similar to: Domain Member Server (wheezy) - Unable to edit permissions of share without usermapping - shall I add to Wiki?

Hello all, Sorry about the top-posting. I have added the bit about the linking (YAY!, I'm helping!). Now if we can clear up the ACL issue, this will be a great day! Summary: To edit ACL's from Windows on a Debian Member server, we need to either 1) map the domain admin to root OR 2) give explicit permissions to Domain Admins with a chmod 0755 and chgrp "MYDOM\Domain Admins"

Hi Rowland, Chown to Administrator seems less flexible than Chgrp to Domain Admins on the face of it. You could add/remove users from the Domain Admins group, which allows/denies them the ability to change the permissions on the share. By changing the owner to Administrator, only those credentials would have that ability, no? What advantages do you predict with the change owner approach? What

Hi Rowland, I'm also not an expert, but with the amount of help you provide on the list, I will defer to you. I'd love to know your rational for prefering the "change ownership to administrator" approach over the "change group to Domain Admins approach". If it's just gut, that's fine too! Thanks! -----Original Message----- From: samba-bounces at

Hello List! I have a Samba AD domain with two virtualized DC's running 4.1.15 and 4.1.17. I have had two member file servers with odd permissions problems that I've now given up on, and decided to start fresh. I have created a File server (FS3) with Debian wheezy, built samba 4.1.17 from source, with configure options of : --with-ads --with-shared-modules=idmap_ad ... and placed the

Hello again Rowland, list! Sorry for the delayed response, and top posting. To recap: I'd like to complete the member server wiki so that ACLs can be set from windows without taking undocumented steps. The three ways I've found to do this are: 1) map root to administrator. (LPH VanBelle's script uses this option.) 2) chmod 0775 then chgrp "<DOMAIN>\Domain Admins"

On 27/02/15 19:09, Shane Robinson wrote: > Hello again List, Marc, and Louis! > > I'm afraid my message from yesterday may have been TL;DR. The short version > is as follows: > > Following the wiki's for AD member server (building from source on Debian > Wheezy) and Setting up shares with Windows acls did not give the expected > results > > First, I needed to

On 27/02/15 19:46, Shane Robinson wrote: > Hello all, > > Sorry about the top-posting. > > I have added the bit about the linking (YAY!, I'm helping!). > > Now if we can clear up the ACL issue, this will be a great day! > > Summary: To edit ACL's from Windows on a Debian Member server, we need to > either > 1) map the domain admin to root OR > 2) give

Hi Davor, If the mapping of administrator to root is not ideal, I do like the idea of having a specific FileShareAdmin group. But, why chown and not simply chgrp? Thanks! Shane Robinson Chief Administrative Officer SimpeQ Care Inc. t. 604.988.3103 ext. 104 c. 604.506.3311 f. 604.988.3105 Please consider the environment before printing this email. -----Original Message----- From:

On 27/02/15 20:07, Shane Robinson wrote: > Hi Rowland, > > Chown to Administrator seems less flexible than Chgrp to Domain Admins on > the face of it. You could add/remove users from the Domain Admins group, > which allows/denies them the ability to change the permissions on the share. > By changing the owner to Administrator, only those credentials would have > that ability,

On 27/02/15 21:00, Shane Robinson wrote: > Hi Rowland, > > I'm also not an expert, but with the amount of help you provide on the list, > I will defer to you. > > I'd love to know your rational for prefering the "change ownership to > administrator" approach over the "change group to Domain Admins approach". > If it's just gut, that's

Forgot to add the list in the TO line! Shane Robinson Chief Administrative Officer SimpeQ Care Inc. t. 604.988.3103 ext. 104 c. 604.506.3311 f. 604.988.3105 Please consider the environment before printing this email. -----Original Message----- From: Shane Robinson [mailto:srobinson at simpeq.ca] Sent: Wednesday, March 04, 2015 12:32 PM To: 'Rowland Penny' Subject: RE: [Samba] Domain

2015-03-04 21:35 GMT+01:00 Shane Robinson <srobinson at simpeq.ca>: > Hi Davor, > > If the mapping of administrator to root is not ideal, I do like the idea of > having a specific FileShareAdmin group. > > But, why chown and not simply chgrp? > If you consider 'root' as a BUILTIN\Administrator equivivalent it might work changing both Share and DACL "the

2015-03-04 19:59 GMT+01:00 Rowland Penny <rowlandpenny at googlemail.com>: > On 04/03/15 18:31, Shane Robinson wrote: >> >> Hello again Rowland, list! >> >> Sorry for the delayed response, and top posting. >> >> To recap: >> I'd like to complete the member server wiki so that ACLs can be set from >> windows without taking undocumented

Hello Rowland, Oh dear! I do feel rather silly. :/ Thanks so much for your patience! I think I'll clarify the wiki (which does mention this, but only mentions the local administrator). When I read it, it mentions that there will be mapping for non-domain accounts in TDB. I (quite wrongly) assumed that my domain administrator was not included in this, and, therefore, would need a UIDnumber

On 04/03/15 18:31, Shane Robinson wrote: > Hello again Rowland, list! > > Sorry for the delayed response, and top posting. > > To recap: > I'd like to complete the member server wiki so that ACLs can be set from > windows without taking undocumented steps. > > The three ways I've found to do this are: > > 1) map root to administrator. (LPH VanBelle's

Hello list! I have a newish Samba 4.1.4 (from git) AD DC running in an Ubuntu Precise KVM guest. It seems to be running well. Recent list posts have led me to set up a second instance of samba/ubuntu as a file server. Like the domain controller, Samba was built from git, but then it was configured using the "Samba/Domain Member" wiki. I added the sfu attributes to a few users/groups

On 04/03/15 19:25, Davor Vusir wrote: > If I remember correctly it doesn't matter what combinations you > 'chmod' to. It changes to 755 as soon as you change ACLs from Windows. > I suggest you add uid- and gidnumber to all users and groups and chown > to a user:group (or perhaps group:group if possible). For example > chown FileShareAdmin:FileShareAdminGroup and let the

Hello list! Some of you may recall my recent semi-spamming of this wonderful list with questions about acl problems on a member server. It turns out that I should not have immediately assigned a UIDnumber to Administrator, nor a GIDNumber to Domain Admins. :( I have removed the NIS attributes for Administrator and Domain Admins in ADUC, and have not been able to login to the member server as

Hi all, i have a xen 4.3 installation and would like to have a bridge bond szenario: *** eth0 eth1 | | bond0 | br0 | vif = [ ''bridge=br0,mac=xx:xx:xx:xx:xx:xx'' ] *** With the network script in debian wheezy *** /etc/network/interfaces auto bond0 iface bond0 inet manual slaves eth0 eth1

I''m not sure if this is a problem with the iscsitarget or zfs. I''d greatly appreciate it if it gets moved to the proper list. Well I''m just about out of ideas on what might be wrong.. Quick history: I installed OS 2008.05 when it was SNV_86 to try out ZFS with VMWare. Found out that multilun''s were being treated as multipaths so waited till SNV_94 came out to