similar to: [Bug 1208] New: --gid-owner ignores non-primary group memberships

I thought this was true, but In troubleshooting a permissions related issue, I see evidence that it is not. In my previous post, I was asking for assistance in trying to figure out why I was unable to create files/folders over the network, but could so so locally. My Active Directory account is a member of group that have full control of a particular folder according to getfacl. I added that

We're using a bunch of AD groups ? all users/groups are created and managed with ADUC. Domain Users is the primary group for all users, plus a few for our departments (and Domain Admins). All groups have their posixGroup attributes filled out. wbinfo --group-info and getent group show the correct membership for all groups except Domain Users. smb.conf: http://pastebin.com/ymrXZJ5u Already

http://bugzilla.mindrot.org/show_bug.cgi?id=1208 Summary: ssh fails to remove control socket when using with subversion Product: Portable OpenSSH Version: 4.3p2 Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: bitbucket at

http://bugzilla.mindrot.org/show_bug.cgi?id=1208 Damien Miller <djm at mindrot.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED AssignedTo|bitbucket at mindrot.org |djm at mindrot.org --- Comment #17 from Damien

Hi all, our setup is Samba 3.3 in W2K8 domain. It seems samba cache group memberships somewhere and after adding user to a new group it's necessary to relogin for that user to get new memberships. Is it possible to eliminate that nasty procedure? Thanks. -- Vladimir Vassiliev

I was used, for users that leave my network, to disable the account but also ''sanitize'' the memberships, eg reset group membership to a default values (normally, 'domain users'). Clearly, using smbldap-tools in a NT domain was easy. How can achieve the same result in a samba AD domain? Seems that avaliable commands/tools (pdbedit, wbinfo, samba-tool) does not have this

On-line signup form are available on our website at www.cavp.ca in the "Membership" section or please call 1-866-940-CAVP (2287) and select option 3 (CAVP treasurer). -------------- The CAVP is now accepting memberships applications. This is a pivotal moment for the CAVP and we need your support. Establishing a solid membership base will determine the organizations ability to function

On Wed, 4 Oct 2017 16:53:19 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > No need to do that, just use 'samba-tool user disable' > > Ahem, Rowland, *I* *NEED* that. > > For internal policies, users that leave my organization have to be > 'sanitized', and

On Wed, 4 Oct 2017 17:54:35 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > Ah, you said disable, when you meant 'delete' > > No, i meant exactly 'disabled'. > > Try to be more clearer: > > a) i cannot delete accounts, at least for years, because local

Mandi! Rowland Penny via samba In chel di` si favelave... > No need to do that, just use 'samba-tool user disable' Ahem, Rowland, *I* *NEED* that. For internal policies, users that leave my organization have to be 'sanitized', and on detail, memberships have to be reset. So, apart some complex scripting, there's some way to do that? If comlex scripting have to be

Hi all, I'm having some very weird issues with some users in a Samba ADS configuration. (:: kerberos logins seems to give users different rights/group memberships ::) Sysinfo: OS: Debian 3.0 + some backports packages Kernel: 2.4.24-1-686-smp (from backports.org) Samba: 3.0.2a (from debian packages fetched from samba) Filesystem: ext3 (no acl patches or acl support) Configuration

We've been using samba w/ ADS for quite ahile now and we're quite happy with it. However, we have run into an interesting impasse recently. We have domains A and B. There is bi-directional trust between the domains. The samba server has membership to domain A. Recently a new share was created and it's access is controlled by the domai ngroup A+group. A+group contains users from

I have a Samba box joined to a Windows 2003 AD. I have noticed a strange problem with adding users to groups. I added user 'shw' to the group 'project1' on the AD. When the user logs in the the Samba box, he does not have the permissions of someone in the 'project1' group. When I run 'id shw', group 'project1' shows up. However when I run 'id'

Hi, I am trying to migrate my old samba3 PDC (with tdb-files) to samba4 AD, on ubuntu 12.04LTS. I first tried L.P.H. van Belle's script to have a base-line. Works fine AFAIK. Then I modified the script to do a classic-upgrade. It seems to work, but when I look at my groups (samba-tool group list), not all groupsmemberships are imported. One of those are my domain-admins. When I check

When adding / removing an existing user to / from an existing group, is there anything more to it than bookkeeping the 'member' and 'memberOf' attributes of the respective entries? I'm currently writing a small tool to maintain POSIX attributes in AD and it seems that membership could be changed without falling back to samba-tool. When it's done and tested I'll

Mandi! Rowland Penny via samba In chel di` si favelave... > In AD you can disable a user very easily by adding 2 to the value stored > in the users 'userAccountControl' attribute and the user wouldn't be > able to log in, but this isn't quite what you want. Only for a sake of completeness, it is the same of the 'D' account flag, right? > To do what you

Hi Matthias, On 6/30/23 15:40, Matthias Leopold via samba wrote: > Can someone explain what is happening or where I need to tune? this is by design. :) The only reliable way (lacking S4U2SELF support) to get group membership for an AD user, is using the group list the DC passes along to us as part of the authentication process. We're trying extra hard to store this data *persistently*

Hi! Recently I've been working with the rest of the X.Org board to try to get X.org access to VESA memberships so that contributors that don't have an employer who is able/willing to join VESA can potentially get access to the various benefits of a VESA membership, such as access to DisplayPort specifications. Since I need to gather a list of interested X.org members, I'd like to know

Hi, I have these following configurations: Active Directory 1 = DomainA.com AD1 Primary Group = Domain Users AD1 Group 1 = Linux (member: DomainB\ad2testuser1) Server joined = linux1.DomainA.com (configured Kerberos and Winbind Samba4 from sernet) Active Directory 2 = DomainB.com AD2 Primary Group = Domain Users (member: DomainB\ad2testuser1) AD2 User 1 = ad2testuser1 note: (1)

Mandi! Rowland Penny via samba In chel di` si favelave... > Ah, you said disable, when you meant 'delete' No, i meant exactly 'disabled'. Try to be more clearer: a) i cannot delete accounts, at least for years, because local law mandates accountability, and so i need SID/UID. OK, i can save SID/UID elsewhere, but... b) i want to ''reset'' group membership