similar to: Samba4: fileserver and Posix ACL's

Hi everyone I'm setting up a report writing system for a school. All teachers need rw access to the reports which are in a folder of the same name. Teachers are in a group called teachers and there is a share called reports: [reports] path = /data/reports read only = No create mask = 0770 /data/reports has a Posix ACL: getfacl /data/reports getfacl: Removing leading '/' from

Hi, I am trying to create a build on CircleCi with smaba4 AD. It seems the filesytem doesn't support ACL's, which s3fs requires. I get the folowing error: ?ERROR(<class 'samba.provision.ProvisioningError'>): Provision failed - ProvisioningError: Your filesystem or build does not support posix ACLs, which s3fs requires.? Try the mounting the filesystem with the

When I try to manage samba shares from windows, I cannot reliably get the Security Tab to show up. I have tried many reprovisions, sometimes it works, sometimes not. I cannot figure out what I'm doing wrong. How the domain is provisioned... samba-tool domain provision \ --domain=avails \ --host-name=fs.avails.com \ --host-ip=10.2.2.1 \ --adminpass='not2forget!' \

Hi, I've been working on some systems trying to get kerberized nfsv4 and kerberized web services going on 7. Kerberized nfsv4 was working with 7.0, but with the 7.1 release it stopped working, the key difference between the two setups is that gssproxy wasn't being used with 7.0, but seems to be key with 7.1. The problem I am encountering with Kerberized NFSv4 is that the directory will

Hi all, I am in the process of finding the best way to use Samba4 as an AD under FreeBSD and ZFS. The following is based on own research, google, mail archives, a bit of source code etc. So please correct me if I am wrong. 1. ZFS is using NFSv4 ACLs. 2. NFSv4 ACLs are modelled with NTFS (Windows) ACLs in mind. 3. Samba4 started with a new ntvfs file server but that was abandoned (or

On 21/06/2016 10:22 PM, Mueller wrote: > What about this in your global section > create mask = 770 > force create mode = 770 > directory mask = 770 > force directory mode = 770 > > Greetings > Daniel > Hi Daniel, Thanks for your response. Those settings are already in my smb4.conf Global parameters [global] interfaces =

I have an existing install of Samba4 ( I think beta6 vintage ), which uses ntvfs and bind9. It's only providing AD and Group Policy. I have a seperate file server running 3.6.x. I want to add a server to the domain running the most recent RC. I know they are using internal by default and s3fs for the file shares on sysvol. Can s3fs coexist with ntvfs? Can the internal DNS coexist with

On Thu, 2019-11-14 at 06:19 +0000, Ghassan Elrayah via samba wrote: > Hi, > > I am trying to create a build on CircleCi with smaba4 AD. It seems > the filesytem doesn't support ACL's, which s3fs requires. I get the > folowing error: Can you explain a bit more about what you are doing with CircleCI? This will help me understand how best to advise you. >

On 17/11/16 13:15, Reinald Gfuellner via samba wrote: > I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. > Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should > be used over both protocols. > > With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) > . How can I do the same with Samba 4 ? > > Posix-ACLs set on

I have a kerberized SSHD installed on HOST-1, a login server for the outside world. How can I make it so users are still authenticated via kerberos, even though they haven't yet received a ticket? The main reason for this is that a user who is at home, no vpn, but has an ssh client could then login and be authenticated by kerberos using password authentication, get a ticket, then be allowed

Hi there, I'm having trouble with permissions and ACL's running samba43. I want to be able to set permissions on a folder to an specific user. I'm having a similar issue reported here https://lists.samba.org/archive/samba/2010-July/156965.html However my error message is slightly different: When I set the permission on an specific user by creating a new folder inside the share,

Reading Whatsnew.txt in samba I understand that If I use s3fs, as it is set by default in the provision step, I won't be able to modify GPOs later, right? So I have a couple of questions: - What's the advantage of using s3fs over ntvfs in new installations? - If I'm planning to deploy a new Domain, probably needing to change GPOs later, should I select ntvfs??? Best regards, Felix

I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should be used over both protocols. With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) . How can I do the same with Samba 4 ? Posix-ACLs set on the server with setfacl are recogniced on a windows-client. But every change I do on a

Hi, I am trying to get some integration tests running in CI with a software uses samba4 AD for authentication. So basically I would like spin up a build and provision a samba4 AD with some test users and groups non-interactively and test commits and pull requests against the AD. On 11/14/19 8:16 AM, Andrew Bartlett wrote: > On Thu, 2019-11-14 at 06:19 +0000, Ghassan Elrayah via samba wrote:

>> Hello everyone. >> >> So, I come to you because I have a little problem when setting up my domain controller based on CentOS 6.5 and Samba 4.1.6. >> >> Everything works well, except for one small detail, which in my case blocking me. >> >> I >> would like to automatically generate the home directory of the user >> during the first

Samba4 4.0.5, CentOS 6.4. How does one enable DES enctypes in Samba? I need these to be available for each user when they log in to enable access to a Kerberized NFSv4 export. Steve

Hi Am 09.03.20 um 16:32 schrieb Rowland penny via samba: > On 09/03/2020 14:25, Andreas Hauffe via samba wrote: >> [global] >> ??????? dedicated keytab file = /etc/krb5.keytab >> ??????? kerberos method = secrets and keytab > Why the dedicated keytab ? We have a kerberized NFS4 running on that machine, too. > >> workgroup = ILRW >> ??????? idmap config dom :

On Sat, 7 Jan 2017 13:38:40 +0100 Jules Houantonon <juleshoueto at gmail.com> wrote: > Thank you for your reply. > Yes I mean an AD DC. > > How can I check it please ? > If you are running Bind9 it is easy: cat /usr/local/samba/etc/smb.conf | grep 'server services' will show this: server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd,

Hi, I'm currently attempting to setup a Linux Samba and Kerberized NFS server using a Windows 2008 R2 Domain controller as a KDC and I've run into an issue. Currently I can make Kerberized NFS or Samba fileserving work but not both at the same time. Specifically: The Linux kerberized NFS daemon (rpc.svcgssd) appears to only be able to deal with service tickets up to a certain size.

Hi How about calling s3fs, s4fs? Cheers, Steve