similar to: Samba 3.6.6 idmap problem

Some empirical testing shows that if I am using the idmap_ad module the template homedir parameter in smb.conf is ignored. I would just like to determine if this is the correct behaviour or if I am doing something wrong. JAB. -- Jonathan A. Buzzard Email: jonathan (at) buzzard.me.uk Fife, United Kingdom.

Hello, We have a Red Hat 5.3 SAMBA 3.0.33-3.7 Server that shares a few directories to 4 other servers. The other servers are Red Hat 5.3 and one Solaris 10 server. I configured SAMBA to do the following for each share; Force User: User1 Force Group: Group1 Create Mask: 02770 Security Mask: 02770 Directory Mask: 02770 Directory Security Mask: 02770 Inherit Permissions: Yes Inherit ACLS: Yes

Hi all, I'm trying to set up a samba (3.6.6, debian wheezy 64bit) member server on a 2008R2 domain. I'd like to be able to specify the uidnumbers users get on here in AD but I'm getting really erratic results. I've tried changing various range options, and as far as I can tell it works sometimes, but not others - don't know why. I have 2 users I've specifically set up,

Hi folks, In our happy adventures in ID mapping between windows and Unix, I've come across an odd issue with the idmap : script mapping method when using tdb2. Basically - my idmap script behaves like this: #idmap.sh IDTOSID GID 123456 SID:S-blah-blah-blah as one would hope, and as per the requirements in the idmap_tdb2 man page. Similarly, it'll return UID:123545 or GID:1234356 in

I am using Samba 3.6.6 on Debian Wheezy. I want to be able to change www files on my dev server using my macbook. So I setup samba and made a share for the /var/www directory. I added the users bart & root to samba to connect. And connect using command K and then smb://192.168.2.100 (my samba server). As apache uses www-data as a user and group for the www files I use force user and

What is supposed to happen to the ownership of files/directories of user in Active Directory on a Samba (3.6.6) share after the user has been removed from Active Directory? I see the userid is set to the uid number but admins on the share (not root) cannot remove directories owned by the user. As a root user I can delete the files or changed ownership. I would expect there is some way to make

Dear list, Setup is: Solaris 11 ZFS + Samba 3.5.10 What is the recommended way nowadays of performing strict permissions mapping between Samba and Windows NT 6.1 ? And a more broader question: is it desirable ? As we know ZFS has native NFSv4 ACL's and this would mean that permissions applied on Windows side should have an exact match on the ZFS side. Is it acl_xattr module still needed ?

Hello All, I'm trying to set up linux ssh/shell authentication on a CentOS_6.2 server running smbd version 3.5.10-114 using winbind/smb/pam. We've done this successfully using the tdb backend but wanted users to get the same UID/GID on every machine. Switched to rid for the backend but users still got a foreign number for UID and their default group was always Domain Users. So I'm

Hi, I'm trying to convert an old system on Solaris 10 that uses the smbpasswd file authentication method to a system that authenticates against Active Directory. I've managed to get winbind working but of course this just allocates UIDs as it sees fit whereas the smbpasswd file method used the UID from the /etc/passwd file. The user codes on the Solaris server match the user

All, I'm in the process of migrating a samba server from Solaris 10 (running 3.0.37) to Solaris 11 Express (running 3.5.5). The system is joined to a Win2k3 Active Directory. Migrating the configuration worked fine, the shares are available and everything mostly works as intended. The problem we're having is with the syntax of authentication requests from Windows client machines. On the

Hi all. Is it just me or there's no way to restrict access to [homes] share to members of an AD group? Or is it treated like an ordinary Unix group via Winbind mapping? If I use "valid users = %S" (to give access to the home only to the owner), every domain user (worse: every user in any trusted domain) can access his/her own share... if path exists. That leads to the second

Hello everyone, Samba 3.6.9 on CentOS 6.4. With "security = ads", winbind doesn't authenticate requests that prepend a not-existent domain to the username. Users that have logged into the domain authenticate transparently to squid with NTLM (format is domain\username), but not users that are logged in locally or into another domain with the same username and password (format is

Hi, is it possible, to use DFS and show the correct values of free space? I set up a DFS-share located on filesystem1 (size 50GB) and linked shares of another server to this share (msdfs:<fs>\share): share1: size 110TB share2: size 50TB share3: size 20TB But connecting to the DFS-share, the disk size of this network drive ist 50GB. Unfortunately files larger than 50GB can not be copied

Hello Marc, Am 24.10.2013 21:00, schrieb Marc Muehlfeld: > Hello Thoralf, > > Am 24.10.2013 20:32, schrieb "Th. S?ldenwagner": >> is it possible to hide/restrict access to the home drives of our samba >> users when accessing them directly via netbios address? >> >> The server is running at school and there are several pupils who have >> the ability

Hi, I have a working Samba 4 AD which is used by Windows clients. I also have an LDAP server for use with Linux servers and web applications. What I really need is the Samba 4 AD to be the single maintained authentication database while providing an LDAP compatible server for web applications (and preferably Linux). I've looked at extending the Samba 4 schema, but that doesn't seem

When a file is created with samba 3.5.x or 3.6.x, it is created effective read-only: ~ # getfacl Microsoft\ Word-Dokument\ \(neu\).docx # file: Microsoft\040Word-Dokument\040(neu).docx # owner: root # group: 11816 user::rwx user:11582:rwx #effective:r-- group::rwx #effective:r-- mask::r-- other::--- The ACL-settings for the parent directory are ok: ~ # getfacl . #

Hi - I am working through the migration from samba3+ldap to samba4 ads and discovered some inconsistencies in our data in the process. We have several user/group pairs that have the same SID because somehow uidNumber and gidNumber were set to the same number. Obviously this must be corrected for us to use the migration tool - I am just a little unsure of how best to fix this. My first

Hello All! Can't make Samba use acl and extended user attributes to save DOS file attributes. Please, help me configure properly. My steps on Windows XP: 1 - Open share 2 - Open property of file 1122/22.bmp 3 - Check file attribute: hidden 4 - Click Apply 5 - Click Close 6 - Open property again 7 - Attribute Hidden not checked. Samba dont save attributes!!! getfattr -d

Hello, does this bug still exists: http://web.archiveorange.com/archive/v/IPyW4fzzpEetiWKnJyfJ ? It seems that I have the same problem, although "store dos attributes" is set (Samba 3.6.18; GPFS 3.5.0-11). Here my share definition: [shared] comment = <comment> path = <path> available = yes

Running Samba 4.0.9, we have added a pair of Samba4 domain controllers to an existing Win2003 domain. How do we determine whether RFC2037 attributes already exist in the domain? And how would we go about adding them to an already existing domain?