similar to: Samba failed to deny Traverse Folder/Execute File

Hello Louis, In fact, the shares mentioned in my original messages are used in Windows-only. The accounts, however, are used in both Windows and Unix-type environments (we have quite a zoo of OSes in active use); so we actually use the Posix part of accounts for attributes and Kerberos component to authenticate in all non-Windows use. So my primary intent is to make the homes/profiles shares

> OK, the only real problem that I can see is that you have: > > ea support = no > > This turns off the required EA. > Hmmm.... I thought this had resolved the issue, because the group names did update in the ACLs. However, I changed another group name about 20 minutes ago and it still hasn't updated in its associated ACL. I thought perhaps there was some lazy update or

Hai, Now, i did not know you used the DC for the profiles here but yes it looks good. Small comment on point 3 and 4. 3) Its good, you might notice a few more rights there compaired to what i posted, thats because you have your profiles on the DC but the settings are good. 4) yes, the security is ok, i like the higher security setting and try to mimic the windows settings as much as

On Mon, Apr 11, 2016 at 6:10 PM, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > It sounds as though there are files on your servers owned by a UID or GID > (most probably a GID) that is not in /etc/group, and is being looked up and > "reverse resolved" to 'NT AUTHORITY\Authenticated Users', but this somehow > doesn't map back the other way, i.e. from a

> >>>> Run this : getfacl /home/users > >>> getfacl: Removing leading '/' from absolute path names > >>> # file: home/users > >>> # owner: root > >>> # group: A\\domain\040admins > >>> user::rwx > >>> user:root:rwx > >>> user:10512:rwx > >>> group::rwx > >>>

Hi all, Sorry to repost about this same issue once again, but I'm really at a complete loss as to how to solve the problem with ownership being changed after I've set it. I've set ownership as follows... ( set this by chmod -R 0770 HR, as well as chgroup -R HR-Group, I then signed into a Windows PC that was part of the domain, went to computer management as per the WIKI and chose

On 12/03/18 12:56, Rowland Penny via samba wrote: > On Mon, 12 Mar 2018 11:36:47 +0000 > Sebastian Arcus via samba <samba at lists.samba.org> wrote: > >> >> On 12/03/18 11:28, Rowland Penny via samba wrote: >>> On Mon, 12 Mar 2018 11:11:44 +0000 >>> Sebastian Arcus via samba <samba at lists.samba.org> wrote: >>> >>>> I have a

Sorry hehehehe I mean, when access RSAT and add the "Home Folder" of the User, and give a Apply, the folder is automatically created with the permissions below, where the "Domain Users" is already linked: getfacl rs-01 / # File: rs-01 / # Owner: administrator # Group: domain \ 040users user :: rwx user: rs-01: rwx user: administrator: rwx group :: r-x group: domain \

Just a tip. If you create users with RSAT and you also uses unix id's ( UID/GID ) Used with AD backend. The first assign the UID/GID and then apply the home dir folders in RSAT. Only for user home dirs. This can help if you also use ssh to login and you cant enter your own home dir. Per example: Your ACL ( for the user ) > # File: rs-01 / > # Owner: administrator > # Group:

On Thu, 15 Nov 2018 15:54:50 +0000 Jens Kuipers <hitmokyhitter at hotmail.com> wrote: > cat /etc/samba/smb.conf > > # Global parameters > [global] > workgroup = LDB-BEHEER > realm = LDB-BEHEER.NL > netbios name = AD > server role = active directory domain controller > idmap_ldb:use rfc2307 = yes > > dns forwarder = 8.8.8.8 > allow dns

Hi the list, I have updated to 4.8.0 after using 4.7.3 root at samba:~# /usr/local/samba/sbin/samba -V Version 4.8.0 I compiled from source with the following options : ./configure --enable-debug --enable-selftest Samba run apparently normaly, but when i try to edit permission via windows, explorer.exe crashes I dont get anything relevant from samba's log. But I get an error from windows

I have a Samba AD running Samba 4.7.5. Everything was working fine, when, seemingly out of the blue, the users started to be denied access to all shares. If I try from a Windows 7 or Windows 10 machine, logged in as a user in "Domain Uses", I get: "Windows cannot access \\server-name\share_name. You do not have permission to access \\server-name\share_name" If I use

Hello list, I'm having a "fun" time trying to figure out my ACL problems. I've gone through the default ACL settings and the mask settings on the filesystem to ensure that the user I am using does indeed have access to the filesystem that is being shared out. My issue is that I am unable to overwrite a file that already exists with another file of the same name. I get the

> >> Run this : getfacl /home/users > > getfacl: Removing leading '/' from absolute path names > > # file: home/users > > # owner: root > > # group: A\\domain\040admins > > user::rwx > > user:root:rwx > > user:10512:rwx > > group::rwx > > group:A\\domain\040admins:rwx > > mask::rwx > > other::--- > >

On Mon, 12 Mar 2018 11:11:44 +0000 Sebastian Arcus via samba <samba at lists.samba.org> wrote: > I have a Samba AD running Samba 4.7.5. Everything was working fine, > when, seemingly out of the blue, the users started to be denied > access to all shares. If I try from a Windows 7 or Windows 10 > machine, logged in as a user in "Domain Uses", I get: > >

On Mon, 12 Mar 2018 11:36:47 +0000 Sebastian Arcus via samba <samba at lists.samba.org> wrote: > > On 12/03/18 11:28, Rowland Penny via samba wrote: > > On Mon, 12 Mar 2018 11:11:44 +0000 > > Sebastian Arcus via samba <samba at lists.samba.org> wrote: > > > >> I have a Samba AD running Samba 4.7.5. Everything was working fine, > >> when,

Hi Carlos, Your problem is userA can access home directory of userB? If your issue is only that, then you are right, this issue comes from the fact all AD users are, by default, in "Domain users" and your Home directories grant "Domain Users" "r-x" which means "read and enter" when applied to directory. Simply remove "Domain Users" from these

On 12/03/18 11:28, Rowland Penny via samba wrote: > On Mon, 12 Mar 2018 11:11:44 +0000 > Sebastian Arcus via samba <samba at lists.samba.org> wrote: > >> I have a Samba AD running Samba 4.7.5. Everything was working fine, >> when, seemingly out of the blue, the users started to be denied >> access to all shares. If I try from a Windows 7 or Windows 10 >>

Hello, I'm really stumped and would greatly appreciate some help. *Situation* I have a couple windows 10 pro hosts that I have joined to a Samba4 AD domain. I have created 3 users in the domain, one that is a member of Domain Admins and two that are only members of the Domain Users group. I have two samba shares (details below) on a separate samba file server. The share permissions were

Hey Samba, For the last year I've been trying to set up a Samba Active Directory with a share which will hold the profiles of users so that Windows users can be implemented with the roaming profiles functionality. I started out with an Ubuntu Server 16.04 LTS on which I configured routing, forwarding and dhcp. After which I followed the Setting up Samba as an Active Directory Domain