similar to: Shares requiring "Everyone" access...

I have been using Samba4 for ages and love it as a DC and a print-server. I just setup my first member-server designed solely to host file shares, and have hit an issue. Group policy is mapping it correctly for the users in the group, but those users are getting an access denied message from their Windows 7 Pro 64bit clients when accessing the share. I have configured ACLs and the box

Alright, even with that change they cannot access the share. I do not have SELinux on this system to my knowledge. The only change since my initial post was changing SAMDOM in my config to TRUEVINE as was pointed out. I then rebooted the server for good measure. People in the AD group FBC are still debied access to the FBC share and people in the AD administration group are still denied access to

Rowland, I commented out what you asked me to, no change. # Global parameters [global] workgroup = TRUEVINE realm = TRUEVINE.LAN netbios name = DC01 server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbi$ # idmap_ldb:use rfc2307 = yes # idmap config *:backend = tdb # idmap

OK, I noticed that also, but why does everything return NT_STATUS_INVALID_SID? Even if I run "smbclient -L \\localhost -U adminnamehere" on the DC itself, I get the error. At this point we are looking at erasing every workstation, wiping the DC, and starting from scratch. It has been a week and not even rolling back to 4.4 fixed it. What should my next steps be? I attached the server

Hi, > Follow this wiki page: > > https://wiki.samba.org/index.php/Setup_a_Samba_print_server#Setup_the_.5Bprinters.5D_share > Then the page you referred and use windows ACLs not posix ACLs done > > I also take it you have given your users & groups uidNumber or > gidNumber attributes. yes, this is a test-environment and i have given the unix-id to administrator,

> On Mon, 21 Nov 2016 13:42:57 +0100 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > >> Hi, >> >> Yes thats correct. >> But try the following. >> Make sure you use the usermapping. >> >> username map = /etc/samba/samba_usermapping >> containing: >> !root = NTDOM\Administrator NTDOM\administrator

On 03/07/15 15:58, Ryan Ashley wrote: > They left a PC on, so I got the info. The info pissed me off, but not > because of the issue. This time it worked flawlessly, but I got the > error from the event log from prior attempts. First, today's results. > > C:\Users\reachfp.KIGM>gpupdate > Updating Policy... > > User Policy update has completed successfully. >

I have created a [home] share: user at jupiter:~$ sudo ls -l /srv/samba/ total 24 drwxrwxr-x 2 root domain admins 4096 Nov 22 21:38 Demo drwxrwxr-x 2 root domain admins 4096 Nov 15 11:51 Finance drwxrwxr-x+ 2 root domain admins 4096 Nov 25 08:08 home drwxrwxr-x+ 9 root domain admins 4096 Nov 24 21:06 Printer_drivers When i try to set the ACLs in Windows I get "Permission Denied" In

Hi list, i have a samba member-server in a samba4-AD with cups. cups works fine, i can print the testpage from cups and from a windowsclient. but, i am not able to upload a printer driver to a samba4 print-server: i followed this howto: https://wiki.samba.org/index.php/Configuring_Point%27n%27Print_automatic_printer_driver_deployment in printmanagement.msc i can add the server, and i can see

On Wed, 26 Oct 2016 17:27:37 -0400 Ryan Ashley via samba <samba at lists.samba.org> wrote: > I guess I should note that it seems like the high SIDs will resolve, > except for 300000. Below is an example. > > root at dc01:~# l /var/lib/samba/sysvol/medarts.lan/ > total 16 > drwxrws---+ 4 MEDARTS\reachfp 3000000 4096 Oct 17 17:45 Policies > drwxrws---+ 2 MEDARTS\reachfp

None of my computers have a UID/GID and my GPO works fine. Add the line i suggested to the share, and setup your rights Gr. Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mourik jan c > heupink > Verzonden: dinsdag 17 november 2015 18:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Permission Issues with

On 11/06/19 11:49, Rowland penny via samba wrote: > On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >> >> On 11/06/19 11:07, Rowland penny via samba wrote: >>> On 11/06/2019 10:34, Sebastian Arcus via samba wrote: >>>> I've just upgraded a Samba AD server to 4.10.2 a few weeks ago from >>>> 4.x (I'm afraid I'm not sure the exact

On 03/07/15 15:18, Ryan Ashley wrote: > The only Unix client I can think of would be the Buffalo NAS. It runs > Samba3 and hosts various shares via SMB. DNS is handled by BIND9 on the > Samba4 DC. DNS does work and the domain name resolves to the IP address > of the server. DHCP is also handled on the DC. As for the GPO's, they're > in the correct place as far as I can tell.

On 11/06/19 11:07, Rowland penny via samba wrote: > On 11/06/2019 10:34, Sebastian Arcus via samba wrote: >> I've just upgraded a Samba AD server to 4.10.2 a few weeks ago from >> 4.x (I'm afraid I'm not sure the exact earlier version) - and since >> then I just haven't managed to pin down the file permissions and >> inheritance on the shares as

On 11/06/19 13:29, Rowland penny via samba wrote: > On 11/06/2019 13:13, Sebastian Arcus via samba wrote: >> >> On 11/06/19 11:49, Rowland penny via samba wrote: >>> On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >>>> >>>> On 11/06/19 11:07, Rowland penny via samba wrote: >>>>> On 11/06/2019 10:34, Sebastian Arcus via samba

Hello! I am following the how to https://wiki.samba.org/index.php/User_home_drives But even though there reported a process for User X does not access the home of Y User, this is happening root at fileserver:/srv/samba# getfacl home/ # file: home/ # owner: root # group: root user::rwx user:root:rwx user:administrator:rwx group::r-x group:root:r-x group:5007:r-x group:domain\040admins:rwx

Alright, things have been fine since the sharing issue, but I finally decided to dig into why my reverse-DNS zones are empty, save one single entry at the client location. What I found was very strange indeed. I have some type of grayed out records I cannot delete that are named after the hostnames of devices on my network. This one has me. Here's a screenshot linked below, and my

> > On the file serever: > > Collected config --- 2019-07-03-10:27 ----------- > > > > Hostname: srv > > DNS Domain: a.b.hu > > FQDN: srv.a.b.hu > > ipaddress: 10.0.3.15 192.168.0.8 > > ----------- > > Samba is running as a Unix domain member > > ----------- > > > > This computer is running Debian 10.0 x86_64 > >

On Sat, 14 Jan 2017 11:17:57 -0500 Ryan Ashley via samba <samba at lists.samba.org> wrote: > Rowland, I commented out what you asked me to, no change. > > # Global parameters > [global] > workgroup = TRUEVINE > realm = TRUEVINE.LAN > netbios name = DC01 > server role = active directory domain controller > server services =

I've just upgraded a Samba AD server to 4.10.2 a few weeks ago from 4.x (I'm afraid I'm not sure the exact earlier version) - and since then I just haven't managed to pin down the file permissions and inheritance on the shares as it's been constantly causing issues. This server is both a file server and a AD DC. The current problem I am facing is the permissions of the