similar to: Use Samba with ACL for read Active Directory and set Permissions via it.

Thank you so much. No, I'm not. I joined my linux to Windows domain because of AD. I can define some users in my Linux and Windows clients use it to open share and ... but my problem is that I have a lot of users and groups and Redefine all of them in Linux is a little silly :(. I joined my Linux to Windows domain because of use AD users and groups. About your question : "Where did you

You right. I joined my Linux box into Windows domain.Of course. I attached my "smb.conf". Can you see it? On Saturday, December 27, 2014 3:36 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: On 27/12/14 06:44, Jason Long wrote: > Thank you so much. > No, I'm not. I joined my linux to Windows domain because of AD. I can define some users in my Linux

Thank you so much.I changed my "smb.conf" and "password-auth-ac". I attached two file for you and you can see them. My problem not solved :( and login windows showed and not accept my username and password, I attached it too.?I paste my "fstab" file here and as you see the "acl" is enabled for "root" : ## /etc/fstab# Created by anaconda on Wed Dec

I never used four different Workgroup or Domain. My domain is "jasondomain" and as you see my last "smb.conf" it is. I change "MYGROUP" to "jasondomain" but problem not solved. On Saturday, December 27, 2014 7:02 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: On 27/12/14 14:18, Jason Long wrote: > Thank you so much. > I

Thank you so much. I changed "SAMDOM" to "jasondomain" and also "winbind use default domain = no" but problem exist. int he photo that I sent, I changed "WORKGROUP" to "jasondomain" too. I have a question, My domain have a prefix with ".jj" and it is "jasondomain.jj". I changed : [global] workgroup = JASONDOMAIN.JJ server

I use this script to create folders for users #!/bin/bash if [ ! -e /data/homes/$1/$2 ]; then /usr/bin/mkdir -p /data/homes/$1/$2 /usr/bin/chown "$2":"Domain Users" /data/homes/$1/$2 /usr/bin/chmod g+s /data/homes/$1/$2 /usr/bin/chmod 770 /data/homes/$1/$2 /usr/bin/setfacl -m g:"domain admins":rwx /data/homes/$1/$2

Thank you so much. Thus I must change "idmap config JASONDOMAIN.JJ:backend = ad " to "idmap config JASONDOMAIN:backend = ad". How about Workgroup? is must change "JASONDOMAIN" too? About your question I must say that I Test this share via Linux too and Windows and Linux has same problem. About "What I would do is, install the OpenSSH server on the linux machine,

Thank you so much. You right, My realm is "jasondomaini.jasondomain.jj" and I change configure as below : [global] workgroup = JASONDOMAINI server string = Samba Server Version %v # logs split per machine log file = /var/log/samba/log.%m # max 50KB per log file, then rotate max log size = 50 security = ADS realm = JASONDOMAINI.JASONDOMAIN.JJ passdb backend = tdbsam load printers = yes

Thank you so much. I did some changes like below : /dev/mapper/vg_print-lv_root / ext4 user_xattr,acl,defaults 1 1 Then "lsof | grep /dev/mapper/vg_print-lv_root" not have any output. I added below lines to [global] section too : vfs objects = acl_xattr map acl inherit = Yes store dos attributes = Yes But about below commands can you tell me more? net

Thank you so much but I run below commands on linux : # net rpc rights grant 'jasondomain\Domain Admins' SeDiskOperatorPrivilege -Uadministrator # net rpc rights list accounts -Uadministrator it ask me a password for "administrator: Enter administrator's password: Could not connect to server 127.0.0.1 Connection failed: NT_STATUS_NO_LOGON_SERVERS Must I enter windows

Thanks. I changed the command as below : #net rpc rights grant 'jasondomain\Domain Admins' SeDiskOperatorPrivilege -U jasondomain\\administrator -I 192.168.1.1 But Got below error : Could not connect to server 192.168.1.1 Connection failed: NT_STATUS_INVALID_WORKSTATION Cheers. On Wednesday, December 31, 2014 1:35 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: On

Thank you. Command show below error : Could not connect to server 192.168.1.1 Connection failed: NT_STATUS_INVALID_WORKSTATION :( On Wednesday, December 31, 2014 2:05 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: On 31/12/14 09:55, Jason Long wrote: > Thanks. > I changed the command as below : > > #net rpc rights grant 'jasondomain\Domain Admins'

Thanks. I enter "net ads testjoin" and it show me : ads_connect: No logon servers Join to domain is not valid: No logon servers If it is incorrect, Why I can Login to Linux via Windows account? As you see, I followed the steps on Video. :(. On Saturday, January 3, 2015 1:13 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: On 03/01/15 05:41, Jason Long wrote: >

Thank you. I used below videos for join my Linux Box to Windows domain : http://www.youtube.com/watch?v=Y3TFPDT9uic Please look at this video and I used instructions in it and LikeWiseOpen tool. Cheers. On Saturday, January 3, 2015 5:45 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: On 03/01/15 12:38, Jason Long wrote: > Thanks. > > I enter "net ads

Thanks a lot. I enter the command and result is : Using short domain name -- JASONDOMAINI Joined 'PRINTMAH' to dns domain 'JASONDOMAIN.JJ' but after run "net rpc testjoin" : Unable to find a suitable server for domain JASONDOMAINI Join to domain 'JASONDOMAINI' is not valid: NT_STATUS_UNSUCCESSFUL I guess I understand what is my problem. I'm really sorry :(.

On 04/01/15 13:00, Rowland Penny wrote: > On 04/01/15 10:17, Jason Long wrote: >> Thanks a lot. >> I enter the command and result is : >> >> Using short domain name -- JASONDOMAINI >> Joined 'PRINTMAH' to dns domain 'JASONDOMAIN.JJ' >> but after run "net rpc testjoin" : >> >> Unable to find a suitable server for domain

On 05/01/15 07:02, Jason Long wrote: > Thanks a lot. > I changed the below lines to correct domain name : > > idmap config JASONDOMAIN : range = 10000-999999 > idmap config JASONDOMAIN : schema_mode = rfc2307 > > and after join, the command "net rpc testjoin" show same error : > > Unable to find a suitable server for domain JASONDOMAINI > Join to domain

On 05/01/15 11:09, Jason Long wrote: > > > Thank you. > > My Windows is Windows server 2008 R2. > About realm name, My domain name is "JASONDOMAIN.JJ". > My Windows not have any Workgroup Name. It is Domain. > > > Thanks > > > > > On Monday, January 5, 2015 1:05 AM, Rowland Penny <rowlandpenny at googlemail.com> wrote: > On 05/01/15

On 06/01/15 06:17, Jason Long wrote: > Thanks. > My domain name is "jasondomain.jj" and backend is "jasondomaini". No, your realm name is "jasondomain.jj" and it would seem that your domain name is "jasondomaini", the domain name can also be known as the 'workgroup' name. Set smb.conf to match this: [global] workgroup =

On 07/01/15 10:51, Jason Long wrote: > Thank you. > I changed my "krb5.conf" as below : > > > [logging] > default = FILE:/var/log/krb5libs.log > kdc = FILE:/var/log/krb5kdc.log > admin_server = FILE:/var/log/kadmind.log > > [libdefaults] > default_realm = JASONDOMAIN.JJ > dns_lookup_realm = false > dns_lookup_kdc = true > ticket_lifetime = 24h