similar to: Unable to modify folder share permissions on member server

On 05/01/15 14:00, James wrote: > Hi Rowland, > > Yes. When I create a share I get the expected 'Everyone' group > under 'Share Permissions' for example. I'm assuming I must map this > object to Unix so all windows users can access this share. However in > AD there is no 'Everyone' group to set a gid. I wouldn't necessarily > expect one

On 05/01/15 14:59, James wrote: > That is actually the wiki page I am currently referencing in my > question. From the wiki you can see the 'Everyone' group. I would > normally remove and add domain users or authenticated users. That > prompted me to ask myself "what if I wanted the everyone group to have > access"? How does the member server know who the

Hello, I've a Samba 3.0.23c-SerNet-Debian PDC (no BDC or anything) connected to OpenLDAP. I thought it would work smoothly, I didn't discover any problems until today. I'am trying to create a ntconfig.pol with poledit, but it doesn't show me any groups to add to the policy. I can see all the users by the way. To eleminate a poledit problem I used the security tab (in german

That is actually the wiki page I am currently referencing in my question. From the wiki you can see the 'Everyone' group. I would normally remove and add domain users or authenticated users. That prompted me to ask myself "what if I wanted the everyone group to have access"? How does the member server know who the everyone group is since the share is created on the server.

On Tue, 12 Feb 2019 11:13:56 +0100 marco pirola via samba <samba at lists.samba.org> wrote: > I obtaing this resulta. Imposible enumerated the object in the > container: access negated. > Hi Marco, you posted this as your smb.conf: [global] security = ADS workgroup = ROBINOOD realm = ROBINOOD.TST log file = /var/log/samba/%m.log log level = 1 vfs objects = acl_xattr map

On 02/01/15 18:35, James wrote: > Rowland, > > Thanks for the clarification. It appears the member server is > joined and I have created a share. > > [demoshare] > path = /srv/samba/test > read only = no > > > I have enabled ACL support and given 'SeDiskOperatorPrivilege' per the > wiki. I can navigate to the share using Windows Explorer.

On 02/01/15 18:01, James wrote: > Rowland, > > That did it! Thank you so much. I do have a question regarding the > 'getent' command before setting up file shares. When I run 'getent > group Domain\ Users' I get > > domain_users:x:10000:user1,user2,user3,user4,user5,user6,user7,user8 > > Why does it show these specific users? I would assume it would

On 02/01/15 18:59, James wrote: > Rowland, > > That was the issue. Windows computer management console showed 0 > connections. That obviously wasn't correct. A reboot corrected the > issue. ACL's working as expected. I probably should have ran a > 'netstat' to verify. > > Any best practices on who should or shouldn't have uid's or

Hi, witch command getent group Domain\ Admins I optaing domain admins:x:10512: It's correct? Il 12/02/2019 12:57, Rowland Penny via samba ha scritto: > On Tue, 12 Feb 2019 11:13:56 +0100 > marco pirola via samba <samba at lists.samba.org> wrote: > >> I obtaing this resulta. Imposible enumerated the object in the >> container: access negated. >> > Hi

On 05/01/15 13:28, James wrote: > Rowland, > > Thanks so far for the assistance. I have a question about setting > up shares on a member server. How do I map to users or groups that do > not display in AD(Everyone,System,Authenticated Users)? Could you be a bit more specific here, are you talking about mapping these windows objects to Unix, or something else ? Rowland >

Hi, We are trying to deploy samba sharing on Centos 7.4, linked to windows 2016 AD for authentication. We are having an issue related to permissions where different directories with seemingly the exact same permissions cannot all be accessed from smbclient. I was hoping somebody could help me figuring this out. We have the following structure: 1. one LVM2 volume on /dev/storage/test (XFS)

Regarding the insertion of "user_xattr,acl,barrier=1" in to /etc/fstab file. The Sambawiki page 'https://wiki.samba.org/index.php/OS_Requirements' has instructions there for ext4 to include this. I seen it commented here, in the mailing list, many time that this is now default for ext4. Maybe the wiki page should be changed? (Just a suggestion, you guys always give great

On 02/01/15 17:07, James wrote: > Rowland, > > I had a typo in my hosts file which is the reason my initial DNS > update failed. Corrected and joined again. Successfully joined and > updated DNS A record. I then made sure to give 'Domain users' a id of > 10000. I am now able to run' getent passwd' and see all my domain > users! YES! However I still see

Hi Rowland, Yes. When I create a share I get the expected 'Everyone' group under 'Share Permissions' for example. I'm assuming I must map this object to Unix so all windows users can access this share. However in AD there is no 'Everyone' group to set a gid. I wouldn't necessarily expect one either. I'm currently under the mind set that with a member

On 02/01/15 17:26, James wrote: > Rowland, > > I did forget to change it. Is it as simple as renaming now or did > I screw up? > > On 1/2/2015 12:18 PM, Rowland Penny wrote: >> On 02/01/15 17:07, James wrote: >>> Rowland, >>> >>> I had a typo in my hosts file which is the reason my initial DNS >>> update failed. Corrected and

Rowland, That did it! Thank you so much. I do have a question regarding the 'getent' command before setting up file shares. When I run 'getent group Domain\ Users' I get domain_users:x:10000:user1,user2,user3,user4,user5,user6,user7,user8 Why does it show these specific users? I would assume it would only show my 'tuser'. I don't have uid's set for anyone

Rowland, Thanks for the clarification. It appears the member server is joined and I have created a share. [demoshare] path = /srv/samba/test read only = no I have enabled ACL support and given 'SeDiskOperatorPrivilege' per the wiki. I can navigate to the share using Windows Explorer. If I set the share permissions to only me(Full Control). I can't access the share.

On 12/04/15 11:19, jd at ionica.lv wrote: > > Cit?ju jd at ionica.lv: > >> Hi! >> >> the previous problems were solved (thank you, Rowland!), but few >> issues remains: >> >> I get such msg in log: >> 0. Is it possible to tell samba to output messages in logs as one >> line per message (even if it is long one?) >> >> 1.

Hello, It's me again. I'm running Samba 3.0 and LDAP 2.1.23 on a RedHat 8.0 system. I am able to browse shares and home directories. I get a: Logon failure: unknown username or bad password when I try to connect a W2k machine. For Win/95/98 the system already works. I believe it is setup OK I need to work on scripts that work with MMC. I just want a basic connect a w2k machine right

Rowland, That was the issue. Windows computer management console showed 0 connections. That obviously wasn't correct. A reboot corrected the issue. ACL's working as expected. I probably should have ran a 'netstat' to verify. Any best practices on who should or shouldn't have uid's or gid's set in AD? I've read where the Administrator account should