similar to: samba-tool of delegation of permissions

Am 13.05.2013 14:53, schrieb daniel gonzalez: >> For doing it with ADUC, see here: >> >> http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO/AD_Delegation#Delegating_.27Joining_Computers_to_the_domain.27-permissions > > Hello Marc, with ADUC don't work computers xp, only 7. It is working fine here for XP and Win7 in production and my test environment. The HowTo is

Hello, Not sure if this is the right forum for this question, but since I am running a Samba4 DC I thought I'd start here. I have create a separate OU to manage Groups and Users for Applications: 1) ou=myappX,ou=app,dc=mydomain,dc=home All Users (and other groups, e.g. Domain Users) are obviously found in : 2) cn=users,dc=mydomain,dc=home So I created a service

Back in January we upgraded/moved our domain from an old install of samba and openldap to a newer version (samba 3.5.10 and openldap 2.4.23) while also moving our domain to a new name. On the old domain, which was setup before I got here, our IT section was in an ldap group that allowed us to join PC's to the domain and when the prompt came up in windows to install software we could log in as

Sernet samba 4.2.2 in ubuntu 14.04.2 LTS, a fresh migration from samba 3 (I'm still in the testing phase). I'm experimenting with task delegation. Using the ADUC wizard, I select the "Join machine to domain" task to add to my userid (I also tried a group I'm a member of with the same result), at the domain level (rough translation, this is on a localized windows 7). Adding

Hi, It has been a while that I did not come back to this topic, however I think I found a work-around for my initial problem. For information, what I was trying to do was: - Create an OU for a group of applications - Delegate control of this OU to a normal user (not helpdesk or domain admin) to be able to create groups and assign domain users to them The problem was, whenever I

I made note the following in the 4.0.3 release notes about upgrades: o For more details concerning the ACL problem with delegation of privileges and deletion of accounts over LDAP interface (bugs #8909 and #9267) regarding upgrades from older 4.0.x versions, please see http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO#Upgrading which will be filled with details once we have

List: Sorry for posting to this list but could not find step by step instructions anywhere nor get any concerned list to respond. Newbie to DNS technicals but can work with instructions if given in ./configure for complete idiots ;-) 1. I have taken a static IP from my ISP 203.134.221.162 and the ISP has put up an entry in APNIC whois (please check the same)...to me it seems incomplete, as it

I could delete all records of this server that no longer exists no problem even record type NS I only have these two that there has been no way to erase any other ideas thanks samba-tool dns delete zdtoe-02.dtoe.etecsa.cu dtoe.etecsa.cu _msdcs\010CNF:946b89d3-b07b-4f43-a6b9-0de3bf3f3a10.dtoe.etecsa.cu. NS zdtoe-01.dtoe.etecsa.cu -U administrator GENSEC backend 'gssapi_spnego'

On 8/18/2015 10:46 AM, Alessio Cecchi wrote: > Hi, > > in this tipical setup (Dovecot/Director thate share Maildir via NFS) on > your NFS Server you have (about) 90% of read operations and only 10% of > write operations. > > If you see detailed stats for NFS operations you have 40-50% of GETATTR, > this means that NFS/Dovecot clients are caching data (mainly dovecot >

I ran samba-tool delegation show administrator and got this: athena:~# samba-tool delegation show administrator Account-DN: CN=Administrator,CN=Users,DC=edm-inc,DC=com UF_TRUSTED_FOR_DELEGATION: False UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION: False Is this legit?? Shouldn't the domain administrator be true for these? -- Bob Wooldridge EDM Incorporated

Hi, Just out of curiosity what is in nfsv4 delegation that you think would give a benefit on your configuration? If I read back the thread you seem to have dovecot configured with director ring in front of the backends. In that case Dovecot already manages storage in a way that only one of the backends is accessing each users data at a time. So I can?t see anything but problems form enabling

Hello everybody, I've got some troubles making Win XP join may samba4 AD, and, well, i'm kind of stuck ! I use the binary distribution of Samba 4 for Ubuntu Trusty Server (4.1.6), with bind9 DLZ as a DNS backend. Everything works fine with Win7 workstations, but I get a message "Internal Error" on Win XP workstation during the domain join. The machine account is created on

just a quick update: no issues with NFSv4.0 (load is slowly growing, currently ~7k mailboxes) instead, bad news from delegation front, we enabled it for a couple of days but we ran in ugly issues: processes went in "uninterruptible sleep" state, load average gets huge, reboot was the only escape :-( -brd Alessio Cecchi wrote: > Il 12/06/2015 13:02, brd ha scritto: > >Alessio

hi all, i'm managing a large installation of a dovecot cluster in director + NFS backend architecture and we are moving from NFSv3 to NFSv4. Our NFS server is a Netapp in clustered mode and reading technical specs of NFSv4 delegation feature it seems that enabling delegation in this type of dovecot architecture should bring great benefits: only one backend server access a specific mailbox at a

Hello, We're a rather largish university (largest in Israel), with some 60-70k users, using Dovecot 1.2.14 (we're cautious about moving to 2.0.x for now). We need to provide admin rights to faculty computer/IT staff, so they can have access to the mailboxes of their respective users. We use LDAP as an authentication/authorization backend. Currently, dovecot has a "master

I''ve been working on a plugin called Http Test where I add HTML validation and link checking to controller and integration tests through an after filter in ApplicationController. I used to mix in a bunch of methods that I needed into the ApplicationController class, but to me this had a bad smell, so I broke much of the code out into separate classes that I delegate to.

Alessio Cecchi wrote: [...] > Have you already try to run NFSv4? it's in place on a (very) small sample of mailboxes in dbox format, no issues up to now (Debian Wheezy mainline kernel) > When we switch to netapp and nfsv4 we had many problems (lock problems > and instability) and we had to go immediately to NFSv3. I don't know if > was a netapp problem or nfs client (Debian

Hi! I've got a samba4 pdc, fileserver and whatnot running now for a few months, a number of users logs in there daily, everyone seems quite happy about it going. I've migrated my environment from samba3 NTdomain, where I had LDAP backend for users and I used that to authenticate other services against it: like pam on other servers and postgres DBs. I have succesully managed to do this as

Hey Guys, Wanted to let you know about an event delegation library that interacts with Scriptaculous that we''ve used to make interactive UI elements with really clean code. We used it with Scriptaculous to create the scrolling widgets on the homepage of http://javascriptmvc.com/. It''s called Controller and it is an event delegation library that helps logically organize your

Hi, Following that link https://support.microsoft.com/en-us/kb/932455 we created a delegation to permit some group to add computers into AD. That works except if some computer with same name was already added (even if this computer with same name was previously cleanly removed from AD). Anyone who has idea what we missed? Cheers, M.