similar to: Grant only one AD group to samba share ?

Hi, I got samba 2.0.30b running on a Sparc machine with Solaris 10. I installed Kerberos 1.4.2 Openldap stable version 20051018 To compile Samba 2.0.30b with ADS Looks like Kerberos works kinit Administrator@MYDOMAIN.COM <mailto:Administrator@MYDOMAIN.COM> ==> works klist ==> shows ticket I added the server to the domain net join -U Administrator Joined

Em seg., 13 de jul. de 2020 ?s 09:36, Rowland penny via samba < samba at lists.samba.org> escreveu: > On 13/07/2020 13:13, Douglas G. Oechsler via samba wrote: > > Hello! > > > > I am trying to do the command: > > *net rpc rights grant "SAMDOM\Unix Admins" SeDiskOperatorPrivilege -U > > "SAMDOM\administrator"* > > *could not connect

Yes: # getent group GROUP group:x:17573: # getent group group2 group2:x:11010: # getent group GROUP3 group3:x:21178: # wbinfo --group-info GROUP group:x:17573: # wbinfo -n GROUP S-1-5-21-948789634-15155995-928725530-7573 SID_DOM_GROUP (2)

Hello! Ok! I switch the IP inside Member AD > 127.0.0.1 localhost *> 10.1.1.16 * E-PLANO.ad.mydomain.br e-plano Only to clarify 10.1.1.16 - AD Member - File server 10.1.1.21 - Only AD-DC But, sorry! Follow the wiki https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs The command: # net rpc rights grant "SAMDOM\Unix Admins" SeDiskOperatorPrivilege -U

On 15/07/2020 14:27, Douglas G. Oechsler via samba wrote: > Hello! > > I really do not know what to do. Still in error. I did step by step ad-dc > and AD Member file server. > Any other idea please? > > Error: > net rpc rights grant "MYDOMAIN\Unix Admins" SeDiskOperatorPrivilege -U > "MYDOMAIN\Administrator" > Enter MYDOMAIN\Administrator's

What Rowland asked and try this. kinit administrator net rpc rights list -k -S $(hostname -f) Then remove the -S part again try again. What do you seen then. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland penny via samba > Verzonden: woensdag 15 juli 2020 15:54 > Aan: samba at lists.samba.org > Onderwerp: Re:

On Mon, Jul 13, 2020 at 1:26 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 13/07/2020 18:18, Douglas G. Oechsler wrote: > > > > Hello! > > > > Ok! I switch the IP inside Member AD > > > 127.0.0.1 localhost > > *> 10.1.1.16 * E-PLANO.ad.mydomain.br <http://E-PLANO.ad.mydomain.br> > > e-plano > > > >

On Mon, Jul 13, 2020 at 2:04 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 13/07/2020 18:50, Andrew Walker wrote: > > > > > > On Mon, Jul 13, 2020 at 1:26 PM Rowland penny via samba > > <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: > > > > On 13/07/2020 18:18, Douglas G. Oechsler wrote: >

Ok, im bit confused, sorry,. Ehen i look that the below output, then i see there are multiple things suspecting to go wrong here. ? For example this is a mismatch..? especialy hostname -i & -I? these should be the same or -I should show both. ? Now, if this is the member i would have expected something like this. /etc/hosts 127.0.0.1 localhost 10.1.1.16?????? E-PLANO.ad.mydomain.br

Hello Friends! I start from zero again to configure ad-dc and ad member file server. In ad-dc way seems all working well In *ad member file server *maybe I did wrong configuration. Checking now, I add symbolic link of *libnss_winbind*. But, symbolic link it is only for Samba compiled. I did not compile samba, I use the samba package from distro. Can be this affecting the command: *net rpc

Hi there I've just upgraded to 3.2.2 and it still looks like nested group support isn't finished? e.g. if I have "domain1/user1" in group "domain2/group1" and that in turn is in "domain3/group2" (i.e. domain1/user1 is in domain3/group2), then "getent group domain3/group2" should return domain1/user1 - and yet it doesn't. "winbind enum

Hello! I really do not know what to do. Still in error. I did step by step ad-dc and AD Member file server. Any other idea please? username map - check Command from AD Member: Error: net rpc rights grant "MYDOMAIN\Unix Admins" SeDiskOperatorPrivilege -U "MYDOMAIN\Administrator" Enter MYDOMAIN\Administrator's password: Could not connect to server 127.0.0.1 testparm

i'm not sure how to create different logon scripts for different users. right now i have one logon script called 'logon.bat' that maps all users to a server share and syncs the time with the server. i need to be able to map different users to different server shares. not all users should be mapped to all server shares. these should be automatic mappings. for example: user1 should

Hi, I read the Wiki about dovecot-shared a few times but it is not 100% clear to me (at least for 1.2). First, if I want shared keywords I *must* have a dovecot-shared. In this case, the permissions are not taken any longer from the parent folder (what is exactly this parent folder?) but from the dovecot-shared file. So in some sense dovecot-shared is always required (since everyone would

Hello While searching the archives and googling for : -login script to map drives according to group membership I saw lots of complicated solutions (on-the-fly scripts, group directories) etc. but the following works very well for me: I downloade dthe ifmember.exe from the microsoft website, and stuck it in the netlogon directory (not the scripts directory)

On 28/01/2023 00:07, E R via samba wrote: > I am working on replacing an undocumented Samba server with one I have > setup after very helpful wiki. I am just having an issue with using an > Active Directory security group with the setting "valid users" to limit > access to the share. I would like to use an existing security group on the > Windows side to control access

On 13/07/2020 18:50, Andrew Walker wrote: > > > On Mon, Jul 13, 2020 at 1:26 PM Rowland penny via samba > <samba at lists.samba.org <mailto:samba at lists.samba.org>> wrote: > > On 13/07/2020 18:18, Douglas G. Oechsler wrote: > > > > Hello! > > > > Ok! I switch the IP inside Member AD > > > 127.0.0.1 localhost

Hello Em qua., 15 de jul. de 2020 ?s 11:54, L.P.H. van Belle via samba < samba at lists.samba.org> escreveu: > What Rowland asked and try this. > > ohhh, soryy kinit administrator > From: ad-dc: kinit administrator Password for administrator at AD.PREFPRUDE.BR: > net rpc rights list -k -S $(hostname -f) > > from AD member: # net rpc rights list -k -S $(hostname -f)

Hello! > net rpc rights grant "MYDOMAIN\Unix Admins" SeDiskOperatorPrivilege -U > > "MYDOMAIN\Administrator" > > Enter MYDOMAIN\Administrator's password: > > Could not connect to server 127.0.0.1 > > > Not sure where to go from here, if I run the command I get this: > > pi at raspberrypi:~/tests $ net rpc rights grant "SAMDOM\Unix

I am working on replacing an undocumented Samba server with one I have setup after very helpful wiki. I am just having an issue with using an Active Directory security group with the setting "valid users" to limit access to the share. I would like to use an existing security group on the Windows side to control access to the share, if possible. Server 2012 R2 forest and OS on Windows