similar to: samba 3.2.5 + ACLs - read/write permission become read only

This is somewhat a reincarnation of a problem I am facing since upgrading to samba 3.5.6 (3.5.8 is identical). I use samba on an ext3 ACL enabled file system. Typically a users access rights are determined by his or her membership in different groups. The access right is therefore defined and granted by/to the group, not the user. These groups then appear in the ACL of directories and files

Hi Samba-Gurus out there! Ive got some strange problem here i already tried to track down searching the net and reading tons of manuals. no luck yet. So now ill give the Mailing list a try. The Situation: ############ We run a virtual (VM) Debian Lenny Server as LDAP (OpenLDAP) and Samba Domaincontroller/Fileserver. The Server also does NFS Exports of the same Volumes to other Debian Etch

Op 06-11-2023 om 14:58 schreef Jonathan Hunter: > Thank you Kees. > > On Mon, 6 Nov 2023 at 09:37, Kees van Vloten via samba > <samba at lists.samba.org> wrote: >> I am currently running at 4.19.2 but I have run 4.18.6 and 4.18.5. I did >> not experience any issues with nested group lookups, which many of the >> filters rely on. > Interestingly, I've now

Thank you Kees. On Mon, 6 Nov 2023 at 09:37, Kees van Vloten via samba <samba at lists.samba.org> wrote: > I am currently running at 4.19.2 but I have run 4.18.6 and 4.18.5. I did > not experience any issues with nested group lookups, which many of the > filters rely on. Interestingly, I've now found that (on my current DCs, running 4.18.5), ldbsearch *does* seem to return the

Sorry for my english. FreeBSD 7.0-STABLE dovecot-1.1.2_1 (from ports with LDAP) AD LDAP ?? Win 2003 SP2 (work via GK) CPU 2xIntel XEON NFS not used LDAP part of dovecot.conf (if you need all file, l'll send it): auth default { mechanisms = plain login passdb ldap { args = /usr/local/etc/dovecot-ldap.conf } userdb ldap { args =

Op 05-11-2023 om 23:25 schreef Jonathan Hunter via samba: > I'm quite confused by this one, as I can't see how this would happen.. > but after upgrading my DCs from 4.11.10 to 4.18.5, LDAP searches don't > seem to work if they use the :1.2.840.113556.1.4.1941: modifier, aka > LDAP_MATCHING_RULE_IN_CHAIN. (Yes, it was a fairly big version jump.. > Yes, I should have

Hai,   > I understand that Samba doesn't support domain renaming, which is why > I'm looking for a way to export the data from one domain and import it > into a new one. Export your user/group data to CSV, its not that hard. https://www.manageengine.com/products/free-windows-active-directory-tools/free-active-directory-csv-generator-tool.html Some things work some

If you come up with a good procedure to do this, please publish what you did. Perhaps add someting to the Samba Wiki. > Hi Louis, > > Thank you. That's most helpful. I now have the relevant data exported > and will set up a test domain to see how the import goes. > > regards, > John > > > On 30/08/16 17:31, L.P.H. van Belle via samba wrote: > > Hai,

I'm quite confused by this one, as I can't see how this would happen.. but after upgrading my DCs from 4.11.10 to 4.18.5, LDAP searches don't seem to work if they use the :1.2.840.113556.1.4.1941: modifier, aka LDAP_MATCHING_RULE_IN_CHAIN. (Yes, it was a fairly big version jump.. Yes, I should have upgraded much earlier.. Yes, I know 4.19.x is out now as well) Here's a search that

Hi, im trying to setup a password policy with samba and openldap. while lockout works perfect on openldap it looks like it does not work with my samba. Ive set "sambaLockoutThreshold" to 3 and "sambaLockoutDuration" to -1 (lockout forever) within the Domain-Object in LDAP. So i expect whenever a windows user does 3 false logon attemps his samba account will be LOCKED

We had to do a few changes in this area (due to security issues) over that large number of releases, it is entirely possible there was a regression. If you have time and patience, could you back up your DC, restore into a subdirectory (on your DC or on a test box) with 4.11.10 from git, and then do a git bisect between that and 4.18.5. You can run the query locally with bin/ldbsearch -H

Thank you Andrew for the quick reply - much appreciated. Yes, I'll get on to this - I am certainly motivated to find out what's happening here. It is likely to take a few days but I'll post my findings. I'll look at setting up git bisect today, it should be possible for me to script it so that it will run by itself as I understand it, as I should be able to check the return value

On Mon, 6 Nov 2023 at 14:32, Kees van Vloten <keesvanvloten at gmail.com> wrote: > > > Op 06-11-2023 om 14:58 schreef Jonathan Hunter: > > Interestingly, I've now found that (on my current DCs, running > > 4.18.5), ldbsearch *does* seem to return the expected result, but the > > same query via ldapsearch does not. > > What if you try to use starttls

Op 06-11-2023 om 15:40 schreef Jonathan Hunter: > On Mon, 6 Nov 2023 at 14:32, Kees van Vloten <keesvanvloten at gmail.com> wrote: >> >> Op 06-11-2023 om 14:58 schreef Jonathan Hunter: >>> Interestingly, I've now found that (on my current DCs, running >>> 4.18.5), ldbsearch *does* seem to return the expected result, but the >>> same query via

On Tue, 13 Nov 2018 at 21:26, Rowland Penny via samba <samba at lists.samba.org> wrote: > > On Tue, 13 Nov 2018 20:55:08 +0000 > Jonathan Hunter via samba <samba at lists.samba.org> wrote: > > > After running the following: > > $ sudo samba-tool domain join mydomain.org DC -U myadmin --site=mysite > > --server=dc3 > > all seems well, until: > >

Hi, After a recent hardware failure where I did not have a working backup, I am trying to re-create one of my DCs (DC1). This is a Samba 4.9.0 environment throughout. I have DC1 (the one that is hopefully being re-joined), but also DC2, DC3 and DC4 which are still present, and these have not experienced issues. After running the following: $ sudo samba-tool domain join mydomain.org DC -U myadmin

On Tue, 13 Nov 2018 20:55:08 +0000 Jonathan Hunter via samba <samba at lists.samba.org> wrote: > Hi, > > After a recent hardware failure where I did not have a working backup, > I am trying to re-create one of my DCs (DC1). This is a Samba 4.9.0 > environment throughout. I have DC1 (the one that is hopefully being > re-joined), but also DC2, DC3 and DC4 which are still

Thanks Rowland for the advice, I have now tried joining a 4.9.2 machine to the domain, targeting the join at a 4.9.2 DC. Same result as below, unfortunately - I think you are probably correct with the bug below (#8929). On Wed, 14 Nov 2018 at 08:34, Jonathan Hunter <jmhunter1 at gmail.com> wrote: [...] > > > $ sudo samba-tool domain join mydomain.org DC -U myadmin --site=mysite

On Tue, 20 Nov 2018 13:17:58 +0000 Jonathan Hunter via samba <samba at lists.samba.org> wrote: > Hi, > > Does anyone have experience of using ldbedit or similar, to remove the > duplicates below? (Is that even the right way for me to go?) Can I > perhaps query something using ldbsearch, to find the duplicates, > before using ldbedit? > > On Sun, 18 Nov 2018 at

Why is the smb.conf Parameter "default devmode" missing in pretty much any samba documentation like man page etc ?? does someone have a good "official " explaination about this parameter ?