similar to: do not allow users to login twice

Sorry, I didn't explain my problem well enough... The problem is not that a domain user logs in on one specific computer several times. I tried that. It's not even possible. You only login to the same profile on the same computer again. So this is ok. The problem is that a domain user is logged in on two computers simultaneously. I tried that. That's possible. But I don't want

Hey, I refer to https://wiki.samba.org/index.php/Operating_system_requirements/File_system_support#ext4 Wiki suggests: Ensure that your kernel has the following options enabled: CONFIG_EXT4_FS_XATTR=y CONFIG_EXT4_FS_SECURITY=y CONFIG_EXT4_FS_POSIX_ACL=y My debian 8.2 installation was installed from netinstall CD, all updates applied. All my filesystems are ext4 and xattr and acl are not set,

Hey, I'm still waiting for the new file server hardware to arrive so I plan to enable user logins in the meantime without profiles and home directories. Reason for this is quite some pressure from people. The setup on the 2 DCs should be done a day or two. Could there be problems if I configure profiles and home directories some weeks after users logged in for the first time? What if e.g.

I'd like to set up a Samba DC, an additional DC and a Samba file server. Everything is configured with RAID 1. I encrypt all partitions except partition /boot (which is also on RAID). What partitions, partition sizes, file system types do you use on your Samba DC, additional DC and file server? Is there something like "best practice"? kind regards, birgit

Hi again, I refer to https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller#Testing_your_Samba_Domain_Controller Thank you for this great wiki! I run all the tests and everything looks perfect! I encounter just a little difference here. Actually I thought that there should be no Master and Workgroup for a AD DC. (as given in the wiki and in Stefan Kania's book

Thank you! That was the hint I needed with 4.2 and ""Bad Password Lockout in the AD DC". I did it via samba-tool this time and not via GPO with RSAT. samba-tool domain passwordsettings set --history-length=0 samba-tool domain passwordsettings show Password informations for domain 'DC=x,DC=x,DC=x' Password complexity: on Store plaintext passwords: off Password history

chkconfig is not installed, but systemctl seems to work together with update-rc.d. 21:02:19 # systemctl disable samba Synchronizing state for samba.service with sysvinit using update-rc.d... Executing /usr/sbin/update-rc.d samba defaults Executing /usr/sbin/update-rc.d samba disable update-rc.d: error: samba Default-Start contains no runlevels, aborting. 21:02:58 # systemctl disable nmbd

Hello, In what samba version is parameter "old password allowed period" introduced? This parameter seems be the remedy to my problem but I cannot find it with "testparm -v | grep password" or in my "man smb.conf" Does it even exist in 4.1.17 (just the regular debian package)? In this document it says it is for samba version 4: https://www.mankier.com/5/smb.conf I

Hello, Some users in my domain report that they have to use different (old) passwords on different computers. They say that they still have to use their "old" passwords after they changed it. My domain setup is that users are asked to automatically change their password on Windows 7 Enterprise after some months. So they have to do that. Otherwise they cannot login. But why is it, that

Hello Marc, Thank you very much for your reply! To separate /var/lib/samba is a good idea.... I use logical volumes too... So you basically have the same partitions on the DCs as on your file server? right? KR, birgit Marc Muehlfeld <mmuehlfeld at samba.org> schreibt: >Hello Birgit, > >Am 27.08.2015 um 21:58 schrieb oeh univie edv lists: >> I'd like to set up a Samba

Hello, Not a real solution but you can do that by GPO: - don't allow/display "change user" when connected - don't allow/display "lock session" So the only things you can do is logon, logoff, reboot or shutdown.... ________________________________________ De : samba [samba-bounces at lists.samba.org] de la part de oeh univie edv lists [edv-lists at oeh.univie.ac.at]

Hello, Probably problem is numer 3... see below.... All of them are running after restart of computer: # /etc/init.d/samba-ad-dc status ● samba-ad-dc.service - LSB: start Samba daemons for the AD DC Loaded: loaded (/etc/init.d/samba-ad-dc) Active: active (running) since Son 2015-10-04 23:14:36 CEST; 18h ago # /etc/init.d/samba status ● samba-ad-dc.service - LSB: start Samba daemons for

I'm new to the list. hopefully my question is correctly placed here... I'd installed my samba server 3.5.6 on debian squeeze in a openvz container that uses venet. I'd love to keep it that way but I'm not sure if that is ok. Do you use samba server with venet or do I have to change to veth? I already read http://wiki.openvz.org/Differences_between_venet_and_veth and I don't

Hi, Given i have this share : [j.snow] Path = /home/j.snow Share and ntfs permission : j.snow user Now I add another folder share inside the first one : [a.stark] Path = /home/j.snow/a.stark Share and ntfs permission : a.stark user /home/j.snow/a.stark has now parent inherit permission (j.snow) AND a.stark user a.stark can't access to her share ! if I add a.stark NTFS access to [j.snow]

Hi Denis, Thanks for your advices. I have in mind about your kerberos problem in a large environment but i was thinking about problem occuring at 20 and more DCC's So last night, i modified all my krb5.conf (DC and file server) as you suggest but problem persist. root at dc111:~# samba-tool domain join pr.educationetformation.fr DC -U administrator --realm=PR.EDUCATIONETFORMATION.FR -W PR

or add acl_xattr:ignore system acl = yes to your share. more info man smb.conf .. Gr. Louis >-----Oorspronkelijk bericht----- >Van: J.Morillo at educationetformation.fr >[mailto:samba-bounces at lists.samba.org] Namens MORILLO Jordi >Verzonden: vrijdag 5 juni 2015 15:21 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] [Bug or Limitation] Folder sharing

Solved ! Thanks for the script. In my case, it was just too late. I have just found a ugly but working solution: From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. No more trouble with drs showrepl :-) -----Message d'origine----- De : samba [mailto:samba-bounces at lists.samba.org] De la part de Stefan Kania

Hi, I don't really know if there any problem if you enable the profiles later. Home folder don't really cares because you can set the home folder and drive in any time. How is your network?, because is better a Gigabit network for profiles and homes, for example: - Gigalan server - Gigalan switch - 100Mbits users Users have enough speed with a 100Mbit network and the server/switch is

Hello ! I'm trying to add new DC to my existent domain (18 Samba4 DC) but this time, domain join stuck after setting account password. I have tried so many things but at this point, i really don't know what to do. I can see the new dc111 computer object on smb4dc serveur but the object is disable. If someone have an idea... Best regards root at dc111:~# samba-tool domain join

Hi ! Since few months, dreplsrv is eating lots of memory in few days. Within 2 weeks, the process is generaly OOM killed and replication become weired. I need to restart samba-ad-dc. Here is my config : - Samba 4.11.6 / 4 vcpu / 2Go Ram - 10215 objects (ldbs file = 300MB) This memory problem only happen on my headbridge DC (star topolgy with 20 DC) If I add some ram, the