Displaying 20 results from an estimated 10000 matches similar to: "Samba4 AD Groups Problem"
2012 Dec 07
1
Samba Permissions
Hi,
I have a case where I only want to restrict access to SMB shares via filesystem permissions (and POSIX ACLs). Therefore, I do not want Samba to verify security in any way at the SMB level. If the filesystem/ACL permissions allow access to the shared directory, so should Samba. If the filesystem does not allow access to the filesystem, Samba should deny as well.
I thought I had this
2005 Nov 14
4
Using group membership to access a symlink directory
I am having a problem getting Samba to use the linux group membership
when following a symlink.
On the Linux side, I have a soft link from the user's home directory to
the shared directory.
ln -s /home/shared/testgroup testshare
In the smb.conf I have:
[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
force create mode = 0660
delete
2013 Jun 05
1
Symbolic links do NOT work if the source file is present BOTH on client & server !!!
Dear all
I struggle with a very annoying bug !
The problem is very simple to reproduce
(NO Windows stuff needed, ONLY Linux !):
1. Samba 3.5.6 running on a Debian 6 (Squeeze) Server with following configuration:
/etc/samba/smb.conf:
security = user
guest account = nobody
map to guest = bad user
null passwords = yes
case sensitive = yes
[myshare]
2003 Mar 01
0
getent group returns only few groups on solaris
Hi All,
I was able to get 'winbind' configured on my Solaris-9 system and
authenticate Windows domain users, but I have three problems:
Server OS; Solaris 9, MU2
SAmba version: 2.2.7 (also tried 2.2.8prel , but same problem)
Tried 'winbind enum users/groups' both true and false
Client OS: Windows XP, WinNT4.0
nsswitch.conf entries: passwd: files
2013 Mar 20
1
Remove Win2008R2 from Domain, remove missing DC from domain
Hi!
I'm almost done with a migration from Win2k to Samba4. To get this
going I had to install a Win2008R2 Server as an intermediate server,
now I want to get rid of it.
I found a bug that Win2008R2 can not be demoted from Samba Domain - so
I think I've to remove it somehow else.
But I couldn't find anything about that in the docs and on google.
So anyone out there with a
2005 Apr 27
1
'valid users' does not accept my users, but my groups
Hi,
I'm using Version 3.0.10-Debian and have winbindd running for auth
against our W2K TEST-DOM. I've set up shares which only some groups have
access granted. System is runnig fine a few weeks when I now discovered
when I want grant access to only one user, it doesn't work.
The configuration for this share is:
[testshare]
path = /data/test
public = no
writeable =
2007 Apr 18
3
file permissions with inherit permission + ACL's
Hi,
I have a share (testshare) where different unix groups (testgroup1,
testgroup2) should have access to. But I want that new files are only
created with 660 permissions.
Here are the ACL's of testshare:
# file: testshare
# owner: ralfgro
# group: ve
user::rwx
group::rwx
group:testgroup1:rwx
group:testgroup2:rwx
mask::rwx
other::---
default:user::rwx
default:group::---
2013 May 01
2
Replacing Win2000 DC with Samba4 - Success!
Hi!
Just wanted to share a little success story:
We where asked to replace a Win2000 DC deployed by another company
which is'nt existing any more. As our focus is software development on
linux we wanted to deploy a Samba-server instead of Windows.
So after some trial and error and a lot of reading and asking (many
thanks to all that tried to help!) in mailing-lists and forums we
2019 Mar 01
3
Can't authenticate to AD using Samba with SSSD
Would someone please tell me where I can find some good troubleshooting documents to resolve AD authentication issues when using Samba? Is this mailing list the best place?
I was able to setup a working WINBIND-Samba setup on CentOS 7.6, but I am required to use SSSD on a different CentOS 7.6 server. Using a test VM, I can get services running, but I can't authenticate from a Mac or
2014 Nov 11
1
Changing password server to win 2012
Hi list,
My goal is to share a few shares from a solaris 9 host with a new win2012
domain. Im rather new to solaris (some years of linux exp, but samba has
been a LONG time ago)
The solaris machine has been created as a machine account in AD under its
hostname by the windows admins in the new win2012 domain. (Thats not me,
although I have domain admin access if need be)
I have an issue changing
2013 Feb 01
1
Samba 4 vs Samba 3
So, I have "working" builds of Samba 3.6.10, and 4.0.2 using the traditional build system on AIX, both built with XLC.
For historical reasons, we're needing to use 'encrypt passwords = no', so that Samba uses the OS password.
The odd thing, is, the 3.6.10 Samba works just fine, but the 4.0.2 doesn't allow connections. Here's the Samba config I'm using on both:
2012 Mar 27
1
Samba and admin users performance
Hello,
I have a performance problem when I don't connect using root and/or a user
in the "admin users".
Configuration:
Samba 3.5.11 running on SLES11SP1. The share exported is on a GPFS
filesystem and the GPFS vfs object is loaded(not loading it doesn't change
the described behaviour)
clients: Windows 7 and Windows 2008R2 all at latest update level.
[testshare]
comment
2015 Jul 03
2
Migration Samba3 -> Samba4: Accessing domain member server is not working
Hi ...
When trying to migrate from samba3 to samba 4.2.2 I am facing a severe
problem that bugs me for hours now. I cannot get a samba 4.2.2
fileserver to work with a samba 4.2.2 PDC as a domain member.
My scenario:
Samba 3 network. PDC and fileserver where Samba 3.6.25. LDAP backend.
We can't move to AD right now so I wanted to move to the current 4.2.2
at least to do this step but to
2010 May 04
2
smbclient -k works; mount -t cifs does not
I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba
servers. I am trying to mount a share from the other (i.e., "workhorse"
is trying to mount a share on "dual-booter"). If I specify a smbmount
command with a -k option, I can mount the share:
turgon at workhorse:~$ klist
Ticket cache: FILE:/tmp/krb5cc_1000
Default principal: turgon at DACRIB.LOCAL
Valid starting
2014 Dec 19
3
[samba 4.0] read only = yes + Denymode DENY_WRITE
Hello,
Our samba fileserver is a member of a Windows 2008R2 domain, and has
different shares. These shares are set with a "read only = yes" and have
an explicit "write list". This works as planned.
But when an "read only" user opens a pdf with Adobe acrobat, the file
gets DenyMode DENY_WRITE and the user who can edit the file can't save
the document anymore.
2019 Feb 18
1
Authenticating AD users and Local users
Thank you for replying!
I can login with my Active Directory credentials, but I can’t login using the local CentOS “svc_dictations” account.
I created the local account usingusing “adduser”, “smbpasswd”, and then updating my smb.conf file (below).
Thank you,
Brian
[global]
workgroup = YALE
password server = ad1.yu.yale.edu<http://ad1.yu.yale.edu>
2008 Feb 11
1
dos filemode (security concern)
Hi,
I've a question about the 'dos filemode' option (samba 3.0.24, debian etch). I
want to use this option to allow group members with write access to add/change
permissions.
man smb.conf:
dos filemode (S)
only the owner of a file/directory is able to change the permissions on it.
However, this behavior is often confusing to DOS/Windows users. Enabling
this parameter allows a
2013 Sep 07
1
Help troubleshooting "find_domain_master_name_query_fail" on SMB v4?
I'm running
smbd -V
Version 4.1.0rc2-3.1-3075-SUSE-oS12.3-x86_64
This is a standalone server, and the only SMB/CIFS instance on my LAN.
On launch, I see the following "find_domain_master_name_query_fail"
error in logs.
I can't track down what I've managed to do wrong; pointers appreciated.
==> log.nmbd <==
[2013/09/07 16:21:41, 2]
2013 Aug 20
1
chmod + remote save denied = file wiped?
I have a SerNet Samba 4.0.8 AD DC running on CentOS 6.4 (newdc)
replicating from a W2K3 DC (olddc). newdc also has a test share.
I'm experiencing something strange whereby chmod and then an attempted
file save causes a shared file to become zero bytes (despite the save
not being blank, and also being denied):
At olddc:
1) open \\newdc\testshare\yay.txt
At newdc:
$ ls -l
total 8
2023 Jul 03
1
need help to find bug
On 03/07/2023 14:11, ???? ?????? wrote:
> If you insist that it is the expected output, then we have a bug in
> all linux distributions. All of them!
> For example this is latest fedora:
> [kasak at kasakoff ~]$ smbclient -N -L localhost
>
> Sharename Type Comment
> --------- ---- -------
> print$ Disk Printer Drivers
> share