similar to: Variables are not expanded in smb.conf when using Samba 4.0.0beta2

On 27/02/15 21:00, Shane Robinson wrote: > Hi Rowland, > > I'm also not an expert, but with the amount of help you provide on the list, > I will defer to you. > > I'd love to know your rational for prefering the "change ownership to > administrator" approach over the "change group to Domain Admins approach". > If it's just gut, that's

Rowland, here is what I found in the ldb. # record 68 dn: CN=S-1-5-32-544 cn: S-1-5-32-544 objectClass: sidMap objectSid: S-1-5-32-544 type: ID_TYPE_BOTH xidNumber: 3000000 distinguishedName: CN=S-1-5-32-544 # record 70 dn: CN=S-1-5-32-549 cn: S-1-5-32-549 objectClass: sidMap objectSid: S-1-5-32-549 type: ID_TYPE_BOTH xidNumber: 3000001 distinguishedName: CN=S-1-5-32-549 # record 73 dn:

I hate to revive this, but before I push my client through an upgrade, I have to be sure my issue is with ACLs not being supported, as suggested. Squeeze does have ACL support. root at dc01:/samba/var/locks# getfacl sysvol # file: sysvol # owner: root # group: 3000000 user::rwx user:root:rwx user:3000000:rwx user:3000001:r-x user:3000002:rwx user:3000003:r-x group::rwx group:3000000:rwx

Good Afternoon Ryan, I had a similar problem to solve and had to put the users in the administration group. It makes a test places the primary group of a User to administrator and test to see if the GPO will work. Regards, Gabriel Franca > Em 02/07/2015, ?(s) 13:26, Rowland Penny <rowlandpenny241155 at gmail.com> escreveu: > > On 02/07/15 16:55, Ryan Ashley wrote: >>

Hello again Rowland, list! Sorry for the delayed response, and top posting. To recap: I'd like to complete the member server wiki so that ACLs can be set from windows without taking undocumented steps. The three ways I've found to do this are: 1) map root to administrator. (LPH VanBelle's script uses this option.) 2) chmod 0775 then chgrp "<DOMAIN>\Domain Admins"

On 30/06/15 17:18, Ryan Ashley wrote: > I hate to revive this, but before I push my client through an upgrade, I > have to be sure my issue is with ACLs not being supported, as suggested. > Squeeze does have ACL support. > > root at dc01:/samba/var/locks# getfacl sysvol > # file: sysvol > # owner: root > # group: 3000000 > user::rwx > user:root:rwx >

On 05/10/15 20:34, James wrote: > Hello, > > I notice if I simply comment out a share or remove entirely. I > receive errors such as theses. Is there a proper protocol to follow when > removing a share? > > process_usershare_file: stat of /var/lib/samba/usershares/myshare > failed. No such file or directory > >

Hello, When attempting to build samba-4.0.0beta2 on Solaris 10 update 9, the following error is produced: [ 530/3371] Compiling lib/tdb/test/external-agent.c ../lib/tdb/test/external-agent.c:7:17: error: err.h: No such file or directory Waf: Leaving directory `/usr/local/src/samba-4.0.0beta2/bin' Build failed: -> task failed (err #1): {task: cc external-agent.c ->

Hi, I have the following problem: Jul 18 14:36:09 mailint1 dovecot: imap(micha): Error: FETCH [] for mailbox INBOX.Sent UID 166 got too little data: 120860 vs 120867 Jul 18 14:36:09 mailint1 dovecot: imap(micha): Error: Maildir filename has wrong W value: /var/mail/mailboxes/users/micha/.Sent/cur/1240390202.Rfd9752b8Q14135.mail-alt,S=280003,W=284007:2,S Jul 18 14:36:09 mailint1 dovecot:

Rowland Penny skrev den 2015-02-19 18:15: > OK, there is a discussion over on samba-technical about nss_winbind > and the question about Administrator being mapped to 0 was raised. Now > I have always thought that it should, but in fairness, I decided to > see what happens when it isn't, so I removed Administrator from > idmap.ldb and restarted samba. Before restarting

Fix is very simple, if you dont want to see any error in the logs like me. I like clean logs.. Just add the following to smb.conf usershare path = thats it. restart your samba. I did not set this on my DC, but on my member servers. But give it a try. Tell us if it works on you DC also. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at

Rowland Penny skrev den 2015-02-21 10:35: > On 20/02/15 21:27, Davor Vusir wrote: >> >> Rowland Penny skrev den 2015-02-19 18:15: >>> OK, there is a discussion over on samba-technical about nss_winbind >>> and the question about Administrator being mapped to 0 was raised. >>> Now I have always thought that it should, but in fairness, I decided

Hi there, I build a samba 4.0.11 on a Debian Wheezy from source, joined a existing AD (samba works with internal dns) and have this smb.conf: ======= # Global parameters [global] workgroup = DOMAIN realm = DOMAIN.local netbios name = SAMBA1 server role = active directory domain controller allow dns updates = nonsecure dns recursive queries = yes

On 02/07/15 16:55, Ryan Ashley wrote: > Rowland, here is what I found in the ldb. > > # record 68 > dn: CN=S-1-5-32-544 > cn: S-1-5-32-544 > objectClass: sidMap > objectSid: S-1-5-32-544 > type: ID_TYPE_BOTH > xidNumber: 3000000 > distinguishedName: CN=S-1-5-32-544 > > # record 70 > dn: CN=S-1-5-32-549 > cn: S-1-5-32-549 > objectClass: sidMap >

OK, there is a discussion over on samba-technical about nss_winbind and the question about Administrator being mapped to 0 was raised. Now I have always thought that it should, but in fairness, I decided to see what happens when it isn't, so I removed Administrator from idmap.ldb and restarted samba. Before restarting samba, I checked a few things, on the DC, getfacl returned this for

I have two domain controller servers, with samba in version 4.18 On both DCs both the Sysvol share and the subdirectories (including GPOs) have the same permission: getfacl /usr/local/samba/var/lib/samba/sysvol # file: usr/local/samba/var/lib/samba/sysvol # owner: root # group: 3000000 user::rwx user:root:rwx user:3000000:rwx user:3000001:r-x user:3000002:rwx user:3000003:r-x group::rwx

Ok, next, >From a windows pc connect to the server with computer manager, and now setup the share and folder rights. As in shown in the link posted ( https://lists.samba.org/archive/samba/2018-February/213690.html ) m leaving the office. So a reply wil probley tomorrow. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org]

hello > One question : who is owner and whats rights for dir > /home drwxr-xr-x.   5 root root   49  6 nov 16.21 home > /home/samba drwxr-xr-x. 3 root root  20  6 nov 16.21 samba > /home/samba/sysvol drwxrwx---+ 4 root root 52  8 nov 12.47 sysvol > > because, from windows client, user into domain admins, when i change > in security tab, explorer always crash > > bye

On 20/02/15 21:27, Davor Vusir wrote: > > Rowland Penny skrev den 2015-02-19 18:15: >> OK, there is a discussion over on samba-technical about nss_winbind >> and the question about Administrator being mapped to 0 was raised. >> Now I have always thought that it should, but in fairness, I decided >> to see what happens when it isn't, so I removed Administrator

On 6/22/2016 8:19 AM, L.P.H. van Belle wrote: > And dont forget : > https://wiki.samba.org/index.php/Idmap_config_ad > > I also noticed and incorrect mapping, which "looks" like rights issues like in the thead here. ( it is imo not a right issue.. ) read on.. > > NTDOMAIN\enterprise read-only domain controllers:x:3000202: > NTDOMAIN\domain