similar to: Fwd: Re: W7 client cannot adjust file permissions via ADUC

On 29/01/15 21:21, Bob of Donelson Trophy wrote: > > > Rowland, > > I think you have confused my email with a different thread. > > Uhm . . what? > > --- > > ------------------------- > > Bob Wooden of Donelson Trophy > > 615.885.2846 (main) > www.donelsontrophy.com [1] > > "Everyone deserves an award!!" > > On 2015-01-29

On 29/01/15 21:21, Bob of Donelson Trophy wrote: > > > Rowland, > > I think you have confused my email with a different thread. > > Uhm . . what? > > --- > > ------------------------- > > Bob Wooden of Donelson Trophy > > 615.885.2846 (main) > www.donelsontrophy.com [1] > > "Everyone deserves an award!!" > > On 2015-01-29

Rowland, The email here is a little crazy at the moment. Your reply to my email sent this morning (7 or 8 hours ago) just popped up. And this is since you I have emailed some more confusion. This thread is on HOLD UNTIL FURTHER NOTICE. Let's let the email world settle down. I am currently receiving emails from this morning and I am confused. And let get my head around all that we have

On 29/01/15 12:54, Bob of Donelson Trophy wrote: > > > Rowland, > > I have tried your various alteration suggestions and it is a "negative" > result. > > Here is the output from wbinfo -u & wbinfo -g > > root at dtmbr01:~# wbinfo -u > administrator > dns-dtdc02 > dns-dtdc01 > krbtgt > guest > root at dtmbr01:~# wbinfo -g > allowed

On 29/01/15 12:54, Bob of Donelson Trophy wrote: > > > Rowland, > > I have tried your various alteration suggestions and it is a "negative" > result. > > Here is the output from wbinfo -u & wbinfo -g > > root at dtmbr01:~# wbinfo -u > administrator > dns-dtdc02 > dns-dtdc01 > krbtgt > guest > root at dtmbr01:~# wbinfo -g > allowed

After restoring the member server and re-running the improved "4-setup-samba4-MEMBER-wheezy.sh" script I am still having the same issue. W7 client still not allowed to access the member server. Administrator still has a uidNumber: getent passwd Administrator administrator:*:50001:50006::/home/samba/DTS***M/users/administrator:/bin/bash I have added a couple is test admin users

ok, seen it.. "administratorSERNAME%"? I'll change that, i did only some tests from windows. and i dont never set uid/gid to Administrator. -- Changed in the old script. but remember, you should NEVER set UID/GID for adminstrator, because... Now administrator has uid 50001 ... and this should be 0 ( root ) This is why we also use the user mapping !root =

Rowland, I think you have confused my email with a different thread. Uhm . . what? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-29 07:30, Rowland Penny wrote: > On 29/01/15 12:54, Bob of Donelson Trophy wrote: > Rowland, I have tried your various alteration

Hi bob, Yes, i have corrected the script online. I replaced the %USERNAME with %U in the old member script, and please dont give the user DOMAIN\Administrator any uid. not 0, nothing.. .no uid.. My best advice, leave Administrator as is and create a new user.. Add that one in "Domain Admins" and that user can have a uid. For setting the rights. Use setfacl to set the base

Rowland, I have tried your various alteration suggestions and it is a "negative" result. Here is the output from wbinfo -u & wbinfo -g root at dtmbr01:~# wbinfo -u administrator dns-dtdc02 dns-dtdc01 krbtgt guest root at dtmbr01:~# wbinfo -g allowed rodc password replication group enterprise read-only domain controllers denied rodc password replication group read-only domain

No, I did not try the alterations but, Louis had me remove the "domain users" line earlier. Put the line back in and try alterations? (If so, I will not have time until you are asleep, tonight.) --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-28 12:34, Rowland Penny

Yes, "INTERNAL" was the actual. Generated by script, I presume. Now changed to my workgroup name. Restarted member server. Now 'getent passwd Administrator' returns nothing but, W7 client still cannot connect. (As I have restored and re-run script this morning doesn't that mean it has to be coming over from DC's somehow?) --- ------------------------- Bob Wooden

On 30/01/15 19:14, Bob of Donelson Trophy wrote: > > > There is no uidNumber or gidNumber specifically listed (there is an > objectGuid and an objectSid.) > > Did nothing. > > Now? > > --- > > ------------------------- > > Bob Wooden of Donelson Trophy > > 615.885.2846 (main) > www.donelsontrophy.com [1] > > "Everyone deserves an

There is no uidNumber or gidNumber specifically listed (there is an objectGuid and an objectSid.) Did nothing. Now? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-30 12:58, Rowland Penny wrote: > On 30/01/15 18:28, Bob of Donelson Trophy wrote: > >> After

That was a cut/paste error. I've been thinking (danger, danger) when I test kerberos it returns the two DC's are available. Should it be including the member server also? Didn't I see the script setup kerberos on the member server? (Remember this was installed with the gen one scripts, not the newest scripts.) --- ------------------------- Bob Wooden of Donelson Trophy

On 30/01/15 18:28, Bob of Donelson Trophy wrote: > > > After restoring the member server and re-running the improved > "4-setup-samba4-MEMBER-wheezy.sh" script I am still having the same > issue. W7 client still not allowed to access the member server. > > Administrator still has a uidNumber: > > getent passwd Administrator >

On 28/01/15 16:50, Bob of Donelson Trophy wrote: > > > W7 client domain member? yes. > > Logged in as domainAdministrator? yes. > > "SeDiskOperatorPrivilege" set? yes > > Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. > > --- > > ------------------------- > > Bob Wooden of Donelson Trophy > > 615.885.2846

W7 client domain member? yes. Logged in as domainAdministrator? yes. "SeDiskOperatorPrivilege" set? yes Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [2] "Everyone deserves an award!!" On 2015-01-28 10:40, Marcel de Reuver wrote: >

On 30/01/15 21:19, Bob of Donelson Trophy wrote: > > > Both DC1 and member server return nothing on 'getent passwd > Administrator' > > I have no other users other than 'root' and 'Administrator' on all three > (DC1, DC2 & member.) > > My plan was to get file permissions (aka profiles) working and add some > test users. > > How do

Both DC1 and member server return nothing on 'getent passwd Administrator' I have no other users other than 'root' and 'Administrator' on all three (DC1, DC2 & member.) My plan was to get file permissions (aka profiles) working and add some test users. How do I add test users via linux side? (I'm with you, get linux side working first.) ---