similar to: Shares with Windows ACLs on standalone server?

On Mon, 28 Jan 2019 10:09:43 +0100 Matthias Leopold via samba <samba at lists.samba.org> wrote: > I noticed I didn't ask a question ;-) > I noticed that you didn't give us much to work with ;-) Can you post the smb.conf files from the working ldap machine and the non-working 'tdb' machine. Rowland

Matthias, I used setfacl to set POSIX and Ad ACLS. Windows users who are in the appropriate group can manage perms for both. Cheers, Tim On Thu, Nov 14, 2019 at 3:43 PM Matthias Leopold via samba < samba at lists.samba.org> wrote: > > > Am 14.11.19 um 23:03 schrieb Jeremy Allison via samba: > > On Fri, Nov 15, 2019 at 10:51:41AM +1300, Andrew Bartlett via samba > wrote:

Am 14.11.19 um 22:12 schrieb Rowland penny via samba: > On 14/11/2019 20:45, Matthias Leopold via samba wrote: >> Hi, >> >> I posted a similar question in 2018 with no answers, so I'll try again: >> Is it possible to have shares with Windows ACLs and shares with POSIX >> ACLs on the same server (security = user)? Since share permissions are >> handled

On Fri, Oct 7, 2016 at 12:38 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > have you given Domain Admins the required rights ? > > net rpc rights grant DOMAIN\\"Domain Admins" > SeDiskOperatorPrivilege -UAdministrator > Yes. I followed this wiki example: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs Here is some output: [nienberg at

On Fri, Nov 15, 2019 at 10:51:41AM +1300, Andrew Bartlett via samba wrote: > On Thu, 2019-11-14 at 21:45 +0100, Matthias Leopold via samba wrote: > > Hi, > > > > I posted a similar question in 2018 with no answers, so I'll try > > again: > > Is it possible to have shares with Windows ACLs and shares with > > POSIX > > ACLs on the same server

On 10/12/2016 1:34 PM, Mark Nienberg via samba wrote: > Well, the easy fix is to add this to the share definition: > > admin users = "@STA\domain admins" > > The wiki implies that this should not be necessary, so I don't know if the > wiki is wrong or if I failed to follow it correctly. This was my first > share using Windows ACLS and it was an interesting

thanks for caring about this. Ming Xie, are you opening this BZ bug? thanks matthias Am 2017-07-07 um 13:31 schrieb Tomáš Golembiovský: > Hi, > > yes it is an issue in VDSM. We count on the disks being in storage pool > (except for block devices). > > Can you open a BZ bug for that please. > > Thanks, > > Tomas > > > On Fri, 7 Jul 2017 02:52:26

On 10/12/2016 7:32 PM, Mark Nienberg wrote: > Yes, it looks like this: > > https://wiki.samba.org/index.php/Implementing_roaming_profiles#Profile_share_using_Windows_ACLs > > but as I say, it works now that I have added the admin users, so I am > satisfied for now. > > On Wed, Oct 12, 2016 at 11:31 AM, lingpanda101--- via samba > <samba at lists.samba.org

Hi, I'm building and managing standalone fileservers (security = user) with various passdb backends. I'm noticing different behaviour of Windows ACLs for servers with LDAP and TDB passdb backends. In a LDAP backed server (which I started with) I can freely add filesystem permissions (eg for groups) to objects (files/folders) via the Windows (7) permissions editor. In a TDB backed

On Mon, 20 Aug 2018 18:02:32 +0200 Harry Jede via samba <samba at lists.samba.org> wrote: > Am Montag, 20. August 2018, 16:43:24 CEST schrieb Matthias Leopold > via samba: > > Hi, > > > > i (naively) would like to have local AND ldap users (and groups...) > > on my standalone fileserver (security = user). "passdb backend = > > ldapsam" already

Am 11.02.19 um 16:33 schrieb Rowland Penny via samba: > On Mon, 11 Feb 2019 15:40:02 +0100 > Matthias Leopold via samba <samba at lists.samba.org> wrote: > >> >> >> Am 11.02.19 um 14:22 schrieb Rowland Penny via samba: >>> On Mon, 11 Feb 2019 13:46:05 +0100 >>> Matthias Leopold via samba <samba at lists.samba.org> wrote: >>>

I noticed I didn't ask a question ;-) Has anybody seen this behaviour? Can this be explained? thank you matthias Am 23.01.19 um 11:50 schrieb Matthias Leopold via samba: > Hi, > > I'm building and managing standalone fileservers (security = user) with > various passdb backends. I'm noticing different behaviour of Windows > ACLs for servers with LDAP and TDB passdb

Hi, i (naively) would like to have local AND ldap users (and groups...) on my standalone fileserver (security = user). "passdb backend = ldapsam" already works OK and i found some old posts on the internet about "chaining" passdb backends. so i tried "chaining" ldapsam and tdbsam, but although testparm doesn't complain and i can add local users with

I could reproduce customer's problem Packages: rhv:4.1.3-0.1.el7 vdsm-4.19.20-1.el7ev.x86_64 virt-v2v-1.36.3-6.el7.x86_64 libguestfs-1.36.3-6.el7.x86_64 Steps: 1.Prepare a guest which is not listed storage pool # virsh dumpxml avocado-vt-vm1 .... <disk type='file' device='disk'> <driver name='qemu' type='qcow2'/> <source

Am 11.02.19 um 14:22 schrieb Rowland Penny via samba: > On Mon, 11 Feb 2019 13:46:05 +0100 > Matthias Leopold via samba <samba at lists.samba.org> wrote: > >> >> >> Am 11.02.19 um 13:22 schrieb Rowland Penny via samba: >>> On Mon, 11 Feb 2019 12:30:51 +0100 >>> Matthias Leopold via samba <samba at lists.samba.org> wrote: >>>

hi, i'm trying to recompile the httpd rpm on a x86_64 system. all i've changed in the spec file is the "--with-suexec-docroot" configure option. the error message i get from the "rpmbuild -ba SPECS/httpd.spec" command is "ln: creating symbolic link `/var/tmp/httpd-root/etc/httpd/logs' to `../../usr/var/log/httpd': No such file or directory". so

Hi, I posted a similar question in 2018 with no answers, so I'll try again: Is it possible to have shares with Windows ACLs and shares with POSIX ACLs on the same server (security = user)? Since share permissions are handled differently for both types of shares I'm not sure if this will work. I know I could try it out myself, but the question again just came to my mind and I think

Am 2018-02-19 um 17:39 schrieb Rowland Penny via samba: > On Mon, 19 Feb 2018 17:03:31 +0100 > Matthias Leopold via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> i'm trying to setup Samba 4.6 on CentOS 7.4 as a Domain Member of a >> Windows 2012R2 Domain Controller with AD. To administer share >> security i have to use the "username

Am 11.02.19 um 13:22 schrieb Rowland Penny via samba: > On Mon, 11 Feb 2019 12:30:51 +0100 > Matthias Leopold via samba <samba at lists.samba.org> wrote: > >> Hi, >> >> we are using a _single_ LDAP server as backend for _multiple_ Samba >> standalone file servers (security=user). This LDAP server serves >> mainly other purposes and access for Samba is

Hi Matthias, On 6/30/23 15:40, Matthias Leopold via samba wrote: > Can someone explain what is happening or where I need to tune? this is by design. :) The only reliable way (lacking S4U2SELF support) to get group membership for an AD user, is using the group list the DC passes along to us as part of the authentication process. We're trying extra hard to store this data *persistently*