similar to: Using Windows­­­ ACL on a samba3 share

Dear all, I am struggling around with Windows ACLs and cannot find a solution nor how to troubleshoot that. I have two samba3 hosts. Hostname "donald" is my domain controller with samba 3.x + OpenLDAP server running. Hostname "pluto" is my other samba 3.x server which was joined to my domain. I use LDAP for my users+groups. I dont have winbind on my machines. On hostname

Hi Denis, on both samba hosts (donald and pluto) these commands work great: id johndoe getent group getent passwd My pluto:/etc/nsswitch.conf looks like that: [...] passwd: compat ldap group: compat ldap shadow: compat ldap [...] I want to add, that the described problem works fine if I try it on a share on "donald", my domain controller. The users are

Hello List, In my logfile I found: Sep 11 18:40:58 gateway smbd[92133]: [2006/09/11 18:40:58, 0] auth/auth_util.c:create_builtin_administrators(785) Sep 11 18:40:58 gateway smbd[92133]: create_builtin_administrators: Failed to create Administrators Sep 11 18:40:58 gateway smbd[92133]: [2006/09/11 18:40:58, 0] auth/auth_util.c:create_builtin_users(751) Sep 11 18:40:58 gateway smbd[92133]:

I cannot find the source of this problem for the life of me. I have a samba server I have had set up for ages, that I am finally needing to do groupmapping on. On that system if I do a net groupmap, I get noting at all returned except for a newline. In fact almost all net commands seem to not work properly, with the exception of net status. For instance: [root@file-server sbin]# net

I have been setting up samba 3.0.20b on Solaris 9 with a Sun Java System Directory Server v5.2 and have hit a couple of problems. The first is that if I run the command /net rpc group MEMBERS Staff -U administrator after prompting for the password it just gives the result of a blank line. Looking through the ldap logs it appears that samba finds the correct group mapping but then looks up the

Hi! I'm trying to get a Samba-based domain working properly. I'm using an LDAP backend. Right now all the users have been created, and machine accounts as well - but some things at the domain level aren't 100%. Adding new machines usually results in a error, which I get around and then have it working - but I continue to see error messages in the logs. I'm assuming

Oh, so you are using ldap..., well I'm still working with smbpasswd as backend :-( Anyway, I tried 'net getlocalsid' for the domain-sid -> ok Next 'net usersidlist' which should show me the user-sids -> didn't work: "[2004/03/04 06:40:05, 0, pid=31232, effective(0, 0), real(0, 0)] utils/net_rpc.c:net_usersidlist(2158) Could not get the user/sid list" So

Hello, i have some problems migrating a Windows 2000 PDC to a Debian GNU/Linux Samba Server, i want to migrate it to a LDAP backend.. but as i'm kind of newbie with ldap and samba migration stuff, i preffered to migrate it to tdbsam first and try it for a while, if everything works fine, then switch to a ldap backend. The problem is that Essential Windows Groups are automatically created, so

Hello, I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going on here. I've listed the process for migration

Hi, I've got those crash entries in my logs and there is multiple smbd process eating a lot of cpu/mem. I'm using samba 3.0.4, rpmsource from samba.org rebuilt with posix acls support. Samba is linked with an openldap-2.0.27. All of this on redhat ES 3 :/ Any hint to fix this problem? [2004/06/17 17:57:39, 0] smbd/posix_acls.c:create_canon_ace_lists(1482) create_canon_ace_lists:

Considering the following page... http://us3.samba.org/samba/docs/man/guide/small.html First of, my compliments to John for some great examples to study. In my mind I see three levels of security: 1) Linux - such as SSH'ing into the Linux server, Linux accounts and groups come into play here 2) Samba PDC - "Domain Admins" "Domain Users" come into play here. Examples

Hello, I looked at my log file this morning and I see a lot of stuff about ACLs that I don't understand and this notice: INTERNAL ERROR: Signal 11 in pid 23985 (3.0.9-1.3E.3) I suspect that it was caused when a user tried to change permissions on the contents of a directory or delete it (I'm trying to find that out now). The directory seemingly no longer exists, so the user may have

We have bumped into a most odd problem. Server: Debian Etch and their Samba 3.0.24-2 Client: WinXP SP2, MSI v3, all hot fixes The following settings are in place on the server: #!/bin/bash # # initGrps.sh # Map Windows Domain Groups to UNIX groups net groupmap add ntgroup="Domain Admins" unixgroup=domadmin rid=512 type=d net groupmap add ntgroup="Domain Users"

Hi there, I have a Samba installation acting as a Domain Member with a disk share (the partiton is mounted with acl and user_xattr options). I am not using winbind, because I want the domain users to be mapped to Unix users. Everything works right, excepting the users in the Windows Explorer security tab. I will try to explain the situation with an example. I have username map, that maps

Howdy People, I have a problem with roaming profiles in samba 3.0.5 on redhat9 ( installed from the rpm with rpm -Uv samba.3.0.5.rpm I am not using LDAP ( dont know how and as I am a Netware person on a very steep learning curve with Samba, didn't want to complicate the installation after seeing every second posting on this list as a ldap problem). The smb.conf file is listed below. The

Hello I have been solving a problem how to make a nonroot user able to administer the domain (add users, groups, modify them etc.) from Windows workstation using usrmgr.exe It looks like what is stated in Samba HOWTO collection as prerequisites is not enough. First I found Chapter 12 cxl "How to make Samba PDC users member of the Domain Admins group" - made the nonroot user member of

Hello All, Samba is posting the following error messages repeatedly during user authentication: Feb 20 09:35:50 SUMSRVR smbd[27950]: [2007/02/20 09:35:50, 0] rpc_server/srv_util.c:get_alias_user_groups(206) Feb 20 09:35:50 SUMSRVR smbd[27950]: get_alias_user_groups: gid of user xxx doesn't exist. Check your /etc/passwd and /etc/group files It does not appear to be causing any problems,

Firstly I apologise for the length of this query but I am hoping that if I document everything I did someone might respond / be able to help. My Configuration is Samba 3.0.2a as a PDC on Redhat 8. I cannot for the life of me get the "Domain Admins" functionality to work I am hoping that another set of eyes can shed some light on this problem as I have now spent 41 hrs googling /

I thought I had this working when I tested it a few months ago with a different test server, but I?ve tried everything from my previous notes, and can?t get it to work now. I?m replacing a Samba 3.0.10 Unix server with a SerNet Samba 4.1.2 Debian Wheezy server. The new server has to look exactly the same to the existing workstations. The workstations are all running Windows XP Pro. I?ve

Hello, Second post: first had logs attached but was too big. I have a test environment with 1 windows 2000 AD domain pdc ( mixed mode install ), 1 linux server ( to become pdc ) and a win xp box to test logon when the migration was completed. The problem is no matter what I try after the migration the win xp's logonserver = windows server not linux server. I have no idea what is going