similar to: Backing up a ADDC member server

W7 client domain member? yes. Logged in as domainAdministrator? yes. "SeDiskOperatorPrivilege" set? yes Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [2] "Everyone deserves an award!!" On 2015-01-28 10:40, Marcel de Reuver wrote: >

Thank you. This helps get me closer. One machine shows rsync 3.0.9 and the other shows rsync 3.1.0. Running "rsync --version" both show "ACL, xattr" are supported. Two questions, would the two different version cause it to fail? Second, does the order rsync "receives" the switches matter. Does "-A" and "-X" need to be near the beginning of

Moved the hdd of my DC over to nicer P4 machine. It started as expected. (I have resolved the eth0 driver issue that happens with Debian/Ubuntu servers when you move a functional hdd to a different machine.) Then I decided to change the static ip address of the DC from 192.168.**.54 to 192.168.**.51. That went as expected, except it seems my W7 client cannot connect to my domain, now. It says

Hi Bob, Set the rights like this. > /home 775 > > /home/samba 775 > > /home/samba/DT***RM 775 > > /home/samba/DT***RM/profiles 777 for the profiles, after you set the rights in windows, user profiles folders wil be created with the correct rights. and only accessable by the user.. and from here you shoule be able to set the correct rights. Can you give it a try?

Backuppc uses rsync (do not know what rsync version but Backuppc is latest version, so assuming 'very' current rsync version is included) and I am trying to add acl and attr file permissions to rsync in "RsyncArgs" and "RsyncRestoreArgs" and have discovered that their addition is not that easy. Backuppc uses "RsyncArgs" and "RsyncRestoreArgs" to

On 30/01/15 21:19, Bob of Donelson Trophy wrote: > > > Both DC1 and member server return nothing on 'getent passwd > Administrator' > > I have no other users other than 'root' and 'Administrator' on all three > (DC1, DC2 & member.) > > My plan was to get file permissions (aka profiles) working and add some > test users. > > How do

First, I am sorry. I should know this by now. Last week had an issue with W7 client could not update. I made some adjustments to get W7 updated. Now I am having an issue with update resolution. (Run apt-get update and repositories cannot be find, etc.) So, this tells me that I have messed up my dns resolution. All clients (W7 & linux) point to my DC for DNS nameserver. All clients (W7

On 09/01/15 18:56, Bob of Donelson Trophy wrote: > > > On 2015-01-09 12:45, Rowland Penny wrote: > >> On 09/01/15 18:31, Bob of Donelson Trophy wrote: >> On 2015-01-09 11:40, Rowland Penny wrote: On 09/01/15 17:26, Bob of Donelson Trophy wrote: On 2015-01-09 10:23, Rowland Penny wrote: On 09/01/15 15:47, Bob of Donelson Trophy wrote: On 2015-01-09 09:27, Rowland Penny

On 05/01/15 14:04, Bob of Donelson Trophy wrote: > > > My shop is 10 minutes from my house. House and shop are connected by vpn > (between two IpFire firewalls.) I do a lot of configuring and testing > from home. Due to a Windows wake-on-lan issue (right now) I cannot wake > the lone DC W7 client from home. When I get to work this morning, W7 > client (thru ADUC) shows

Now, more appropriately answering after the message. SEE BELOW, please. On 2015-01-09 07:24, L.P.H. van Belle wrote: > Hai, > > Not entiraly correct.. > > change : > >> dns-nameservers 208.67.222.222 <<<<<< have always struggled > > to > dns-search dtshrm.lan > dns-nameservers IP_OF_AD_DC > > and use : > net rpc rights

On 09/01/15 20:16, Bob of Donelson Trophy wrote: > > > On 2015-01-09 13:43, Rowland Penny wrote: > >> On 09/01/15 18:56, Bob of Donelson Trophy wrote: >> On 2015-01-09 12:45, Rowland Penny wrote: On 09/01/15 18:31, Bob of Donelson Trophy wrote: On 2015-01-09 11:40, Rowland Penny wrote: On 09/01/15 17:26, Bob of Donelson Trophy wrote: On 2015-01-09 10:23, Rowland Penny

On 2015-01-09 08:44, Rowland Penny wrote: > On 09/01/15 14:34, Bob of Donelson Trophy wrote: > Now, more appropriately answering after the message. SEE BELOW, please. On 2015-01-09 07:24, L.P.H. van Belle wrote: Hai, Not entiraly correct.. change : dns-nameservers 208.67.222.222 <<<<<< have always struggled to dns-search dtshrm.lan dns-nameservers IP_OF_AD_DC and use :

I am setting up W7 profiles following the "Samba & Windows Profiles" on the Sambawiki. If it matters, I have two functional DC's and one member server. When I run '# chmod 1770 /srv/samba/profiles' (on the member server) the permissions changed to: root at mbr01:~# ls -alh /srv/samba/profiles total 12K drwxrwx--T+ 2 root root 4.0K Mar 1 10:21 . drwxr-xr-t 5 root

On 2015-01-09 13:43, Rowland Penny wrote: > On 09/01/15 18:56, Bob of Donelson Trophy wrote: > On 2015-01-09 12:45, Rowland Penny wrote: On 09/01/15 18:31, Bob of Donelson Trophy wrote: On 2015-01-09 11:40, Rowland Penny wrote: On 09/01/15 17:26, Bob of Donelson Trophy wrote: On 2015-01-09 10:23, Rowland Penny wrote: On 09/01/15 15:47, Bob of Donelson Trophy wrote: On 2015-01-09 09:27,

On 30/01/15 19:14, Bob of Donelson Trophy wrote: > > > There is no uidNumber or gidNumber specifically listed (there is an > objectGuid and an objectSid.) > > Did nothing. > > Now? > > --- > > ------------------------- > > Bob Wooden of Donelson Trophy > > 615.885.2846 (main) > www.donelsontrophy.com [1] > > "Everyone deserves an

I have been improving my DC. I now have a DC01, DC02 and a DCMEMBER01. All running sernet-samba 4.1.16 on Debian 7.8.0 thanks to Louis' (old) scripts. (Any linux client work has gone on hold, for the moment.) Next step was to adjust the file permissions as instructed on "Setup and configure file shares with Windows ACLs". When I access the "Computer Management" (thru ADUC

Rowland, 'getent group DomainUsers' indeed returns nothing. Now, I know, you know this like the "back of your hand" but, am I wrong, are the permissions for **profiles** somewhat (not alot) different from permissions for file shares? Because I see that instructions (on the wiki) for file sharing reads differently. Thanks, again. --- ------------------------- Bob Wooden

Okay, so I did this to myself. I overlooked an important sentence on the "https://wiki.samba.org/index.php/Samba_%26_Windows_Profiles". The sentence that instructs to do "Profile share using Windows ACLs" ***OR*** "Profile share with using POSIX ACLs". So, I have reset the permissions to how they were before I messed them up doing the "POSIX ACLs" part.

Hi bob, Yes, i have corrected the script online. I replaced the %USERNAME with %U in the old member script, and please dont give the user DOMAIN\Administrator any uid. not 0, nothing.. .no uid.. My best advice, leave Administrator as is and create a new user.. Add that one in "Domain Admins" and that user can have a uid. For setting the rights. Use setfacl to set the base

On 08/01/15 19:10, Bob of Donelson Trophy wrote: > > > Part of the smb.conf > > [home] > path = /home/samba/DTDC01/users > comment = user folder 4 redirection > read only = no > > Hum-m-m? > > --- > > ------------------------- > > Bob Wooden of Donelson Trophy > > 615.885.2846 (main) > www.donelsontrophy.com [1] > >