similar to: Access from an AD group

Hi list, I have managed to grant a specific user access to a sub-folder (sub-level 3 from the share's entry point, I think) on a Samba 4 share he/she is not allowed and not able to access in total/general. I tried 2 different ways with one of them working. I'd like to discuss why that is. For the sake of an example, let's say the share is for teaching material (exam templates,

All, On my ubuntu linux machine here, I already have samba set up and configured with winbind to perform authentication against the local windows domain controller. Thankfully that part is all working fine - that was supposed to be the hard part. The issue I have now is: I need to grant members of a certain AD group access to share (this was supposed to be easy, but is not working) sanity check

Hello, I am striving to give out globally to our developers a way to debug their C++ applications, but I do not want to give them Admin rights on the individual workstations. I thought I found the light when reading on MSDN that to debug users need to be members of the "Debugger Users" group (according to VS.Net). This group seems to be created with a random SID when installing

On Fri, May 27, 2016 at 10:23 AM, Rowland penny <rpenny at samba.org> wrote: > On 27/05/16 17:11, Jeff Sadowski wrote: > >> https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD >> helped me find that I needed to add >> >> options { >> [...] >> tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; >>

Dear R-ers, In my question there are no statistics involved - it's all about data manipulation in R. I am trying to write a code that should replace what's currently being done in SAS and SPSS. Or, at least, I am trying to show to my colleagues R is not much worse than SAS/SPSS for the task at hand. I've written a code that works but it's too slow. Probably because it's

I had left my config alone for now and dhcp still writes to DOMAIN1.SUBDOMAIN.TLD. But samba has been complaining about not being able to write to bind in its zone. [2016/05/27 07:30:06.738434, 0] ../source4/dsdb/dns/dns_update.c:295(dnsupdate_nameupdate_done) ../source4/dsdb/dns/dns_update.c:295: Failed DNS update - NT_STATUS_UNSUCCESSFUL If you are right about it using kerberos I think I am

https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD helped me find that I needed to add options { [...] tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; [...] }; That seems to have fixed my errors with DNS On Fri, May 27, 2016 at 9:26 AM, Rowland penny <rpenny at samba.org> wrote: > On 27/05/16 14:37, Jeff Sadowski wrote: >

So I had dhcp, radvd and bind working together nicely and now I threw in a wrench of setting up an AD DC I want to change my dhcp server setting to put client's into the new AD Domain but am a little hesitant as it is all working so nicely with DDNS I'm starting to think all I need to do is edit just my dhcpd.conf and change occurrences of DOMAIN1.SUBDOMAIN.TLD to

I am having a problem getting Samba to use the linux group membership when following a symlink. On the Linux side, I have a soft link from the user's home directory to the shared directory. ln -s /home/shared/testgroup testshare In the smb.conf I have: [homes] comment = Home Directories browseable = no writable = yes valid users = %S force create mode = 0660 delete

I'm just finished FreeBSD/AD integration via Kerberos/LDAP and now I can manage unix users/groups from AD. I want to grant access to IMAP based on user membership in certain group. Is it possible? Can you give me some hints? Thanks in advance! -- ? ?????????, ?????? ????? ??? "???????" : ?????????? ??, WEB-?????????? http://www.elantech.ru +7 (495) 589 68 81 +7 (926) 575 22 11

Samba 2.2.2 on Solaris 7/SPARC. Windows 2000 SP2 domain controller (native mode). Joined samba to domain as per htmldocs/DOMAIN_MEMBER.html. [global] workgroup = DOM security = domain password server = charon However, connecting to shares as non-guest fails due to authentication problems (below). As htmldocs/DOMAIN_MEMBER.html indicates this does work, is there some other magic that needs

Hi, I have a Microsoft application (SCCM) which I need to grant access to a samba share, however the service which reads the files can only authenticate using the computer account, there is option to configure it to use a domain account. Is there any way to grant a computer account access to a share? On windows I can simply add computer$ to the permissions but this doesn't seem to be

Hi Daniel, On Fri, Dec 30, 2016 at 10:55 PM, Daniel Berlin <dberlin at dberlin.org> wrote: >> Right, but we are talking about "when, in the intermediate state, can i >> transform an undef to a different value". >> >> Remember you can only go down the lattice. So you can't make undef >> constant, and then discover it's wrong, and go back up :)

Hi, I'm trying to upload printer drivers to my jessie samba 4.1.17 print server, but I'm getting: "Failed to add driver. Access denied", and I don't understand why. The domain join is OK (verified with net ads testjoin) and on the DC I have given the SePrintOperatorPrivilege to the Domain Admins group, of which I am a member: root at DC2:~# net rpc rights list

I am testing out Debian Etch, and ran into an issue granting SeMachineAccountPrivilege to an account... which granting that permission had been troublesome in the past. The command I am issuing is: net rpc rights grant LDS-DEMO\\ldsinst SeMachineAccountPrivilege And I try running the command with an account that is a member of the "Domain Admins" group. The command returns: Failed to

Dear All, I am trying to specify the following fixed effects model for lme: y ~ constant1 - beta1*(x - beta2) where y is the response, x is the independent variable, and the operators above are real arithmetic operations of addition, subtraction, and multiplication. I realize that this model is just a reparameterization of y=beta0+beta1*x, but I am using this parameterization because I am

Hi, we want to grant some users the right to change passwords and enable accounts in our samba domain but they should not have admin rights. Windos is using the group Account Operators for this. So we put some users into this group and tried to change some Usersettings with the usermanger. The user has no right to edit any user. I tried to grant a right to this group with net rpc rights but i cant

Hi, i've encountered a problem configuring the smb.conf... i must grant access i a share dir on a hp-ux server (11.11 with official HP samba 3.0.7 depot... maybe patch level to 3.0.14) i've write valid user = @group_name in [share_name] session of smb.conf We have just implemented the integration with the windows 2003 active directory domain for the validation using kerberos protocol...

Hi I'm setting up samba 3 (Debian Wheezy) as a member of a samba 4 domain. wbinfo -u and wbinfo -g are working getent passwd -s winbind is working getent group -s winbind is NOT working However, getent group domain\ users is working and I cam switch to a domain user with the command su Here is the output of getent with domain users root at member-01:~# getent group domain\ users domain

Hello, I built Samba 4.5.4 on a FreeBSD 11.0 machine, and I’m trying to set up an AD DC with a file share. So I did this: - enabled ACLs on my UFS2 filesystem (before compilation) - successfully provisioned (rfc2307, internal DNS) - tested local shares, DNS, Kerberos - adjusted NTPd as suggested in Wiki - added this to the global section of smb.conf: template shell = /usr/sbin/nologin template