similar to: migrating from Samba 3 PDC to W2008 AD

Hi, I have a case where I only want to restrict access to SMB shares via filesystem permissions (and POSIX ACLs). Therefore, I do not want Samba to verify security in any way at the SMB level. If the filesystem/ACL permissions allow access to the shared directory, so should Samba. If the filesystem does not allow access to the filesystem, Samba should deny as well. I thought I had this

Hi all, our setup is Samba 3.3 in W2K8 domain. It seems samba cache group memberships somewhere and after adding user to a new group it's necessary to relogin for that user to get new memberships. Is it possible to eliminate that nasty procedure? Thanks. -- Vladimir Vassiliev

Hi All, I was able to get 'winbind' configured on my Solaris-9 system and authenticate Windows domain users, but I have three problems: Server OS; Solaris 9, MU2 SAmba version: 2.2.7 (also tried 2.2.8prel , but same problem) Tried 'winbind enum users/groups' both true and false Client OS: Windows XP, WinNT4.0 nsswitch.conf entries: passwd: files

I am having a problem getting Samba to use the linux group membership when following a symlink. On the Linux side, I have a soft link from the user's home directory to the shared directory. ln -s /home/shared/testgroup testshare In the smb.conf I have: [homes] comment = Home Directories browseable = no writable = yes valid users = %S force create mode = 0660 delete

Hello, Is there any way to reliably setup winbind user and group resolution (in either smb.conf or nsswitch.conf) so that domain controller's unavailability doesn't cause slowdown of the whole system? That slowdown applies to every program trying to fetch some user information even when it doesn't need domain users. I have winbind cache time = 1800 in smb.conf but it doesn't

Hi! I created a Samba4 Demo Server to test AD functionality. Basically it's a Debian Wheezy machine with a manually compiled Samba4 (smbstatus -V: Version 4.1.0pre1-GIT-051a1a9) according to https://wiki.samba.org/index.php/Samba4/HOWTO but adjusted the paths to a more debian way. I can Manage the Server with the Windows Domain Utilities, add users, add groups, add Machines and so

Just a short question: How can a W2008 R2 64 bit Server be joined to samba 3.5.8 Domain? ----------------------------------------------- EDV Daniel M?ller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 T?bingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: mueller at tropenklinik.de Internet: www.tropenklinik.de -----------------------------------------------

Hi I have found this switch for seperating profiles in a mixed windows version environment You can also take full advantage of Samba's Variable Substitutions and further separate User's profiles, such as by architecture. Using the directive: * logon path = \\%L\profiles\%U\%a will separate the user's profiles relating to each version of Windows, such as WinXP, WinNT, etc.

El 12/06/15 a les 14:47, joseph-andre Guaragna ha escrit: > official documentation on samba describe this situation: > > https://wiki.samba.org/index.php/Raising_the_functional_levels > Meilleures salutations / Best regards, There's also this issue: https://lists.samba.org/archive/samba/2013-July/174639.html (even if time synchronization seems to work fine). Bye -- Luca

Hi We just installed a W server 2008 server as antivirus server. As this server is heavily underused we created a share to backup files from other servers. This share is easily accessed from XP pro Pc's via \\ipadr\share and giving a user/password name on the W 2008 server. We then try to use it from an open suse 9.3 linux server via smbclient. smbclient //ipadr/share -U user%password

Dear all, could someone explain in short about raising the domain function level to W 2008 R2. I thougt I did provision my samba4 DC as W2008 R2 function level, but my domain level show has an output like??: samba-tool domain level show Domain and forest function level for domain 'DC=tplk,DC=loc' Forest function level: (Windows) 2003 Domain function level: (Windows) 2003 Lowest function

Dear all, My , samba-tool domain level show shows me it is W2003: [root at s4master ~]# samba-tool domain level show Domain and forest function level for domain 'DC=tplk,DC=loc' Forest function level: (Windows) 2003 Domain function level: (Windows) 2003 Lowest function level of a DC: (Windows) 2008 R2 Can I raise without issues to W 2008 R2? Or should I stay with 2003? Greetings

Hi, I am having a "logon home" problem. I have a mixture of Win98 and WinXP machines and regardless which I use to connect to the Samba server, it will try to map the home drive to what I have set the "logon home = " to. This is the line .. "logon home = \\%N\profile.%U" The user is admin This is the error I see in the syslog from a Win98 Machine: lab_thinkpad

I want only to ignore the arp request for alias ip ,at the same time I don't want disable the arp function of the interface ? How do ? thanks! --------------------------------- DO YOU YAHOO!? ÑÅ»¢Ãâ·ÑGÓÊÏ䣭ÖйúµÚÒ»¾øÎÞÀ¬»øÓʼþɧÈų¬´óÓÊÏä From vova at fbsd.ru Fri Jul 1 13:12:10 2005 From: vova at fbsd.ru (Vladimir Grebenschikov) Date: Fri Jul 1 13:12:12 2005 Subject: how to ignore

+nlewycky On Mon, Nov 17, 2014 at 9:36 AM, Volodymyr Kuznetsov <vova.kuznetsov at epfl.ch > wrote: > Hi Kostya, > > On Sat, Nov 15, 2014 at 1:53 PM, Volodymyr Kuznetsov < > vova.kuznetsov at epfl.ch> wrote: > > Do you think moving the pass to lib/Transform/Instrumentation but > > scheduling it during code generation would make sense ? If so, we'll >

Hi, I have a share (testshare) where different unix groups (testgroup1, testgroup2) should have access to. But I want that new files are only created with 660 permissions. Here are the ACL's of testshare: # file: testshare # owner: ralfgro # group: ve user::rwx group::rwx group:testgroup1:rwx group:testgroup2:rwx mask::rwx other::--- default:user::rwx default:group::---

Hi Kostya, >On Wed, Nov 12, 2014 at 2:50 AM, Volodymyr Kuznetsov <vova.kuznetsov at epfl.ch >> wrote: > >> Dear LLVM developers, >> >> We've applied the feedback we received on Phabricator on the SafeStack >> patches, >> > >Did you investigate the possibility of moving the transformation from >codegen to the LLVM level, i.e. the same level

Hello, There is a small document, which (I hope) useful to others samba user to avoid mistakes, wrong path, that i take, to reach my goal. This document is covered by license: xkcd501[12]. 1. Target 2. Situation 2.1. Software versions 2.2. Software setup 3. Data migration 3.1. alternatives 3.1.1. robocopy 3.1.2. xcopy 3.1.3. net 3.1.4. smbfs/cifs 4. Migration 4.1. Start samba 4.2. ACL vs ACL

Hi folks, It seems that the setting acl_xattr:ignore system acls = yes reduces Windows compatibility when defined for a share. In all attempts I have used Windows tools (except editing smb.conf) Assume there is a share, where the files and folders in the share root should at least be readable by anybody having access to the share. For the sake of simplicity the following permissions apply on

Hi, I have two samba domains. On one member of DOMAIN1 I set up a share "intranet" with valid users = +"DOMAIN1+webmaster" +"DOMAIN2+TestGroup" Winbindd is running. When I try to access the share from a DOMAIN2 workstation permission is denied. When I look at the logfile, I see that the server tries to find the group of DOMAIN2 (TestGroup) in ldap of the local