD DC. > Currently we use ADUC, but that is slow and error-prone. My > (untested) command looks like this: > > samba-tool user create $USERNAME $PASSWORD \ > --nis-domain=sta \ > --unix-home=/home/${USERNAME} \ >

Dear Mark, It looks like you are trying to do the same as I did. Did you read the thread I had some days ago with subject "How to copy roaming profiles to new server ? ("Group policy client service failed. The logon access is denied")" ? This could help you. Other suggestions : Not sure if [profiles.V2] is still required but maybe you should try to add it ? We also

For a new file server that doesn't really do much other than run samba, is there any advantage to quad core CPUs vs dual core? Say the two options are equivalent in price. Thanks, Mark

I've decided to modernize my samba installation by switching to storing dos attributes as extended attributes on the linux file sytem. It would be nice to convert the dos attributes that are currently "mapped" into the new extended attributes. I found this page on the samba wiki: http://wiki.samba.org/index.php/Migration_Tools but the link to the perl script is dead and the

I'm using a tdbsam database with Samba 3.0.11 on a machine that's getting a little long in the tooth. I'd like to move the whole deal to a new machine without any reconfiguring on the clients - I'm happy with a little downtime - out of office hours the system is hardly used anyway. I'd like to upgrade to 3.0.21c at the same time. I'm thinking: 1. backup domain data on

I upgraded a domain member server from 4.5.5 to 4.6.2. After some initial tests, where everything seemed to be working fine, I upgraded the OS from CentOS 7.3 to 7.4. Now I have intermittent problems with domain users trying to log in to the member server over ssh. After a bunch of troubleshooting I determined that winbind sometimes returns the user home directory and shell incorrectly and

Using Thunderbird 1.5.0.4 against dovecot beta9: If a user has Thunderbird configured to move deleted messages into a Trash folder, then the user cannot delete folders in a public namespace. There is no problem deleting messages. Thunderbird says: "The current command did not succeed. The mail server responded: Can't rename mailbox to another storage type." All mailboxes

This minor problem still exists in the current version. http://www.dovecot.org/list/dovecot/2006-December/018251.html It's my own fault, I kept meaning to test one of the latest versions before the 1.0 release and never got around to it. Oh well, just mentioning it so it stays on the list of things to do. 1.0.0 update from RC15 went smoothly here. Thanks, Mark Nienberg

I'm trying to troubleshoot why our workstations have stopped dynamically registering their ip addresses in our AD using bind_dlz setup. It worked for a couple of months and now does not. I realized I have a basic question about how it is supposed to work. Do the workstations (after getting a dynamic address from the dhcpd server) contact the AD DC directly with the information? Or does dhcpd

On Mon, Oct 17, 2016 at 10:24 AM, Mark Nienberg < mnlists at tippingstructural.com> wrote: > > On Mon, Oct 10, 2016 at 10:18 AM, Trenta sis via samba < > samba at lists.samba.org> wrote: > >> We have detected that machines with dhcp (It was configured as is >> described >> in samba wiki dhcp and samba 4) are updating correclty and any message >>

Sorry I should have said in my original post, this server is a NT4 style domain server. Looking in /var/log/samba I see log files with the machine names in the file names, so samba definitely knows the machine names. On Thu, Dec 18, 2014 at 1:17 PM, Ricky Nance <ricky.nance at gmail.com> wrote: > > Mark, I think (and I may be wrong here, so if a dev sees this correct me) >