similar to: SWAT2 shows not all AD groups.

On 25/09/2019 16:25, Roy Eastwood via samba wrote: > I have set up a share on a domain member server and am attempting to set the ACLs from a domain-joined Windows 7 computer as per the > WiKi at https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > > I want to use one of the BUILTIN groups, Backup Operators to be able to have Full Control on files in the share (as

Hello, I'm having trouble when I try do get a group SID from my domain, the user lookup and authentication is working fine. Actually what I'm trying to do is to authenticate squid against MS AD using winbind. I need to restrict access by group, so I'm using wbinfo_group.pl to do it. The machine has been built to be a proxy server only. I'm using Suse Linux 9.3 Professional

OK, I think I'm close to having my Samba server working like I want it as an AD member of our Windows AD (lab configuration at this time). Just have a few questions about getting the member server to do what I want, specifically, getting local groups to work. From what I've read I think this should be possible but not sure...I would like to have a local group on the Samba server called

On 25 September 2019 17:25, Rowland penny wrote: > On 25/09/2019 16:25, Roy Eastwood via samba wrote: > > I have set up a share on a domain member server and am attempting to set the ACLs from a domain-joined Windows 7 computer as > per the > > WiKi at https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > > > > I want to use one of the BUILTIN

On Sat, 19 Aug 2023 18:22:32 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > Hi folks, > > I have got two DCs and I want to check that the builtin ids are equal > on both DCs. I have searched extensively, but I have not found what > tool to use to get this information. I take it by 'builtin ids' you mean the users and groups stored in idmap.ldb,

On 19.08.2023 19:13, Rowland Penny via samba wrote: > On Sat, 19 Aug 2023 18:22:32 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> Hi folks, >> >> I have got two DCs and I want to check that the builtin ids are equal >> on both DCs. I have searched extensively, but I have not found what >> tool to use to get this information.

Hi folks, I have got two DCs and I want to check that the builtin ids are equal on both DCs. I have searched extensively, but I have not found what tool to use to get this information. I do not use winbindd on the DCs. I would be very grateful, if somebody could give me information about this. Best regards, Peter

I have set up a share on a domain member server and am attempting to set the ACLs from a domain-joined Windows 7 computer as per the WiKi at https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs I want to use one of the BUILTIN groups, Backup Operators to be able to have Full Control on files in the share (as it will be used for backups). However, when trying to assign the

On Sat, 19 Aug 2023 19:33:18 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 19.08.2023 19:13, Rowland Penny via samba wrote: > > On Sat, 19 Aug 2023 18:22:32 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> Hi folks, > >> > >> I have got two DCs and I want to check that the

Hello all, We are currently running samba version 3.4.0 on AIX. We are using idmap rid as we do have only one domain called FB6. When we applied permissions to user directories we gave group permissions to the BUILTIN\administrators group. This used to work for samba 3.0.26a. Now we experience the following problem: when we execute wbinfo -g we do not see the BUILTIN\administrators group,

Hi! I'm using 4.10.13 as AD and have the issue that winbind does not show correct the group membership of some users. # Global parameters[global] ldap server require strong auth = no netbios name = admin realm = XXXX.LOKAL workgroup = XXXX dns forwarder = 8.8.8.8 server role = active directory domain controller idmap_ldb:use rfc2307 = Yes

I would like to get samba4 working with AD and rfc2307 attributes, while allowing the nice remote management available via samba4. Using sernet-samba packages on 4.1.3-7.el6.x86_64 CentOS 6. I have samba4 configured as follows: krb5.conf: [libdefaults] default_realm = MAIN.ADLAB.NETDIRECT.CA dns_lookup_realm = true dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable =

On 16/03/2020 14:21, Dipl.-Ing. P?ter Varkoly via samba wrote: > Hi! > I'm using 4.10.13 as AD and have the issue that winbind does not show > correct the group membership of some users. # Global > parameters[global] ldap server require strong auth = > no netbios name = admin realm = > XXXX.LOKAL workgroup = XXXX dns forwarder = > 8.8.8.8

On Tue, 7 Aug 2018 12:20:04 +0200 Micha Ballmann via samba <samba at lists.samba.org> wrote: > Hello, > > my enviroment: > > All Servers are Ubuntun 16.04-18.04 > > SAMBA AD DC Server and several SAMABA DOMAIN MEMBER (connected via > WINBIND). In ADDC I've created a group "restrictaccess" and added > some users. > > Now when im typing

cat /usr/local/samba/etc/smb.conf: # Eintraege fuer das ActiveDirectory Samba4 workgroup = SAMDOM realm =SAMDOM.LOCAL security = ADS # Alle Template Einstellungen kommen direkt aus der AD # Die Shell ist nur aus Sicherheitsgruenden hier eingetragen template shell = /bin/false kerberos method = secrets and keytab dedicated keytab file =

I had winbind configured so that it could fetch users from AD. Everything was working properly, but something happened in the past couple of days (no change in the Samba config) I'm not able to diagnose. "getent group" enumerates groups, "getent passwd" doesn't. "wbinfo -g" returns groups, whereas I get this error when trying to get users: # wbinfo -u

On 19.08.2023 19:50, Rowland Penny via samba wrote: > On Sat, 19 Aug 2023 19:33:18 +0200 > Peter Milesson via samba <samba at lists.samba.org> wrote: > >> >> On 19.08.2023 19:13, Rowland Penny via samba wrote: >>> On Sat, 19 Aug 2023 18:22:32 +0200 >>> Peter Milesson via samba <samba at lists.samba.org> wrote: >>> >>>> Hi

Hi, i'm trying to setup Samba 4.6 on CentOS 7.4 as a Domain Member of a Windows 2012R2 Domain Controller with AD. To administer share security i have to use the "username map" feature. This works when i enumerate individual AD users there. When i want to use AD groups it only works with "primary" groups. This way i can't use the "Domain Admins" group

Hey, I'm running Samba version 3.0.28 and having trouble with the automatic creation of builtin groups on the server, I'm using the AD idmap backend. Quite often I get the following error: [2008/02/18 14:04:25, 2] auth/auth_util.c:create_local_nt_token(941) create_local_nt_token: Failed to create BUILTIN\Users group! This seems to indicate that the server is unable to create builtin

On Sat, 19 Aug 2023 20:15:34 +0200 Peter Milesson via samba <samba at lists.samba.org> wrote: > > > On 19.08.2023 19:50, Rowland Penny via samba wrote: > > On Sat, 19 Aug 2023 19:33:18 +0200 > > Peter Milesson via samba <samba at lists.samba.org> wrote: > > > >> > >> On 19.08.2023 19:13, Rowland Penny via samba wrote: > >>> On