similar to: Restricting access to [homes]

Hi everone. Ubuntu 12.04 v3.6 clients with winbind joined to 12.04 Samba4 DC Clients: smb.conf [global] realm = polop.site workgroup = POLOP security = ADS wide links = Yes unix extensions = No template shell = /bin/bash winbind enum users = Yes winbind enum groups = Yes idmap uid = 300000-400000 idmap gid = 20000-30000 /etc/nsswitch.conf passwd: compat winbind group: compat

Some empirical testing shows that if I am using the idmap_ad module the template homedir parameter in smb.conf is ignored. I would just like to determine if this is the correct behaviour or if I am doing something wrong. JAB. -- Jonathan A. Buzzard Email: jonathan (at) buzzard.me.uk Fife, United Kingdom.

Hello, We have a Red Hat 5.3 SAMBA 3.0.33-3.7 Server that shares a few directories to 4 other servers. The other servers are Red Hat 5.3 and one Solaris 10 server. I configured SAMBA to do the following for each share; Force User: User1 Force Group: Group1 Create Mask: 02770 Security Mask: 02770 Directory Mask: 02770 Directory Security Mask: 02770 Inherit Permissions: Yes Inherit ACLS: Yes

Hello Marc, Am 24.10.2013 21:00, schrieb Marc Muehlfeld: > Hello Thoralf, > > Am 24.10.2013 20:32, schrieb "Th. S?ldenwagner": >> is it possible to hide/restrict access to the home drives of our samba >> users when accessing them directly via netbios address? >> >> The server is running at school and there are several pupils who have >> the ability

Hi all, I'm trying to set up a samba (3.6.6, debian wheezy 64bit) member server on a 2008R2 domain. I'd like to be able to specify the uidnumbers users get on here in AD but I'm getting really erratic results. I've tried changing various range options, and as far as I can tell it works sometimes, but not others - don't know why. I have 2 users I've specifically set up,

Hello list, we have two samba servers on two localities with bigger distance between them. On both localities there are organizational staff working. And I am trying to configure homedirectories for all of staff in this way: - all users will have same beginning part of URL path where is their homedir located (i.e. \\files.example.com\loginname) for unification and central acces - but because

Dear list, Setup is: Solaris 11 ZFS + Samba 3.5.10 What is the recommended way nowadays of performing strict permissions mapping between Samba and Windows NT 6.1 ? And a more broader question: is it desirable ? As we know ZFS has native NFSv4 ACL's and this would mean that permissions applied on Windows side should have an exact match on the ZFS side. Is it acl_xattr module still needed ?

Hello All, I'm trying to set up linux ssh/shell authentication on a CentOS_6.2 server running smbd version 3.5.10-114 using winbind/smb/pam. We've done this successfully using the tdb backend but wanted users to get the same UID/GID on every machine. Switched to rid for the backend but users still got a foreign number for UID and their default group was always Domain Users. So I'm

Hi, I'm trying to convert an old system on Solaris 10 that uses the smbpasswd file authentication method to a system that authenticates against Active Directory. I've managed to get winbind working but of course this just allocates UIDs as it sees fit whereas the smbpasswd file method used the UID from the /etc/passwd file. The user codes on the Solaris server match the user

All, I'm in the process of migrating a samba server from Solaris 10 (running 3.0.37) to Solaris 11 Express (running 3.5.5). The system is joined to a Win2k3 Active Directory. Migrating the configuration worked fine, the shares are available and everything mostly works as intended. The problem we're having is with the syntax of authentication requests from Windows client machines. On the

I am using Samba 3.6.6 on Debian Wheezy. I want to be able to change www files on my dev server using my macbook. So I setup samba and made a share for the /var/www directory. I added the users bart & root to samba to connect. And connect using command K and then smb://192.168.2.100 (my samba server). As apache uses www-data as a user and group for the www files I use force user and

Hi All, I have been stuck on this problem for a day or so now and am in need of a bit of help. I am running Samba 3.6.6 with Winbind and all operation and working correctly apart from the UID and GID mapping. There have been a few post on the net regarding this but all the solution listed do not work for me. Here is my smb.conf --------------------------------------------------- [global]

Hello everyone, Samba 3.6.9 on CentOS 6.4. With "security = ads", winbind doesn't authenticate requests that prepend a not-existent domain to the username. Users that have logged into the domain authenticate transparently to squid with NTLM (format is domain\username), but not users that are logged in locally or into another domain with the same username and password (format is

Hi, is it possible, to use DFS and show the correct values of free space? I set up a DFS-share located on filesystem1 (size 50GB) and linked shares of another server to this share (msdfs:<fs>\share): share1: size 110TB share2: size 50TB share3: size 20TB But connecting to the DFS-share, the disk size of this network drive ist 50GB. Unfortunately files larger than 50GB can not be copied

What is supposed to happen to the ownership of files/directories of user in Active Directory on a Samba (3.6.6) share after the user has been removed from Active Directory? I see the userid is set to the uid number but admins on the share (not root) cannot remove directories owned by the user. As a root user I can delete the files or changed ownership. I would expect there is some way to make

Hi, I have a working Samba 4 AD which is used by Windows clients. I also have an LDAP server for use with Linux servers and web applications. What I really need is the Samba 4 AD to be the single maintained authentication database while providing an LDAP compatible server for web applications (and preferably Linux). I've looked at extending the Samba 4 schema, but that doesn't seem

When a file is created with samba 3.5.x or 3.6.x, it is created effective read-only: ~ # getfacl Microsoft\ Word-Dokument\ \(neu\).docx # file: Microsoft\040Word-Dokument\040(neu).docx # owner: root # group: 11816 user::rwx user:11582:rwx #effective:r-- group::rwx #effective:r-- mask::r-- other::--- The ACL-settings for the parent directory are ok: ~ # getfacl . #

Hi - I am working through the migration from samba3+ldap to samba4 ads and discovered some inconsistencies in our data in the process. We have several user/group pairs that have the same SID because somehow uidNumber and gidNumber were set to the same number. Obviously this must be corrected for us to use the migration tool - I am just a little unsure of how best to fix this. My first

Hello All! Can't make Samba use acl and extended user attributes to save DOS file attributes. Please, help me configure properly. My steps on Windows XP: 1 - Open share 2 - Open property of file 1122/22.bmp 3 - Check file attribute: hidden 4 - Click Apply 5 - Click Close 6 - Open property again 7 - Attribute Hidden not checked. Samba dont save attributes!!! getfattr -d

Hello, does this bug still exists: http://web.archiveorange.com/archive/v/IPyW4fzzpEetiWKnJyfJ ? It seems that I have the same problem, although "store dos attributes" is set (Samba 3.6.18; GPFS 3.5.0-11). Here my share definition: [shared] comment = <comment> path = <path> available = yes