similar to: Permission question (AD)

Hi Rowland, Thanks for replying again. On 13 May 2018 at 18:12, Rowland Penny via samba <samba at lists.samba.org> wrote: > On Sun, 13 May 2018 17:39:39 +0200 > Viktor Trojanovic via samba <samba at lists.samba.org> wrote: > > [...] > > > username map = /etc/samba/samba_usermap > > What is in the 'samba_usermap' ? > !root =

I joined a Samba AD member server (file server) to a Samba AD DC. This seems to have worked. However, if I try to access the file server from the domain administrator account on a Windows client, I am asked to provide authorization details. Since I have no other privileged users, I am using the domain admin credentials but they're not accepted. I'm not sure exactly where to look but I

On 26.10.2015 23:03, Rowland Penny wrote: > On 26/10/15 21:38, Viktor Trojanovic wrote: >> I joined a Samba AD member server (file server) to a Samba AD DC. >> This seems to have worked. However, if I try to access the file >> server from the domain administrator account on a Windows client, I >> am asked to provide authorization details. Since I have no other

On 27.10.2015 09:05, Rowland Penny wrote: > On 26/10/15 22:35, Viktor Trojanovic wrote: >> >> >> On 26.10.2015 23:03, Rowland Penny wrote: >>> On 26/10/15 21:38, Viktor Trojanovic wrote: >>>> I joined a Samba AD member server (file server) to a Samba AD DC. >>>> This seems to have worked. However, if I try to access the file >>>>

On 27.10.2015 11:17, Rowland Penny wrote: > On 27/10/15 09:34, Viktor Trojanovic wrote: >> >> >> On 27.10.2015 09:05, Rowland Penny wrote: >>> On 26/10/15 22:35, Viktor Trojanovic wrote: >>>> >>>> >>>> On 26.10.2015 23:03, Rowland Penny wrote: >>>>> On 26/10/15 21:38, Viktor Trojanovic wrote: >>>>>>

On 27.10.2015 12:38, Rowland Penny wrote: > See inline comments: > > On 27/10/15 11:17, Viktor Trojanovic wrote: >> >> >> On 27.10.2015 11:17, Rowland Penny wrote: >>> On 27/10/15 09:34, Viktor Trojanovic wrote: >>>> >>>> >>>> On 27.10.2015 09:05, Rowland Penny wrote: >>>>> On 26/10/15 22:35, Viktor Trojanovic

Setup: Samba AD DC and Samba AD Member Server, Win10 clients only. Samba version 4.8.1 Has something changed recently in the way ACL's are supposed to work? My existing shares work just fine but any ALC changes I make using Windows are ignored in Samba. For example, I'm creating a new folder in Windows inside an existing share and I add user User1 or group Group1 in the security tab.

On 29.10.2015 18:49, Rowland Penny wrote: > On 29/10/15 17:27, Viktor Trojanovic wrote: >> >> >> On 29.10.2015 17:54, Rowland Penny wrote: >>> On 29/10/15 16:21, Viktor Trojanovic wrote: >>>> >>>> >>>> On 27.10.2015 16:16, Rowland Penny wrote: >>>>> On 27/10/15 14:58, Viktor Trojanovic wrote: >>>>>>

> On 29 Oct 2015, at 20:52, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > >> On 29/10/15 19:27, Viktor Trojanovic wrote: >> >> >>> On 29.10.2015 18:49, Rowland Penny wrote: >>>> On 29/10/15 17:27, Viktor Trojanovic wrote: >>>> >>>> >>>>> On 29.10.2015 17:54, Rowland Penny wrote:

On 29.10.2015 17:54, Rowland Penny wrote: > On 29/10/15 16:21, Viktor Trojanovic wrote: >> >> >> On 27.10.2015 16:16, Rowland Penny wrote: >>> On 27/10/15 14:58, Viktor Trojanovic wrote: >>>> >>>> >>>> On 27.10.2015 13:54, Rowland Penny wrote: >>>>> [...] >>>>>> Yes, I meant the administrator. I did

On 27.10.2015 16:16, Rowland Penny wrote: > On 27/10/15 14:58, Viktor Trojanovic wrote: >> >> >> On 27.10.2015 13:54, Rowland Penny wrote: >>> [...] >>>> Yes, I meant the administrator. I did your suggested change on my >>>> member server and restarted it. 'getent passwd administrator' is >>>> still not returning anything,

On 14/12/15 02:15, Viktor Trojanovic wrote: > I'm using the AD ID mapping, so I manually give all my users and > groups their respective uidNumbers and gidNumbers. > > I created a group of the type "security" with the scope "global" and > added some users to it, then I gave full control permission to said > group to certain files on a member server. >

On 29.10.2015 20:52, Rowland Penny wrote: > On 29/10/15 19:27, Viktor Trojanovic wrote: >> >> >> On 29.10.2015 18:49, Rowland Penny wrote: >>> On 29/10/15 17:27, Viktor Trojanovic wrote: >>>> >>>> >>>> On 29.10.2015 17:54, Rowland Penny wrote: >>>>> On 29/10/15 16:21, Viktor Trojanovic wrote: >>>>>>

Reading the wiki page on the topic above, the following doesn't seem entirely clear to me: must all used IDs be unique, or do just the user/computer accounts and the groups, respectively, need unique IDs? Simply put, is it possible that a user has a uidNumber that is the same as the gidNumber of a group? Thanks, Viktor

On 18/11/15 10:24, mourik jan c heupink wrote: > > > On 18-11-2015 10:59, Rowland Penny wrote: >> OK, I am trying to understand this as well, I take it that the uidNumber >> you add is a unique number that is inside the range you have set in >> smb.conf, but what about the gidNumber? do you set it to '515' and is >> this also inside the range? > Yep.

Hello Rowland, thank you for your swift reply. I made the modifications you suggested, which unfortunately did not better the situation. No change as to the "Creator Owner" rights and the Administrator account still shown as locked. Also, I couldn't spot any suspicious messages in the Samba logfiles besides maybe get_referred_path: |profiles| in dfs path

On 27.10.2015 13:54, Rowland Penny wrote: > [...] >> Yes, I meant the administrator. I did your suggested change on my >> member server and restarted it. 'getent passwd administrator' is >> still not returning anything, though. Or is that the wrong way to >> check if it worked? >> > > If you ran the same command on the DC, it will return something,

On 6/19/2017 9:12 AM, Viktor Trojanovic via samba wrote: > On 19 June 2017 at 14:56, Rowland Penny via samba <samba at lists.samba.org> > wrote: > >> On Mon, 19 Jun 2017 14:46:34 +0200 >> Viktor Trojanovic <viktor at troja.ch> wrote: >> >>> On 19 June 2017 at 14:20, lingpanda101 via samba >>> <samba at lists.samba.org> wrote:

On 17/11/15 17:33, Viktor Trojanovic wrote: > [global] > > netbios name = FILESERVER > workgroup = SAMDOM > security = ADS > realm = SAMDOM.EXAMPLE.COM > dedicated keytab file = /etc/krb5.keytab > kerberos method = secrets and keytab > > username map = /etc/samba/samba_usermap > > idmap config *:backend = tdb > idmap config *:range =

On Mon, 19 Jun 2017 14:46:34 +0200 Viktor Trojanovic <viktor at troja.ch> wrote: > On 19 June 2017 at 14:20, lingpanda101 via samba > <samba at lists.samba.org> wrote: > > > On 6/19/2017 7:51 AM, Viktor Trojanovic via samba wrote: > > > >> That's correct, I don't have "Unix Attributes" but through the > >> advanced view I have