similar to: Samba4 AD Groups Problem

Displaying 20 results from an estimated 10000 matches similar to: "Samba4 AD Groups Problem"

2012 Dec 07
1
Samba Permissions
Hi, I have a case where I only want to restrict access to SMB shares via filesystem permissions (and POSIX ACLs). Therefore, I do not want Samba to verify security in any way at the SMB level. If the filesystem/ACL permissions allow access to the shared directory, so should Samba. If the filesystem does not allow access to the filesystem, Samba should deny as well. I thought I had this
2005 Nov 14
4
Using group membership to access a symlink directory
I am having a problem getting Samba to use the linux group membership when following a symlink. On the Linux side, I have a soft link from the user's home directory to the shared directory. ln -s /home/shared/testgroup testshare In the smb.conf I have: [homes] comment = Home Directories browseable = no writable = yes valid users = %S force create mode = 0660 delete
2013 Jun 05
1
Symbolic links do NOT work if the source file is present BOTH on client & server !!!
Dear all I struggle with a very annoying bug ! The problem is very simple to reproduce (NO Windows stuff needed, ONLY Linux !): 1. Samba 3.5.6 running on a Debian 6 (Squeeze) Server with following configuration: /etc/samba/smb.conf: security = user guest account = nobody map to guest = bad user null passwords = yes case sensitive = yes [myshare]
2003 Mar 01
0
getent group returns only few groups on solaris
Hi All, I was able to get 'winbind' configured on my Solaris-9 system and authenticate Windows domain users, but I have three problems: Server OS; Solaris 9, MU2 SAmba version: 2.2.7 (also tried 2.2.8prel , but same problem) Tried 'winbind enum users/groups' both true and false Client OS: Windows XP, WinNT4.0 nsswitch.conf entries: passwd: files
2013 Mar 20
1
Remove Win2008R2 from Domain, remove missing DC from domain
Hi! I'm almost done with a migration from Win2k to Samba4. To get this going I had to install a Win2008R2 Server as an intermediate server, now I want to get rid of it. I found a bug that Win2008R2 can not be demoted from Samba Domain - so I think I've to remove it somehow else. But I couldn't find anything about that in the docs and on google. So anyone out there with a
2005 Apr 27
1
'valid users' does not accept my users, but my groups
Hi, I'm using Version 3.0.10-Debian and have winbindd running for auth against our W2K TEST-DOM. I've set up shares which only some groups have access granted. System is runnig fine a few weeks when I now discovered when I want grant access to only one user, it doesn't work. The configuration for this share is: [testshare] path = /data/test public = no writeable =
2007 Apr 18
3
file permissions with inherit permission + ACL's
Hi, I have a share (testshare) where different unix groups (testgroup1, testgroup2) should have access to. But I want that new files are only created with 660 permissions. Here are the ACL's of testshare: # file: testshare # owner: ralfgro # group: ve user::rwx group::rwx group:testgroup1:rwx group:testgroup2:rwx mask::rwx other::--- default:user::rwx default:group::---
2013 May 01
2
Replacing Win2000 DC with Samba4 - Success!
Hi! Just wanted to share a little success story: We where asked to replace a Win2000 DC deployed by another company which is'nt existing any more. As our focus is software development on linux we wanted to deploy a Samba-server instead of Windows. So after some trial and error and a lot of reading and asking (many thanks to all that tried to help!) in mailing-lists and forums we
2019 Mar 01
3
Can't authenticate to AD using Samba with SSSD
Would someone please tell me where I can find some good troubleshooting documents to resolve AD authentication issues when using Samba? Is this mailing list the best place? I was able to setup a working WINBIND-Samba setup on CentOS 7.6, but I am required to use SSSD on a different CentOS 7.6 server. Using a test VM, I can get services running, but I can't authenticate from a Mac or
2014 Nov 11
1
Changing password server to win 2012
Hi list, My goal is to share a few shares from a solaris 9 host with a new win2012 domain. Im rather new to solaris (some years of linux exp, but samba has been a LONG time ago) The solaris machine has been created as a machine account in AD under its hostname by the windows admins in the new win2012 domain. (Thats not me, although I have domain admin access if need be) I have an issue changing
2013 Feb 01
1
Samba 4 vs Samba 3
So, I have "working" builds of Samba 3.6.10, and 4.0.2 using the traditional build system on AIX, both built with XLC. For historical reasons, we're needing to use 'encrypt passwords = no', so that Samba uses the OS password. The odd thing, is, the 3.6.10 Samba works just fine, but the 4.0.2 doesn't allow connections. Here's the Samba config I'm using on both:
2012 Mar 27
1
Samba and admin users performance
Hello, I have a performance problem when I don't connect using root and/or a user in the "admin users". Configuration: Samba 3.5.11 running on SLES11SP1. The share exported is on a GPFS filesystem and the GPFS vfs object is loaded(not loading it doesn't change the described behaviour) clients: Windows 7 and Windows 2008R2 all at latest update level. [testshare] comment
2015 Jul 03
2
Migration Samba3 -> Samba4: Accessing domain member server is not working
Hi ... When trying to migrate from samba3 to samba 4.2.2 I am facing a severe problem that bugs me for hours now. I cannot get a samba 4.2.2 fileserver to work with a samba 4.2.2 PDC as a domain member. My scenario: Samba 3 network. PDC and fileserver where Samba 3.6.25. LDAP backend. We can't move to AD right now so I wanted to move to the current 4.2.2 at least to do this step but to
2010 May 04
2
smbclient -k works; mount -t cifs does not
I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba servers. I am trying to mount a share from the other (i.e., "workhorse" is trying to mount a share on "dual-booter"). If I specify a smbmount command with a -k option, I can mount the share: turgon at workhorse:~$ klist Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: turgon at DACRIB.LOCAL Valid starting
2014 Dec 19
3
[samba 4.0] read only = yes + Denymode DENY_WRITE
Hello, Our samba fileserver is a member of a Windows 2008R2 domain, and has different shares. These shares are set with a "read only = yes" and have an explicit "write list". This works as planned. But when an "read only" user opens a pdf with Adobe acrobat, the file gets DenyMode DENY_WRITE and the user who can edit the file can't save the document anymore.
2019 Feb 18
1
Authenticating AD users and Local users
Thank you for replying! I can login with my Active Directory credentials, but I can’t login using the local CentOS “svc_dictations” account. I created the local account usingusing “adduser”, “smbpasswd”, and then updating my smb.conf file (below). Thank you, Brian [global] workgroup = YALE password server = ad1.yu.yale.edu<http://ad1.yu.yale.edu>
2008 Feb 11
1
dos filemode (security concern)
Hi, I've a question about the 'dos filemode' option (samba 3.0.24, debian etch). I want to use this option to allow group members with write access to add/change permissions. man smb.conf: dos filemode (S) only the owner of a file/directory is able to change the permissions on it. However, this behavior is often confusing to DOS/Windows users. Enabling this parameter allows a
2013 Sep 07
1
Help troubleshooting "find_domain_master_name_query_fail" on SMB v4?
I'm running smbd -V Version 4.1.0rc2-3.1-3075-SUSE-oS12.3-x86_64 This is a standalone server, and the only SMB/CIFS instance on my LAN. On launch, I see the following "find_domain_master_name_query_fail" error in logs. I can't track down what I've managed to do wrong; pointers appreciated. ==> log.nmbd <== [2013/09/07 16:21:41, 2]
2013 Aug 20
1
chmod + remote save denied = file wiped?
I have a SerNet Samba 4.0.8 AD DC running on CentOS 6.4 (newdc) replicating from a W2K3 DC (olddc). newdc also has a test share. I'm experiencing something strange whereby chmod and then an attempted file save causes a shared file to become zero bytes (despite the save not being blank, and also being denied): At olddc: 1) open \\newdc\testshare\yay.txt At newdc: $ ls -l total 8
2023 Jul 03
1
need help to find bug
On 03/07/2023 14:11, ???? ?????? wrote: > If you insist that it is the expected output, then we have a bug in > all linux distributions. All of them! > For example this is latest fedora: > [kasak at kasakoff ~]$ smbclient -N -L localhost > > Sharename Type Comment > --------- ---- ------- > print$ Disk Printer Drivers > share