similar to: Two Permissions Issues: null session shares and group membership

Displaying 20 results from an estimated 2000 matches similar to: "Two Permissions Issues: null session shares and group membership"

2017 Nov 06
0
ctdb vacuum timeouts and record locks
On Thu, 2 Nov 2017 12:17:56 -0700, Computerisms Corporation via samba <samba at lists.samba.org> wrote: > hm, I stand correct on the problem solved statement below. Ip addresses > are simply not cooperating on the 2nd node. > > root at vault1:~# ctdb ip > Public IPs on node 0 > 192.168.120.90 0 > 192.168.120.91 0 > 192.168.120.92 0 > 192.168.120.93 0 > >
2007 May 21
1
3.0.25 breaks "username map"?
Hi there I was using "username map" under 3.0.24 so that when I connected from DOM\jhaar under (ADS Win2K3) Windows, it was mapped to my local "jhaar" Unix account - with homedir "/home/jhaar", etc. However, when I upgraded to 3.0.25, I started getting NT_STATUS_LOGON_FAILURE errors - even when just trying to list the shares. This occurred using smbclient as well as
2004 Sep 21
1
SFU Samba Permission Denied
I recently ran into a problem accessing Samba shares from SFU. From SFU's /net directory, I could read from files, move files, create directories and even append to files using >>. But, when I tried to create a file, I received a "Permission Denied" message. After looking at the logs I found something which looked out of place. I am currently using (I tried many different
2017 Nov 02
2
ctdb vacuum timeouts and record locks
hm, I stand correct on the problem solved statement below. Ip addresses are simply not cooperating on the 2nd node. root at vault1:~# ctdb ip Public IPs on node 0 192.168.120.90 0 192.168.120.91 0 192.168.120.92 0 192.168.120.93 0 root at vault2:/service/ctdb/log/main# ctdb ip Public IPs on node 1 192.168.120.90 0 192.168.120.91 0 192.168.120.92 0 192.168.120.93 0 root at
2007 Jun 18
0
(no subject)
Hi list, I'd like to raise the issue discussed in the thread below. I've faced exactly the same problem and came to exactly the same way out - shutdown winbindd and use "force unknown acl user". We use "simple" mapping in the environment - all AD accounts have corresponding NIS accounts (the same name) and the mapping is being done by smbd. The problem here is that
2003 Jun 27
0
Problems with Ad and Winbind
Hi folks, I'm using Samba 3beta running on RH 8.0 and I'd like to authentificate against a Microsoft AD. This all works very well, except to the fact that not ALL AD Users are mapped to my Unixbox! When starting getent passwd, my UnixBox shows just my User from passwd and some of the AD User - not all!! Looking through my User with the command wbinfo -u all AD users are shown correctly!
2003 Jun 27
2
Mapping User from ADS
Hi folks, I'm using Samba 3beta running on RH 8.0 and I'd like to authentificate against a Microsoft AD. This all works very well, except that not all AD User are mapped to my Unixbox! When starting getent passwd, my UnixBox shoiws just my User from passwd and some of the AD User - not all!! Looking through my User with the command wbinfo -u all AD user are shown correctly! Anybody
2009 Aug 03
0
sub-directory permissions and active directory group membership
I'm not sure where the problem is, but security group membership and access to sub-directories is giving me fits. Take 2 unique security groups as example, group1 and group2. If within my top level share there is a directory labeled marketing and a second directory labeled legal, where group1 and group2 are assigned to marketing and legal respectively, then the group1 members should not
2011 Feb 09
1
Questions about dovecot-shared in 1.2 and inherit group membership from parent mailbox
Hi, I read the Wiki about dovecot-shared a few times but it is not 100% clear to me (at least for 1.2). First, if I want shared keywords I *must* have a dovecot-shared. In this case, the permissions are not taken any longer from the parent folder (what is exactly this parent folder?) but from the dovecot-shared file. So in some sense dovecot-shared is always required (since everyone would
2004 Oct 28
0
Permission denied creating Clearcase view on Samba share.
If I try to create a clearcase view on a Windows 2000 Server share then it creates a subdirectory tree. If I try it on a Samba share, it creates the first directory correctly with the right user mapping and permissions and then returns permission denied. I am able to manually create files and directories on the samba share using explorer, so I guess that clearcase must be using some different SMB
2012 Dec 06
0
SID_TO_UID not working
Hello everyone, I use winbind against a Samba DC for nsswich, and on one client it works perfectly (Samba 3.5.15 on all systems). On another client, everything works except SID_TO_UID (i.e. wbinfo -i, -S ... which breaks directory listings, too). I've now tried to narrow down the problem in a level 10 log, but I need some help interpreting. In log.winbindd, I see the following when
2003 Sep 23
1
Need for UID 501 ???
hi i'm working with samba3.0rc2 no probs but i have i question concerning id-mapping i authenticate all users with ldap, works but i always need a samba user in ldap, with sid sid S-1-5-21-1042031166-387543594-2118856591-501 if i don't have it, i get an error during logon with winxp, that the domain controller could not be found or i have a non-existent account, which is not correct
2005 Jun 06
1
Problem listing group membership from Windows
I planned using ifmember.exe from Windows 2000 resource kit to map the right drive-mappings to the right shares with logon-scripts. Unfortunately it seems as ifmember simply doesnt report the right groups for the users. Even tho "id user1" shows the right groups; "uid=2082(user1) gid=1002(Group1)roups=1002(Group1),545(Users),1000(Group0)", User is a member of group
2004 Nov 24
0
how to test membership with samba
Hi, i installed samba 3.0.7 with ldap 2.1.30-3 and idealx-tools 0.8.5 on a Debian sarge. Maping home directories for each user works fine. My goal is now to map a network drive for all members of a group. For example : if someone logs in and is member of group1 then he has a drive letter J: maping at /home/group1 I read about ifmember.exe tools from windows NT but it doesn't works. Does
2003 Jan 09
0
Taking ownership of files on NT/2k
Hi all, I have a 2.2.7a member server (on Debian unstable), acting as a file server for a W2k domain (which also has some NT4 clients, ie. mixed mode). I'm also using ACLs. Imagine I have a file on the server with an ownership of DOMAIN+foo (full permission - rwx). I also have a user ACL on that file of DOMAIN+bar, also rwx. This all works fine. I was initially running into a problem
2002 Sep 13
2
sid_to_uid: Domain controller lookup missing
Hi, trying to investigate my xfs-acl problem I think I have found the missing part: In smbd/uid.c the function "sid_to_uid" resolves SIDs to unix user names. This is done as follows: - First the domain part of the SID is compared to the local domain (if the SID belongs to the samba server it can be resolved locally) - In any other cases winbindd is asked This works well if the
2008 Jun 09
1
sid_to_uid/public share problem
I've got a public share that any user is supposed to be able to access. But no matter who I try to connect as, I get the dreaded: "NT_STATUS_NO_SUCH_USER". Important info: Samba version: 3.0.28a, OS: Kubuntu 8.04 Looking at the logs, I think the problem is here: auth/auth_util.c:create_token_from_username(1116) sid_to_uid for pcguest
2004 Sep 22
1
idmap_ad: sid to uid conversion fails
I have two boxes on which I am trying to get idmap_ad (from xad_oss_plugins) to provide uid/gid mapping, and am getting the error: "Could not convert sid <sid of some_user> to uid" The story so far goes like this: Without the line "idmap backend = ad:ldap://<PDC's FQDN>/" in smb.conf, I can successfully do all of: #> wbinfo -S $(wbinfo -n some_user | awk
2007 Sep 26
3
guest not permitted to access share
Hi! I have got the problem with my guest account. I can`t access to the share. The OS is Centos 5 Linux 2.6.18-8.1.10.el5 #1 SMP Version of krb5 is 1.5-29 This is my smb.conf: [global] # server string is the equivalent of the NT Description field netbios name = SERVER # workgroup = NT-Domain-Name or Workgroup-Name workgroup = DOMAIN realm = DOMAIN.NET security = ADS password server
2020 May 14
4
Users loose supplementary groups after a time
All - I seem to be suffering from the common complaint that users loose supplementary group access after a while - in our case it seems to be connections left overnight. Restarting smb fixes it. I haven't been able to determine the cause. From the logs I've been able to determine a bad access looks something like this: AuthZ reports a S-1-5-21- SID: [2020/05/14 09:49:40.474490,