similar to: Can't seem to get 'root preexec' to run

Mark, As you try to extract all users from AD and as it is not always advisable I would try into your rc script to retrieve only one user at boot time, just to check if winbind is not working at all at that moment or if it refuse to extract all domain users at that moment... Cheers, mathias 2015-10-20 10:18 GMT+02:00 Ole Traupe <ole.traupe at tu-berlin.de>: > Mark, did you make sure

Hi, I am trying to automatically create nested zfs data sets as home directories. I have a script that works fine if I execute it manually as root (auth via public key). It also creates a short log file in the same dir. However, this section in my smb.conf (on the DC) doesn't seem to execute (no data set created, no log file) on user logon (on a member server): [homes] comment =

I've joined a member server to my Samba4 AD/DC Domain. It all works great,but I have one minor problem at the moment. At boot-time, I want a list of domain users. In my /etc/rc.local script I have: /usr/bin/getent passwd > /etc/auto.domUsers 2>&1 This runs, but none of the domain users are listed, only local users. When I log in and run `getent passwd` from the command line. I see

Looks like my nfsv4 kerberos and root access problem. In that case, root didnt have a kerberos ticket, and was not allowed to access the needed folder. I think this is a bit the same. Creating the users and profiles shares from ADUC is working fine for me but not scripted from user root. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at

I added `service winbind status` to the beginning of my rc.local script and, after booting, saw the message: "winbind stop/waiting". So you're right, winbind is not running. Hmmm, I thought rc.local was the last thing to run at boot time. winbindd is run as a daemon, so I suppose rc.local could run before winbind has a chance to get all its ducks in a row. I'll try looping in

On 21/10/15 13:30, Rowland Penny wrote: > On 21/10/15 12:41, mourik jan heupink wrote: >> Hi, >> >> On 10/21/2015 01:21 PM, Rowland Penny wrote: >>> I am now beginning to think it doesn't work at all, if samba4 is >>> involved in any way. I knew that it wouldn't work on a DC (probably >>> because the user is DOMAIN\username and not just

You tried the pam module mkhomedir ? And have your tried : root preexec = "/usr/local/samba/scripts/createzfshome.sh %U" or root preexec = /usr/local/samba/scripts/createzfshome.sh "%U" Is the homedir on a NFS mounted dir? Exports correctly set? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Ole

Maybe I finally figured it out. I found that sentence "For example, the [test] and [homes] sections are unique disk shares; they contain options that map to specific directories on the Samba server." here: https://www.samba.org/samba/docs/using_samba/ch06.html Does that mean that this "preexec" in the [homes] section is not invoked if the user is accessing his or her home

Louis, thanks for the idea! I can execute the script as root on linux (tested this), because I do folder (zfs data set) creation via remote ssh commands, so not in the domain context. But the point is that the script won't even execute. Even on failure, there would be a log file created by my script which can't be found anywhere. Ole Am 20.10.2015 um 17:29 schrieb L.P.H. van

You could als do a "service winbind status". Am 20.10.2015 um 12:49 schrieb mathias dufresne: > Mark, > > As you try to extract all users from AD and as it is not always advisable I > would try into your rc script to retrieve only one user at boot time, just > to check if winbind is not working at all at that moment or if it refuse to > extract all domain users at

Hi Rowland, thank you for your effort! However, this is entirely not what I am trying to achieve. What I am trying to achieve is to get the "prexec" method to work. The reason behind this is that I would like to have a zfs data set created per user in an automatic (scripted) way. The reason behind that is that if I do this by hand - from a domain admin account and with the ACL

Mark, did you make sure winbind service is startet, yet? Ole Am 19.10.2015 um 20:41 schrieb Mark Foley: > I've joined a member server to my Samba4 AD/DC Domain. It all works great,but I > have one minor problem at the moment. At boot-time, I want a list of domain > users. In my /etc/rc.local script I have: > > /usr/bin/getent passwd > /etc/auto.domUsers 2>&1 >

Rowland, I apologize: I have overlooked this answer of yours before my last post. >> I think you may still be missing the obvious, I was suspecting that. >> '[homes]' *does not work* on a DC. You mean in general or in my assumed use case? Am 21.10.2015 um 11:27 schrieb Rowland Penny: > On 21/10/15 10:07, Ole Traupe wrote: >> Hi Rowland, >> >>

On 15/10/15 11:05, Ole Traupe wrote: > Hi, > > I am trying to automatically create nested zfs data sets as home > directories. I have a script that works fine if I execute it manually > as root (auth via public key). It also creates a short log file in the > same dir. > > However, this section in my smb.conf (on the DC) doesn't seem to > execute (no data set

Hi list, I have managed to grant a specific user access to a sub-folder (sub-level 3 from the share's entry point, I think) on a Samba 4 share he/she is not allowed and not able to access in total/general. I tried 2 different ways with one of them working. I'd like to discuss why that is. For the sake of an example, let's say the share is for teaching material (exam templates,

On 21/10/15 10:07, Ole Traupe wrote: > Hi Rowland, > > thank you for your effort! However, this is entirely not what I am > trying to achieve. > > What I am trying to achieve is to get the "prexec" method to work. > > The reason behind this is that I would like to have a zfs data set > created per user in an automatic (scripted) way. The reason behind >

On 22/10/15 10:38, Ole Traupe wrote: > The ADUC is very comfortable, and - even for the Samba devs, it seems > - the intended way of use. This whole stuff is mainly directed to > Windows use. But that is only my opinion. > It is the only GUI way to admin a Samba 4 AD domain, but you can (mostly) admin it from the command line using samba-tool. You can do some things easier and

Oh, and of course the auto-creation works if you put the path \\server\home\user into the "Profiles" tab of the user properties in the ADUC console. This is explicitly, what the samba wiki suggests, as it is directed to using Windows clients. As soon as you press "Ok", the folder is created Am 21.10.2015 um 14:52 schrieb Rowland Penny: > On 21/10/15 13:32, Ole Traupe

On 22/10/15 11:28, Ole Traupe wrote: > > > Am 22.10.2015 um 12:09 schrieb Rowland Penny: >> On 22/10/15 10:37, Ole Traupe wrote: >>> Rowland, what are [homes] shares on a Unix machine? >> >> It is described in the smb.conf manpage, but briefly if you try to >> connect to a share called 'username' and samba knows nothing about a >> share

On 22/10/15 10:37, Ole Traupe wrote: > Rowland, what are [homes] shares on a Unix machine? It is described in the smb.conf manpage, but briefly if you try to connect to a share called 'username' and samba knows nothing about a share called 'username' it checks if there is a user called 'username'. If this user exists, it obtains the users Unix homedir and uses this