similar to: Samba3 shares cannot be mounted on linux box uisng cifs command , error "CIFS VFS: cifs_mount failed w/return code = -13"

Thanks Rowland! few answers to your question: 1) I used the samba-tool domain classicupgrade to "migrate" the domain for the pdc to a new Ubuntu server with sernet-samba-4.2.2 2) on the DC, I have configured the service to use the old winbind, as that's just enaugh for our domain and it looked more stable during the test phasethe smb.conf of the DC is the following: [global]

well, I have configured the kdc client on the file server, joined the domain using net ads join and it worked fine, again getnet group , getnet passwd , wbinfo -u they all works perfectlly fine I am also able to browse the shares from any windows machine joined to the CCDC domain, but I am still not able to do ANY mount.cifs, not even form linux boxes joined to the domain :-/ I have no idea

I have some more findings about this it looks like getent does not get the right information from the Domain Controller, in fact the domain user groups shows with NO member users: getent group | grep "domain users" domain users:x:10000: root at seadog:~# Now funny thing is that other folders for wwhich getent retrieves the users correctlly are mounted fine . any idea why I don t see

ok, what do you suggest then? maybe changing the authentication to another group like "domainusers" ? ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: +353 1 815 2236, eMail: mariopiorusso at ie.ibm.com IBM Ireland Product Distribution Limited registered in Ireland with

On 15/07/15 15:10, Mario Pio Russo wrote: > OR > > is there any way, or magical hidden parmeter in the smb.conf that allows to > enumerate the users in the Domain Users? tbh this has a huge impact on the > file share server as many directorys have "domain users" as group I don't think you understand this at all :-) If a user is a member of an AD domain, then they are

On 14/07/15 16:49, Mario Pio Russo wrote: > > Good Day All > > I have a problem for our main fileserver base don samba 3.5.6 > > Let's give a bit of pregress first. We had a samba 3.5.6 installation which > was acting as a PDC for our internal domian called CCDC. On a sapearate > machine, we had another installation of samba 3.5.6 to act just as file > share server.

On 14/07/15 18:19, Mario Pio Russo wrote: > Thanks Rowland! > > few answers to your question: > > 1) I used the samba-tool domain classicupgrade to "migrate" the domain for > the pdc to a new Ubuntu server with sernet-samba-4.2.2 > > 2) on the DC, I have configured the service to use the old winbind, as > that's just enaugh for our domain and it looked

On 14/07/15 19:27, Mario Pio Russo wrote: > well, I have configured the kdc client on the file server, joined the > domain using net ads join and it worked fine, again getnet group , getnet > passwd , wbinfo -u they all works perfectlly fine Well, this sounds like samba is working correctly. > > I am also able to browse the shares from any windows machine joined to the > CCDC

On 15/07/15 11:06, Mario Pio Russo wrote: > I have some more findings about this > > it looks like getent does not get the right information from the Domain > Controller, in fact the domain user groups shows with NO member users: > > getent group | grep "domain users" > domain users:x:10000: > root at seadog:~# > > > Now funny thing is that other folders

OR is there any way, or magical hidden parmeter in the smb.conf that allows to enumerate the users in the Domain Users? tbh this has a huge impact on the file share server as many directorys have "domain users" as group ___________________________________________________________________________________________ Mario Pio Russo, System Admin SWG IT Services Dublin, Phone & FAX: +353

well that's peculiar, as I am experiencing something different. in fact from ADUC I can see all the users belonging to the "domain users" groups. the authentication, however, does not work on that group, and the share "scrap" cannot be accessed with this config: valid users = @"Domain Users" however, I have created an auxiliarry group called domainusers

Good Day All I have a samba 4 AD DC based on sernet samba 4.2.3 (on Ubuntu 14.0.4) and a samba file share server based on saba 3.5.6 (on Debian 10.01, "squeeze") Now we want to migrate the file share server from Debian+samba3 to Ubuntu 14.04 +samba4. this for various reason, the most important being that samba3 is EOL and "squeeze" will be EOL soon (beginning of 2016).

Good day All I am re proposing this topic as it keeps happening in our enviroment and is creating some trouble now. I have 1 samba file share server, and a different samba4 AD server. the file server has been recently updated to Ubuntu 14 and its native samba 4.1.6. The samba4 AD is on Ubuntu 14 and on sernet-samba 4.2.2. what happens is that every 4~5 days the file share server loses randomly

Hi allVersion 3.5.6 I have a samba file share server , running on ubuntu 10. Samba version is 3.5.6. Originally this server was using a PDC server based on samba 3, and all was ok. now the PDC server has been upgraded via samba-tool to version 4.2.2 . The system itself works generally fine (afer a good amount of tuning and configuration), however I am now incurring in a peculiar issue: every

thank you once again Rowland just a some clarification: 1) I have one Domain Controller based on Samba4 in AD mode, how can I verify that I am using IDMU on it? 2) YES - the samba3 file share is a standalone server, using tdbsam and local users. 3) "the second is from an AD client but you are using a depreciated uid/gid mechanism and have commented this out: #idmap config * :

Great thanks, I'll test your config files now! some questions before: > I would also recommend Installing the 'acl' & 'attr' packages (if not already installed), those are installed and at the latest version on the file share server, are they needed on the AD too (I would think no)? > read up on using POSIX ACLs and lose the 'force' lines in the member

On 06/09/15 15:03, Mario Pio Russo wrote: > Good Day All > > I have a samba 4 AD DC based on sernet samba 4.2.3 (on Ubuntu 14.0.4) and a > samba file share server based on saba 3.5.6 (on Debian 10.01, "squeeze") > > Now we want to migrate the file share server from Debian+samba3 to Ubuntu > 14.04 +samba4. this for various reason, the most important being that >

On 01/09/15 12:04, Mario Pio Russo wrote: > > Good day All > > I am re proposing this topic as it keeps happening in our enviroment and is > creating some trouble now. > > I have 1 samba file share server, and a different samba4 AD server. > > the file server has been recently updated to Ubuntu 14 and its native samba > 4.1.6. The samba4 AD is on Ubuntu 14 and on

On 6/4/2015 9:57 AM, Mario Pio Russo wrote: > guys sorry to take this thread onboard once more, but I still can't get > this sorted. > > I have compiled the latest tarball from samba, 4.2.2 . compilation works > fine and after that I am able to upgrade from samba 3 with the following > command: > > samba-tool domain classicupgrade --dbdir=/var/lib/samba-ccdc1/dbdir/

Thanks Luis I've changed the smb.conf as you said, now it looks like this: root at ccdc-samba4:~# cat /etc/samba/smb.conf # Global parameters [global] workgroup = CCDC realm = CCDC.LAN netbios name = CCDC-SAMBA4 server role = active directory domain controller idmap_ldb:use rfc2307 = yes dns forwarder = 9.0.138.50 auth methods = sam,