similar to: Problems with administrator account

I still have the same problem with : [root at fileserver ~]# more /usr/local/samba/etc/samba_usermapping !root = DOMAIN\Administrator DOMAIN\\Administrator DOMAIN\administrator Administrator adm inistrator ________________________________________ De : samba <samba-bounces at lists.samba.org> de la part de Rowland Penny <rowlandpenny241155 at gmail.com> Envoyé : jeudi 6 août 2015 16:06

Oh thank you Just to be sure to understand : -getent passwd | grep administrator and id administrator didn't work on Fileserver because administrator account didn't have uidNumber -it also why administrator account can't manage filserver with windows permissions Just one more thing please : Why my administrators group is mapped on unix users ? [root#fileserver ~]# net groupmap

Sorry for my mistake. It resolve the groupmap problem : [root at fileserver ~]# net groupmap list Administrators (S-1-5-32-544) -> BUILTIN\administrators Users (S-1-5-32-545) -> BUILTIN\users But i still have the administrator problem. I have follow the wiki.samba doc and i have set the SeDiskOperatorPrivilege : net rpc rights list accounts -U'DOMAIN\administrator' DOMAIN\Domain

I guess you want getent group, so i give you both. But administrator is the only user of "domain admin" group with problems. [root at fileserver ~]# getent passwd Domain\ Admins [root at fileserver ~]# getent group Domain\ Admins domain admins:x:512: [root at fileserver ~]# ls -la /partages/share total 181260 drwxrwxrwx+ 2 root root 4096 26 mars 2013 . drwxr-xr-x 13

> So id administrator didn't return anything on DC or on Fileserver. ow.. but administrator on a DC should retun id 0 .. without any mappings. try setting or "authenticated users", or put "everybody" back on the share rights and test again. whats the primary group of the Administrator? Did you leave it at "domain user" or did you change it to the

I have a mapping beetween administrator and root on my fileserver, i sent you yesterday. My administrator account didn't have uid. I didnt have mapping or winbindd on my DC. The wiki says it's optional and i have separate my fileserver to my DC. So id administrator didn't return anything on DC or on Fileserver. My probleme is that : Administrator is a member of "domain

On 06/08/15 15:32, Aurélien Blachet wrote: > I still have the same problem with : > [root at fileserver ~]# more /usr/local/samba/etc/samba_usermapping > !root = DOMAIN\Administrator DOMAIN\\Administrator DOMAIN\administrator Administrator adm > inistrator > > ________________________________________ > De : samba <samba-bounces at lists.samba.org> de la part de Rowland

On 06/08/15 12:57, Aurélien Blachet wrote: > Hello, > > > > I just went to migrate my fileserver from samba3 to samba4 but i have problem with the administrator account. > > > > The group "domain admins" have the permission to manage all my shares > > > > Administrator is member of the group "domain admins" but he can't manage the

On 07/08/15 09:37, Aurélien Blachet wrote: > Oh thank you > > Just to be sure to understand : > -getent passwd | grep administrator and id administrator didn't work on Fileserver because administrator account didn't have uidNumber If Administrator doesn't have a uidNumber, it will not be known to the Unix host, this is why you either have to give Administrator a uidNumber

On 07/08/15 13:25, Aurélien Blachet wrote: > Sorry for my mistake. > > It resolve the groupmap problem : > [root at fileserver ~]# net groupmap list > Administrators (S-1-5-32-544) -> BUILTIN\administrators > Users (S-1-5-32-545) -> BUILTIN\users > > But i still have the administrator problem. I have follow the wiki.samba doc and i have set the SeDiskOperatorPrivilege

On 07/08/15 14:07, Aurélien Blachet wrote: > I guess you want getent group, so i give you both. But administrator is the only user of "domain admin" group with problems. OOPS, yes 'getent group Domain\ Admins' > [root at fileserver ~]# getent passwd Domain\ Admins > [root at fileserver ~]# getent group Domain\ Admins > domain admins:x:512: > > [root at

Yes, LAN is the workgroup name. I made a test, i removed all the ACL with setfacl -b mysharename [root at fileserv]# getfacl share/ # file: share/ # owner: root # group: root user::rwx group::rwx other::--- Going to Windows side and Added "Domain Admins" in permission tab to read/modify/total Security Tab is denied even for my others account in domain Admins group looking again

Hi guys, I am working with Aurelien. On the DC, there is no UID/GID mapping (nsswitch not being modify as the wiki say that on a DC it's not needed). The primary group of Administrator is 513 (taken from the Attribute editor on ADUC) primaryGroupID : 513 (Domain Users) If i add Everybody to the Share tab, i can access to the security Tab and edit permissions. As he said the only user

Hi, On a samba 4.9.4 fileserver using ad backend with rfc2307  , when i create a file from a Win10 client, it s always created with the rights user:"domain users". I ve understood that with "unix_primary_group = yes" , the file should be created with the rights user:gidNumber . Here is my config : [global]        security = ADS        workgroup = SAMBA494        realm =

Hello! I am following the how to https://wiki.samba.org/index.php/User_home_drives But even though there reported a process for User X does not access the home of Y User, this is happening root at fileserver:/srv/samba# getfacl home/ # file: home/ # owner: root # group: root user::rwx user:root:rwx user:administrator:rwx group::r-x group:root:r-x group:5007:r-x group:domain\040admins:rwx

Dear all, I have set a small test domain in virtualbox. 1. Samba AD DC on Debian bullseye testing 4.11.6 2. Samba domain member Debian Stretch 4.10.14 3. Windows 10 Enterprise evaluation version 1909 Roaming profiles with folder redirection setup. PAM working. The above was setup basically using guides in wiki.samba.org, with nearly the only thing changed was SAMDOM to SAMBA. "Unix

Hello all, I have samba 3 with a share named shareA using these settings: [shareA] comment = Directory Amministrazione path = /col/shareA browseable = no valid users = @amm force group = amm public = no writable = yes create mask = 0770 directory mask = 0770 printable = no where user1, user2, user3 and user4 belong to "amm" group. I would like to

On Fri, 26 Jan 2018 14:18:53 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Fri, 26 Jan 2018 14:10:40 +0100 > Micha Ballmann <ballmann at uni-landau.de> wrote: > > > To set share windows permissions and windows acl i login on a > > windows 7 computer with the administrator user.|Open ||Computer > > Management and connect to the

I've set up a profiles share according to the wiki article: https://wiki.samba.org/index.php/Implementing_roaming_profiles Users are able to create new roaming profiles and they cannot browse each others' profiles, so all that is working. The only issue is that the group "domain admins" does not have privileges to read or delete user profiles. The acls on the profiles directory

> On Mon, 21 Nov 2016 13:42:57 +0100 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > >> Hi, >> >> Yes thats correct. >> But try the following. >> Make sure you use the usermapping. >> >> username map = /etc/samba/samba_usermapping >> containing: >> !root = NTDOM\Administrator NTDOM\administrator