similar to: Enable_extended_ACL_support_in_smb.conf

I am not 100% clear as to when the following is required in smb.conf on a member server: vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#Enable_extended_ACL_support_in_smb.conf I have confirmed Samba is compiled with ACL support: [root at centos7member ~]# smbd -b | grep HAVE_LIBACL

On 27 January 2016 at 17:40, mathias dufresne <infractory at gmail.com> wrote: > Hi, > > Samba DC generates a krb5.conf into private directory, where the database > is hold. > > Its content should be that: > [libdefaults] > default_realm = SAMBA.DOMAIN.TLD > dns_lookup_realm = false > dns_lookup_kdc = true > > Should only as I get

On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: > On 26/01/16 20:54, Henry McLaughlin wrote: > >> [root at centos7member ~]# net rpc rights list accounts >> -U'TESTING\administrator' >> Enter TESTING\administrator's password: >> Could not connect to server 127.0.0.1 >> Connection failed: NT_STATUS_CONNECTION_REFUSED

On 27 January 2016 at 18:09, mathias dufresne <infractory at gmail.com> wrote: > Use the same krb5.conf on members as on DC, no? > > Tried... same error msg. > 2016-01-27 7:42 GMT+01:00 Henry McLaughlin <henry at incred.com.au>: > >> On 27 January 2016 at 17:40, mathias dufresne <infractory at gmail.com> >> wrote: >> >> > Hi, >>

I now have my DC working and member server working. I am using this guide to create a file server with Windows ACLs: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs I am unsure of this section of the guide: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#Enable_extended_ACL_support_in_smb.conf The following is only required on Domain Members and not on Domain Controllers,

[root at centos7member ~]# net rpc rights list accounts -U'TESTING\administrator' Enter TESTING\administrator's password: Could not connect to server 127.0.0.1 Connection failed: NT_STATUS_CONNECTION_REFUSED [root at centos7member ~]# [root at centos7member ~]# cat /etc/samba/smb.conf [global] netbios name = centos7member security = ADS workgroup = TESTING

On 27 January 2016 at 20:27, Rowland penny <rpenny at samba.org> wrote: > On 27/01/16 01:03, Henry McLaughlin wrote: > >> On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: >> >> On 26/01/16 20:54, Henry McLaughlin wrote: >>> >>> [root at centos7member ~]# net rpc rights list accounts >>>>

On 27 January 2016 at 21:45, Rowland penny <rpenny at samba.org> wrote: > On 27/01/16 10:07, Henry McLaughlin wrote: > >> On 27 January 2016 at 20:27, Rowland penny <rpenny at samba.org> wrote: >> >> On 27/01/16 01:03, Henry McLaughlin wrote: >>> >>> On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: >>>>

I have created a [home] share: user at jupiter:~$ sudo ls -l /srv/samba/ total 24 drwxrwxr-x 2 root domain admins 4096 Nov 22 21:38 Demo drwxrwxr-x 2 root domain admins 4096 Nov 15 11:51 Finance drwxrwxr-x+ 2 root domain admins 4096 Nov 25 08:08 home drwxrwxr-x+ 9 root domain admins 4096 Nov 24 21:06 Printer_drivers When i try to set the ACLs in Windows I get "Permission Denied" In

On 20 January 2016 at 07:08, Rowland penny <rpenny at samba.org> wrote: > On 19/01/16 20:00, Henry McLaughlin wrote: > >> >> On 20 January 2016 at 06:43, Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>> wrote: >> >> On 19/01/16 19:34, Henry McLaughlin wrote: >> >> I have sssd configured and working

Use the same krb5.conf on members as on DC, no? 2016-01-27 7:42 GMT+01:00 Henry McLaughlin <henry at incred.com.au>: > On 27 January 2016 at 17:40, mathias dufresne <infractory at gmail.com> > wrote: > > > Hi, > > > > Samba DC generates a krb5.conf into private directory, where the database > > is hold. > > > > Its content should be that:

And please also do check hostname -s hostname -d hostname -f if you see somewhere 127.0.0.1 or incorrect hostname. Check /etc/hosts Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mathias dufresne > Verzonden: woensdag 27 januari 2016 7:40 > Aan: Henry McLaughlin > CC: samba > Onderwerp: Re: [Samba]

Hi, Samba DC generates a krb5.conf into private directory, where the database is hold. Its content should be that: [libdefaults] default_realm = SAMBA.DOMAIN.TLD dns_lookup_realm = false dns_lookup_kdc = true Should only as I get it from a forgotten test platform where I set dns_lookup_realm = true Cheers, mathias 2016-01-27 2:03 GMT+01:00 Henry McLaughlin <henry

On 27/01/16 10:07, Henry McLaughlin wrote: > On 27 January 2016 at 20:27, Rowland penny <rpenny at samba.org> wrote: > >> On 27/01/16 01:03, Henry McLaughlin wrote: >> >>> On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: >>> >>> On 26/01/16 20:54, Henry McLaughlin wrote: >>>> [root at centos7member ~]# net

On 27/01/16 01:03, Henry McLaughlin wrote: > On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: > >> On 26/01/16 20:54, Henry McLaughlin wrote: >> >>> [root at centos7member ~]# net rpc rights list accounts >>> -U'TESTING\administrator' >>> Enter TESTING\administrator's password: >>> Could not connect to

On 15 January 2016 at 21:32, Rowland penny <rpenny at samba.org> wrote: > On 15/01/16 09:07, Henry McLaughlin wrote: > >> root at aphrodite:/# net rpc rights list accounts -U'DOMAIN\administrator' >> Enter DOMAIN\administrator's password: >> BUILTIN\Print Operators >> No privileges assigned >> >> BUILTIN\Account Operators >> No

Kind regards, Henry McLaughlin 0411 444 363 (Mobile) henry at incred.com.au PO Box 329 Romsey VIC 3434 On 15 January 2016 at 23:24, Rowland penny <rpenny at samba.org> wrote: > On 15/01/16 12:08, Henry McLaughlin wrote: > >> >> >> On 15 January 2016 at 22:28, Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>> wrote: >>

I am new to CentOS and trying to setup a Samba file server however when discovering domains I receive an authorisation error: [root at sssd-testing ~]# id uid=0(root) gid=0(root) groups=0(root) [root at sssd-testing ~]# realm discover realm: Couldn't discover realms: Not authorized to perform this action

Rowland, The wiki suggested doing "smbd -b | grep HAVE_LIBACL" and expecting to get back "HAVE_LIBACL". This is not the case on our IBM system with 4.10.6. The current version from IBM is 4.10.13 - considering upgrading in the hopes "HAVE_LIBACL" is present if I really need it. On the other hand, "smbd -b" does report that smbd was built with vfs_aixacl

I have installed Sernet Samba however after installation I cannot confirm the version: samba -V bash: samba: command not found