similar to: dsacl

HOn Tue, 26 Mar 2019 09:29:41 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Tue, 26 Mar 2019 05:18:20 +0100 > Franta Hanzlík <franta at hanzlici.cz> wrote: > > > Hi Tim and Rowland, thanks for Your support! > > I was thinking about e.g. Python 2.7.15 compatibility (as newer Samba > > versions require Python3), but You are right, here

Hi Tim and Rowland, thanks for Your support! I was thinking about e.g. Python 2.7.15 compatibility (as newer Samba versions require Python3), but You are right, here in DB can be problem - first Samba AD DC was created by migrating Samba3 NT4 domain to Samba4 AD cca week ago (using 'samba-tool domain classicupgrade ...', according to Samba Wiki): On Tue, 26 Mar 2019 10:14:02 +1300 Tim

I've been been trying to investigate this for sometime now, hence I came to the experts :) I have rejoined all my DC's with new names, see below. ;; ANSWER SECTION: <domain>.corp. 3600 IN NS psad101zatcrh.<domain>.corp. -> New rebuild, new hostname, RHEL6 to RHEL7 upgrade <domain>.corp. 3600 IN NS prdc001zafsrh.<domain>.corp. -> New

Hi, i was not able to find anything about my issue in the bug-tracker, the mailinglist or the release notes. We see the following issue using samba-tool dsacl: samba-tool dsacl set --objectdn "cn=srv-client-99,cn=CoreBizClients,cn=Netzwerk,ou=muc,DC=coreboso,DC=de" --sddl='(A;CI;GA;;;DD)' new descriptor for

Hey, when running "samba-tool dsacl set" it prints the new acl of the applied object after command has finished. Is there a (bash) command to only print (not set/change) the current acl of an object? Thanks for any help & hints

Hi,

Sorry - I have just seen i did the "diff -u" in wrong order and used my test files. Here once again the correct diff. Am Sa., 10. Nov. 2018 um 08:54 Uhr schrieb Martin Krämer < mk.maddin at gmail.com>: > Hello everyone, > > since I was not able to find any tool like requested previously I did a > "quick and dirty" for samba-tool. > I copied the

Are there any deny tools with samba4? Like the below example? To set the permission to deny read access of the homePhone attribute on a single user object, you can use this command: dsacls <DN of object> /D <security principal>:RP;homePhone For our example, the command would look like this: dsacls "CN=Doe\, John,OU=newOU,DC=root,DC=net" /D root\ non-HR-users:RP;homePhone

Release Announcements ===================== This is the second release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the second release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the fourth release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Release Announcements ===================== This is the fourth release candidate of Samba 4.18.? This is *not* intended for production environments and is designed for testing purposes only.? Please report any defects via the Samba bug reporting system at https://bugzilla.samba.org/. Samba 4.18 will be the next version of the Samba suite. UPGRADING ========= NEW FEATURES/CHANGES

Mandi! Rowland Penny via samba In chel di` si favelave... > S-1-5-21-160080369-3601385002-3131615632-1314 Bingo! Exactly the 'Restricted' group that own the users i use for generico LDAP access! I really think that we have found the trouble! Now... how can i fix it? ;-) And... why that vaule get not propagated?! Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66

On Tue, 26 Mar 2019 05:18:20 +0100 Franta Hanzlík <franta at hanzlici.cz> wrote: > Hi Tim and Rowland, thanks for Your support! > I was thinking about e.g. Python 2.7.15 compatibility (as newer Samba > versions require Python3), but You are right, here in DB can be > problem > - first Samba AD DC was created by migrating Samba3 NT4 domain to > Samba4 AD cca week ago

I need to have an AD user that need to *write* in an users LDAP field. The user case is a MFP (a set of MFP, indeed) that have RFID auth, and so need to 'register' the RFID cards. Seems to me that i have to use dsacl/samba-tool acl ds, but i don't found a way to set the property for every user. EG, assign write permission to user 'mfp' to field 'pager' for every

What's the password requirements when I enable the option: complexity=on ? How many characters ? What special characters?, etc. My regards.

I tried your suggestion but still no luck, starting to think my domain is broken :( I did a debug when doing the migrate, not so if this will help On Thu, Nov 1, 2018 at 10:28 AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 1 Nov 2018 07:21:57 +0200 > Eben Victor <eben.victor at gmail.com> wrote: > > > I've been been trying to investigate

I am trying to create a sub-domain (in WinServer2003) from a domain which I've created with Samba4. For example, I have the domain: DOMAIN.PDC.CU in Samba 4 and I want to create the sub-domain EST.DOMAIN.PDC.CU in WinServer2003. But::: The Wizard encountered an error while trying to determine if the DNS server with which this domain controller will register supports dynamic updates. What I can

On 2016-10-08 07:58, Rowland Penny via samba wrote: > On Sat, 08 Oct 2016 07:50:03 -0500 > Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > >> I have built a second dtdc03 and joined to my first dtdc01. Thought >> all was well but, discovered that reverse dns is not correct on second >> dtdc03. >> >> root at dtdc03:~# host dtdc03

Hello everyone, we are in the process of changing from a Windows Domain to a Samba Domain and tried to implement some restrictions for OU-Admins. In the Windows Domain those restrictions can be implemented with Security ID: S-1-3-4 (Owner Rights). In our old Windows Domain everything works fine and as expected. In our Samba Domain, it doesnt work. We tried to implement the same rights as in