similar to: smbxcals

On 2016-01-10 at 17:58 +0000, Rowland penny wrote: > On 10/01/16 17:05, Partha Sarathi wrote: > > > > > This could have a lot to do with the fact that idmap_rid & > > > idmap_autorid calculate the uids differently i.e if you have RID > > > '2025000', autorid would calculate this as '1102500000' , rid > > > would calculate this as

Thanks for the reply. Now we end-up with mix uid/gid from both ranges in cache TDBs. Few user logins are denied with below error in smbd.log, *[2016/01/07 11:39:44.475960, 1, pid=5202] ../source3/auth/token_util.c:430(add_local_groups* ** SID S-1-5-21-3082371790-1274690562-2878062458-5771 -> getpwuid(10005771) failed** wbinfo --user-info=mariond mariond:*:10015138:110000513:Marion,

adding samba list On Fri, Jan 8, 2016 at 10:22 AM, Partha Sarathi <parthasarathi.bl at gmail.com> wrote: > Hi, > > > We have a customer who facing security issues after changing RID idmap > backend to AUTORID. > > > The History of the issue looks as below, > > 1) When samba configured with RID idmap backend customer requested to > change few permissions,

Hi Folks, We are seeing an issues where two OS X El Capitan clients opened a folder and one of them creates a "New Folder" (untitled folder) and renames it, on the other MAC client explorer the "unititled folder" remains same and unable to access it. Note: The samba version is 4.1.19 and we have not used the vfs_fruit module. attached packet capture where the SMB2 Find

Hi Jeremy, > > Do you think requesting this as a feature for smbstatus in the Samba bug > > tracker does make sense? > > Yes please. We certainly need a 'protocol' field somewhere > in the smbstatus output I think. done. https://bugzilla.samba.org/show_bug.cgi?id=11262 -- Adi

====================================================== "I read part of it all the way through." Samuel Goldwyn ====================================================== Release Announcements --------------------- This is the latest stable release of Samba 4.4. This release fixes some regressions introduced by the last security fixes. Please see bug

====================================================== "I read part of it all the way through." Samuel Goldwyn ====================================================== Release Announcements --------------------- This is the latest stable release of Samba 4.4. This release fixes some regressions introduced by the last security fixes. Please see bug

Hi, we are migrating our fileserver from an old novell netware system to a samba4 system. With netware all ACL were stored in a database, so that it was possible to quickly find which files one user or group had access to. I'm investigating the possibility of writing ntfs ACL on a database with samba. The module vfs_acl_tdb is able to do this, but values are hashed so that the db is not

No its not so hard to build. Basilcy its : add sid source repo. Check for build depends. apt-get build-dep samba for the missing files, get these sources also and check build-dep. Build them, add them to local repo, apt-update Now again : apt-get build-dep samba And you are ready to build samba. I do change the changelog in debian/ folder. I added "-lvb1" to it so it wont

Hi list, I have managed to grant a specific user access to a sub-folder (sub-level 3 from the share's entry point, I think) on a Samba 4 share he/she is not allowed and not able to access in total/general. I tried 2 different ways with one of them working. I'd like to discuss why that is. For the sake of an example, let's say the share is for teaching material (exam templates,

On Fri, Mar 18, 2016 at 10:08:42AM -0700, Jeremy Allison wrote: > On Wed, Mar 16, 2016 at 11:13:12AM +0100, Matteo Maretto wrote: > > Hi, > > we are migrating our fileserver from an old novell netware system to > > a samba4 system. With netware all ACL were stored in a database, so > > that it was possible to quickly find which files one user or group > > had

Thanks for the first reply, Jeremy. What about the (future) implementation of RichACL? Will there be any native Linux Client support along with the SMB2/SMB3 protocol? I know, there is a native implemenation for RichACLs in ext4 FS. Unfortunately, smbcals is not a native Linux ACL Tool and has a very unhandy syntax. I just tested some days ago. ;-) I am looking for a solution that allows the

I use rsync for backing up windows. After a restore of Desktop.ini I recognize that the hidden attribut and the system attribut will not been restored. I know, this are no unix attributes. But is there a way to backup and restore the windows attributes too? Thanks Matthias -- Don't Panic

Thank you guys for your reply. I tried but it still does not work On 10/14/2015 5:37 PM, Stéphane PURNELLE wrote: > > These parameters must be put on share section, not in global section > > hide unreadable = yes > hide unwriteable files = yes > example > > [smb_shr1] > path = /mnt/LV002/share1 > read only = no > create mode = 0777

Hi, The security tab of Windows does not accept unix groupnames, although they do work in icacls.exe on the commandline. It displays existing group rights, and allows to modify them, but does not allow to add new rights for unix groups, and the search function also does not list unix groups. Is there a trick to make them work in the security tab? I don't have OUs or AD-groups, this is classic

> Hi, this is because when you use '--as-sddl', the python code does this: > > if as_sddl: > try: > domain_sid = security.dom_sid(samdb.domain_sid) > except: > raise CommandError("Unable to read domain SID from > configuration files") >

Hi, Is there any drawbacks of using "nt acl support = No" on a share ? I mean breaking applications ? I do not want users to change permissions from Windows. With nt acl support = No, icacls returns no permissions Users have Full Control. It's fine for me that Security tab disappears. Users can access Linux shell, and i only want users to modify permissions from Linux.

Dear all, what is about the support for POSIX ACL in Samba protocol implementation of SMB2 and SMB3? >From what I extracted from SNIA and SambaXP developer conference talks and as well as the official Samba Wiki, support for POSIX ACL in SMB2 and SMB3 has been completely abandonned. Am I right? If so, is there any other possibility to allow Linux Clients to natively access access control lists

Hi, I need to set ACLs on a samba server, and are using icacls in Win7. It takes several hours to edit an ACL with inheritance, affecting a directory tree with 300,000 files. Server cpu > 70%, client cpu < 20%. Is there a way how I can speed this up? Using "setfattr -R" in Linux does it in approximately 2 minutes, but I want real Windows ACLs. There are 300.000 files in a

Greetings, All! I've discovered a nasty mismatch in my recently upgraded domain. It seems that a number of builtin groups have mappings in idmap.ldb that overlap with posixAccount mappings in the sam.ldb. Namely, # file: var/lib/samba/sysvol/ads.example.com/scripts/ # owner: root # group: 544 user::rwx user:root:rwx group::rwx group:544:rwx group:30000:r-x group:30001:rwx