Displaying 20 results from an estimated 30000 matches similar to: "ACLs on domain members"
2003 Nov 18
1
ACLs and samba
Hi,
I'm having trouble getting ACLs and samba to work on solaris. In a unix
shell I can set and get the ACLs with setfacl and getfacl just fine.
Connecting with a window machine (w2000/w2003) to samba lets me
list the ACLs and even modify them. The problem is creating new
ACLs. In the logs I get
20031029/local2.error:Oct 29 16:30:11 test1 smbd[5417]: [ID 702911 local2.error]
2004 Aug 05
0
Samba 2.2 PDC to ADS member server migration issues
Hi, our company has for the last 3 years run a SAMBA PDC/Fileserver. Sadly
circumstances dictate that we now need to move to an Active Directory
infrastructure, and I want to migrate the existing PDC to a Samba3 ADS member
server. All our SAMBA domain users have identical accounts on our AD domain,
and I have successfully joined our SAMBA3 test box to the AD domain as a native
ADS/Kerberos
2007 Sep 10
0
member server config problem
Hi,
I'm settin up a member Server in a samba domain. (both 3.0.24)
getent passwd/group shows all user and groups
wbinfo -u/g shows user and groups
net groupmap list shows all groups correctly
Here's the testparm output:
Server role: ROLE_DOMAIN_MEMBER
[global]
workgroup = AAG
server string = FILES (%v)
security = DOMAIN
password server = 192.168.100.72
2007 Aug 06
1
setfacl(1) - Can FreeBSD's ACLs contain groups from NT/AD domains ?
Hi all,
I have "FreeBSD 7.0-CURRENT #1: Wed Jul 25" authenticating successfully against
active directory via samba's winbindd(8). I need to manage samba shares via
FreeBSD ACLs and CIFS ACLs. From my reading of setfacl(1) I should be able to
set group permissions using the syntax of DOMAIN\group-name. For example:
#setfacl -d -m g:"MYDOMAIN\mygroupname":rwx test
2017 Aug 25
0
sysvolreset doesn't reset all ACLs
Time to take a step back: My original problem is that clients can no
longer read or update their GPOs.
gpupdate fails on the default domain policy, claiming it can't read some
files. If I open said file via Explorer on the same user account, it
works – with \\domain\sysvol\… as well as when browsing every single DC
individually via \\foo-dc\sysvol\…
It's hard to tell (I'm running
2007 Jun 01
0
3.0.24 -- Office read only issue, bizarre EAs and disappearing ACLs
Everyone,
I have finally resolved the new heartburn 3.0.24 on Ubuntu Feisty was
giving me and have stumbled upon some information that might help others
out there.
I was seeing problems with ACL entries getting mangled and disappearing,
Excel making files read only and extended attributes doing bizarre
things. The solution revolved around what appears to be a change in how
ACLs are managed.
2018 May 02
1
unable to remove ACLs
On 01/05/18 23:59, Vijay Bellur wrote:
>
>
> On Tue, May 1, 2018 at 5:46 AM, lejeczek
> <peljasz at yahoo.co.uk <mailto:peljasz at yahoo.co.uk>> wrote:
>
> hi guys
>
> I have a simple case of:
> $ setfacl -b
> not working!
> I copy a folder outside of autofs mounted gluster vol,
> to a regular fs and removing acl works as
2015 Aug 12
1
ACLs on Samba share not preserved when copying with Windows Explorer
----- Original Message -----
> From: "Rowland Penny" <rowlandpenny241155 at gmail.com>
> To: samba at lists.samba.org
> Sent: Wednesday, August 12, 2015 1:46:53 AM
> Subject: Re: [Samba] ACLs on Samba share not preserved when copying with Windows Explorer
>
> >>
> > Hi Rowland,
> >
> > This Samba 3 server is joined to a Samba 4 AD domain
2005 Oct 11
1
User auth-groups vs Win2k ADS Problems
Hello Everyone
This samba server was working perfectly without problems.
Running as an Domain member vs Win2K ADS
One day it stopped working. All that happened 5 days ago was a change of the
administrator/root password
We adjusted the wbinfo -set-auth-user towards the new password. But nothing
have worked since.
install:/ # wbinfo -V
Version 3.0.13-1.1-SUSE
What might be wrong
2011 Sep 14
3
copy acls with getfacl / setfalc - invalid argument ....
I hav a problem porting my ACLS from my old filserver to a new one...
My old Fileserver:
I have my shares on a partition supporting acls with ext3
/dev/md0 on /data/raid type ext3 (rw,acl,user_xattr)
My new Fileserver:
/dev/md0 on /data/raid type ext4 (rw,acl,user_xattr)
Now I copied all my shares to the new Fileserver with rsync and backed
up my acls with:
getfacl -R
2008 Aug 31
0
NFSv4 ACLs.
Right now, FreeBSD supports one type of ACLs - so called POSIX.1e
ACLs. They are natural extension of the traditional Unix
permissions, and for a long time were the only nonproprietary
ACL type in Unix systems. Times change, and now there are several
problems with them: they never actually become standard (the draft
they are based on was withdrawn); this results in minor
incompatibilities
2008 Apr 07
1
NFS, acls, proto, and "kernel: svc: unknown version"
Hi all,
1) My NFS3 clients don't display or obey existing non-POSIX ACLs on
files of NFS3-mounted exports.
2) setfacl on the client throws error and fails :
# setfacl -m u:stowler:rw testfile.text
setfacl: testfile.text: Operation not supported
3) at time of client mount the server's /var/log/messages shows
"kernel: svc: unknown version (3)".
Any thoughts greatly
2003 Oct 29
4
Request for ACL experiences
I'm having trouble with ACL's and wonder how many others are too. I see
conflicting answers and comments about different aspects of ACL's from
many prople on the list. I was wondering if ANYONE is successfully
using ACL's with Samba 3.0 or above.
Questions I have that I'm sure many are asking are:
Was your Samba server configured as the DC?
What client OS were you
2015 Nov 03
1
POSIX ACLs on Domain Controller.
Hello samba team !
On my network, I mainly manage my AD users and computers from Unix
using shell scripts. So I would like to set the shares' ACLs directly
from the DC with the POSIX setfacl command.
When exporting with NFSv4, the POSIX ACLs are conserved. I can set the
permissions the same manner as for my local users.
But on DC, the "rwx" right is mapped to "full
2017 Aug 25
0
sysvolreset doesn't reset all ACLs
Ah, yes, oeps sorry, and i did run out of the office yesterday, so didnt see this..
3000002:rwx
3000003:r-x
wbinfo --uid-to-sid=3000003
S-1-5-11
wbinfo --uid-to-sid=3000002
S-1-5-18
wbinfo --sid-to-name=S-1-5-11
NT AUTHORITY\Authenticated Users 5
wbinfo --sid-to-name=S-1-5-18
NT AUTHORITY\SYSTEM 5
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba
2002 Sep 11
4
XFS-ACL-Samba: Trouble adding acls
Hi,
I recently tried to use ACLs with samba. XFS is running, I can set ACLs
using setfacl and read them with getfacl, no problem so far. Samba
compiled fine with '--with-acl-support'.
Now I set up a share with 'nt acl support = yes', put there a file and
added an acl with 'setfacl':
root@edjo[ACLTEST]# getfacl datei.txt
# file: datei.txt
# owner: odenbach
# group:
2005 Apr 20
0
Domain Admins
OK, I have RTFM. All the I could find.
I cannot seem to set permissions via WINXP Pro explorer. No matter what I do all I get is access denied - even if I own the file.
Samba log reveals:
[2005/04/20 10:56:08, 2] smbd/open.c:open_file(326)
larry opened file xghost.bin read=Yes write=No (numopen=1)
[2005/04/20 10:56:08, 3] smbd/process.c:process_smb(1102)
Transaction 19 of length 188
2015 Aug 07
4
Problems with administrator account
Yes, LAN is the workgroup name.
I made a test, i removed all the ACL with setfacl -b mysharename
[root at fileserv]# getfacl share/
# file: share/
# owner: root
# group: root
user::rwx
group::rwx
other::---
Going to Windows side and Added "Domain Admins" in permission tab to
read/modify/total
Security Tab is denied even for my others account in domain Admins group
looking again
2004 Jan 28
0
SAMBA + ACLS +XFS PROBLEMS !!
Hello you all,
I am trying to set up a samba server with nt acl
suport and i am having many troubles, help will be
very apreciated.
1 - Is it possible to use acls only with the local
users, no domains, no active directory, no winbind
resolver (i just wanna work with users and groups that
exist in this machine) ?
2 - I couldn't put samba to work, like i wanted
(question 1), so i follow a
2017 Aug 25
1
sysvolreset doesn't reset all ACLs
> root at graz-dc-sem.ad.tao.at# wbinfo --sid-to-name=S-1-5-11
> failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND
> Could not lookup sid S-1-5-11
So how fucked is my domain?
On 2017-08-25 08:09, L.P.H. van Belle via samba wrote:
> Ah, yes, oeps sorry, and i did run out of the office yesterday, so didnt see this..
>
> 3000002:rwx
> 3000003:r-x
>
> wbinfo