similar to: no access to share permission on a domain member

Hello guys! I'm using samba 3.2.4 (binaries from samba.org) on SLES9+sp3. I am building a PDC with LDAP support (i am attaching my config files), I'm also using ldapsam:trusted and ldapsam:editposix. Although I am setting the account lock after 3 failed tries in usrmgr, and verified that the parameters are actually set in the LDAP, no locking occurs. I started thinking that it was my

Rowland, Thanks for the clarification. It appears the member server is joined and I have created a share. [demoshare] path = /srv/samba/test read only = no I have enabled ACL support and given 'SeDiskOperatorPrivilege' per the wiki. I can navigate to the share using Windows Explorer. If I set the share permissions to only me(Full Control). I can't access the share.

Hi, I have a samba server setup as a domain member. I am trying to grant SeDiskOperatorPrivilege to some user accounts e.g. "domainaname\User", but I always get the above error. It doesnot matter what I specify as the server in -S option to the command. The command syntax I use is: net rpc rights grant "username" SeDiskOperatorPrivilege OR net -S ADserver -U

Rowland, That was the issue. Windows computer management console showed 0 connections. That obviously wasn't correct. A reboot corrected the issue. ACL's working as expected. I probably should have ran a 'netstat' to verify. Any best practices on who should or shouldn't have uid's or gid's set in AD? I've read where the Administrator account should

Rowland, Thanks so far for the assistance. I have a question about setting up shares on a member server. How do I map to users or groups that do not display in AD(Everyone,System,Authenticated Users)? On 1/2/2015 2:08 PM, Rowland Penny wrote: > On 02/01/15 18:59, James wrote: >> Rowland, >> >> That was the issue. Windows computer management console showed 0

Hi Rowland, Yes. When I create a share I get the expected 'Everyone' group under 'Share Permissions' for example. I'm assuming I must map this object to Unix so all windows users can access this share. However in AD there is no 'Everyone' group to set a gid. I wouldn't necessarily expect one either. I'm currently under the mind set that with a member

That is actually the wiki page I am currently referencing in my question. From the wiki you can see the 'Everyone' group. I would normally remove and add domain users or authenticated users. That prompted me to ask myself "what if I wanted the everyone group to have access"? How does the member server know who the everyone group is since the share is created on the server.

Hi, I hava a Samba4 file server joined to a Samba4 domain. I made a share for all members of the INFINITY domain 'Domain Users' group to access: [demoshare] comment = Test share path = /usr/local/samba/demoshare read only = no valid users = @"INFINITY+Domain Users" but no group member can access it. Any ideas what is wrong? It works if I change the group to

> [Samba] Samba3 Printer drivers installation > Andrei Mikhailovsky andrei at arhont.com > Tue Jan 20 11:52:41 GMT 2004 > > > Hello, > > I am having problems installing printer drivers for Samsung ML-4500 > printer, so windows workstation can just fetch them from print$ share. > When I run rpcclient with -d 4 i get the following error: > >

On 02/01/15 18:35, James wrote: > Rowland, > > Thanks for the clarification. It appears the member server is > joined and I have created a share. > > [demoshare] > path = /srv/samba/test > read only = no > > > I have enabled ACL support and given 'SeDiskOperatorPrivilege' per the > wiki. I can navigate to the share using Windows Explorer.

On 02/01/15 18:59, James wrote: > Rowland, > > That was the issue. Windows computer management console showed 0 > connections. That obviously wasn't correct. A reboot corrected the > issue. ACL's working as expected. I probably should have ran a > 'netstat' to verify. > > Any best practices on who should or shouldn't have uid's or

On 05/01/15 13:28, James wrote: > Rowland, > > Thanks so far for the assistance. I have a question about setting > up shares on a member server. How do I map to users or groups that do > not display in AD(Everyone,System,Authenticated Users)? Could you be a bit more specific here, are you talking about mapping these windows objects to Unix, or something else ? Rowland >

On Thu, 31 Aug 2017, Rowland Penny via samba wrote: > On Thu, 31 Aug 2017 16:04:42 -0400 (EDT) > me at tdiehl.org wrote: > >> On Thu, 24 Aug 2017, Rowland Penny via samba wrote: >> >>> On Thu, 24 Aug 2017 12:41:36 +0200 >>> Sven Schwedas via samba <samba at lists.samba.org> wrote: >>> >>>> On 2017-08-24 12:27, Rowland Penny via

On 05/01/15 14:00, James wrote: > Hi Rowland, > > Yes. When I create a share I get the expected 'Everyone' group > under 'Share Permissions' for example. I'm assuming I must map this > object to Unix so all windows users can access this share. However in > AD there is no 'Everyone' group to set a gid. I wouldn't necessarily > expect one

On Thu, 24 Aug 2017, Rowland Penny via samba wrote: > On Thu, 24 Aug 2017 12:41:36 +0200 > Sven Schwedas via samba <samba at lists.samba.org> wrote: > >> On 2017-08-24 12:27, Rowland Penny via samba wrote: > > I actually used worse words when I found out why I couldn't get my work > on the python code to work. ;-) > >> Does this apply only to sysvolreset

I switched to rid module of idmapping and now winbind offers all groups and I can set SeDiskOperatorPrivilege. getent group and getent passwd are now working! Am 9. Januar 2015 15:21:32 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 13:47, Tim wrote: >> Hello all, >> >> I have a AD DC based on CentOS7 with sernet samba 4.1.14 with rfc2307

When I switch back to backend ad, getent passwd returns nothing - getent group only returns by adding a dedicated group name. There is at least one user and one group with Id set in ad. Am 9. Januar 2015 16:29:39 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 15:19, Tim wrote: >> I switched to rid module of idmapping and now winbind offers all >>

On 05/01/15 14:59, James wrote: > That is actually the wiki page I am currently referencing in my > question. From the wiki you can see the 'Everyone' group. I would > normally remove and add domain users or authenticated users. That > prompted me to ask myself "what if I wanted the everyone group to have > access"? How does the member server know who the

Hello Stefan, Yes I'm using Samba4 as my DC's. I also provisioned my DC's with RFC2307. [global] netbios name = PFMS1 workgroup = DOMAIN security = ADS realm = DOMAIN.LOCAL encrypt passwords = yes vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes idmap config *:backend = tdb idmap config *:range = 70001-80000

That's what I tried to say. I set the gid/uid attribs in Unix tab. Am 9. Januar 2015 16:44:28 MEZ, schrieb Rowland Penny <rowlandpenny at googlemail.com>: >On 09/01/15 15:40, Tim wrote: >> When I switch back to backend ad, getent passwd returns nothing - >> getent group only returns by adding a dedicated group name. >> There is at least one user and one group with