similar to: Samba 4 auditing

Hi David Thanks you for reply, are you sure about this? Windows and Samba SMB byte range locking feature doesn't allow this by locking regions of a single file ? From: "David Bear" <dwbear75 at gmail.com> To: "Dante F. B. Colò" <dante.colo at stwbrasil.com> Cc: "samba" <samba at lists.samba.org> Sent: Friday, April 7, 2017 1:59:56 PM

Hello Marc I already tried the first option the nt 4.0 way, but pointing the script to a network path (UNC path) instead of physical path , is it possible ? Best Regards Dante F.B. Col? ----- Original Message ----- From: "Marc Muehlfeld" <mmuehlfeld at samba.org> To: "samba" <samba at lists.samba.org> Sent: Friday, May 1, 2015 2:10:35 PM Subject: Re:

On Tue, 5 Sep 2017 11:17:56 -0300 (BRT) Dante Colo via samba <samba at lists.samba.org> wrote: > Hello > > Is there anyway to restrict a user to logon on domain or connect to a > Samba AD server only from some specific client machines ? > > Regards > Dante > > Read in 'man smb.conf' about 'hosts deny' and 'hosts allow' Rowland

On 08. aug. 2018 22:30, Dante Colo wrote: > > If you add to vfs module to a share you also have to explicit add acl_xattr , that's what i do when i want to add another module and keep acl_xattr on the same share, if i'm not doing right way someone correct me . > I am already have 'vfs objects = zfsacl' set for my ZFS shares so acl_xattr does not help at all.

On 06. aug. 2018 16:37, Oleg Cherkasov via samba wrote: > On 06. aug. 2018 15:15, Oleg Cherkasov via samba wrote: >> >> This morning three of our FreeBSD-11.1-p11 servers with Samba 4.7.7 >> installations started to ignore ACL settings and reject user access to >> shares.  All three servers are members of DC running on Windows Server >> 2008R2.  Everything has

Hello everyone, Someone can explain me please how netlogon scripts work on Samba running on active directory mode ? Is the "logon script " parameter still working ? I'm trying setup some scripts but still have no success .

Hi Everyone ! I note that all of samba AD server that i maintain are not so fast in terms of data transfer, more specifically none of them go over 40 MB/s , one particularly which i'm trying to find out why doesn't go over 20 MB/s , transfering data using other protocols like FTP , rsync , rsync over ssh on any of these machines i can easily achieve 80 MB/s ,i also can get the same on

Hi people, I'm testing Samba 4.0.17 running as classic pdc mode under FreeBSD 10 and 9.2 , all shares are on ZFS volumes, i would like to use UFS instead of ZFS , but according the wiki page https://wiki.freebsd.org/NFSv4_ACLs nfsv4 inheritance flags works only with ZFS , i tried the parameters inherit acls and inherit permissions with module vfs_zfsacl on the UFS shares but got no success

Hello James I read this article, it's not working on Windows clients. ----- Original Message ----- From: lingpanda101 at gmail.com To: samba at lists.samba.org Sent: Monday, August 1, 2016 2:05:09 PM Subject: Re: [Samba] Samba 4 ad client not syncing time On 8/1/2016 12:56 PM, Dante F. B. Colò wrote: > Hello folks > > I've deployed Samba 4.0.26 using Sernet binary packages

Hi, I have an issue on a Samba 4.5 running as AD DC compiled from source installed on a CentOS 7.3 server upgraded from 4.3 which had the same problem ,file transfers of a single file between Samba and windows machines don't go over 13 MB/s while a transfer over ssh( scp or sftp) and rsync goes over 80 and 100 MB/s respectively, network hardware switches and machines ethernet cards are all

Hello, I'm looking for a way to log the following attributes for all authentication activity (LDAP bind, Kerberos, SMB / CIFS, etc.). I would like to see: * Principle name (user name) * Source IP * Timestamp (including at least seconds if not milliseconds) * Authentication result (success / failure) * Reason for failure: bad password, account lockout, account expired,

Hello everyone I trying find what it happens on my Samba AD servers especially with shared spreadsheets, my personal opinion this feature on Excel is crap and unreliable but many people use it, how does Samba currently behave with this ? Is someone experienced any problem with this ? Frequently happens changes made by other user are lost the spreadsheet opens as read only , the shares are all

On Tue, 12 Sep 2017 19:30:42 +0100 Miguel Medalha via samba <samba at lists.samba.org> wrote: > Your problem probably comes from using the AD DC as a file server. > The file server should be separated, as recommended by the Samba > team. I get close to wire speed on dedicated member servers. > > With version 4.4.2, changes in behaviour for the "server signing" and

Hello, I believe there may be a bug with accounts getting erroneously locked in v4.4.5+. I've checked at all the Internet facing services to find the source of account lockout and I've done packet captures at the DCs, but I cannot find the source of lockout. I've got several accounts locking out for seemingly no reason including some service accounts where the passwords

Hello Is there anyway to restrict IP or client machines that a specific user can connect to a share or restrict share access per IP/client ?

HI all, So I'd like to log the user's operations on some shares. As I need to know who made what when. I'd read a previous answer from Andrew about auditing, so I can see loggued operations. Modified smb.conf : > [global] > vfs objects = dfs_samba4, acl_xattr, full_audit > full_audit:success =none > full_audit:failure = none share is : > [journal] > path =

Hi Rowland Thank you for your reply, i removed them but nothing changed :(, i also tried to remove others thing like the full_audit module to keep the settings simplest as possible but had no effect, i'll try to build samba with profiling support and debug with some tools like gdb which i don't have much experience but i'll try it. The current Samba versions support the

Hi! I am working with Applaince Sophos XG, i am used API(Desenvoving  in test) with audit log samba to information IP and user in log in DC, but i need information about logout, is possible obtein in Samba Audit ? S.O.: Ubuntu 18.04 Samba: 4.9.4 Copilated version Thanks Regards;

Hi experts, Two hopefully quick questions: 1. If I create files with names with special characters, such as ><*:"?\|, on the linux server box, I can see these filenames display just fine. But windows client the special characters do not show up properly. Is there a option to set? I tried: In [global] section: character set = ISO8859-2 client code page = 852

On Tue, Jul 12, 2016 at 11:07:04PM -0500, Arthur Ramsey wrote: > Hello, > > I'm looking for a way to log the following attributes for all > authentication activity (LDAP bind, Kerberos, SMB / CIFS, etc.). > > I would like to see: > > * Principle name (user name) > * Source IP > * Timestamp (including at least seconds if not milliseconds) > *