similar to: Enable_extended_ACL_support_in_smb.conf

I am not 100% clear as to when the following is required in smb.conf on a member server: vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#Enable_extended_ACL_support_in_smb.conf I have confirmed Samba is compiled with ACL support: [root at centos7member ~]# smbd -b | grep HAVE_LIBACL

On 27 January 2016 at 17:40, mathias dufresne <infractory at gmail.com> wrote: > Hi, > > Samba DC generates a krb5.conf into private directory, where the database > is hold. > > Its content should be that: > [libdefaults] > default_realm = SAMBA.DOMAIN.TLD > dns_lookup_realm = false > dns_lookup_kdc = true > > Should only as I get

On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: > On 26/01/16 20:54, Henry McLaughlin wrote: > >> [root at centos7member ~]# net rpc rights list accounts >> -U'TESTING\administrator' >> Enter TESTING\administrator's password: >> Could not connect to server 127.0.0.1 >> Connection failed: NT_STATUS_CONNECTION_REFUSED

On 27 January 2016 at 18:09, mathias dufresne <infractory at gmail.com> wrote: > Use the same krb5.conf on members as on DC, no? > > Tried... same error msg. > 2016-01-27 7:42 GMT+01:00 Henry McLaughlin <henry at incred.com.au>: > >> On 27 January 2016 at 17:40, mathias dufresne <infractory at gmail.com> >> wrote: >> >> > Hi, >>

I now have my DC working and member server working. I am using this guide to create a file server with Windows ACLs: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs I am unsure of this section of the guide: https://wiki.samba.org/index.php/Shares_with_Windows_ACLs#Enable_extended_ACL_support_in_smb.conf The following is only required on Domain Members and not on Domain Controllers,

[root at centos7member ~]# net rpc rights list accounts -U'TESTING\administrator' Enter TESTING\administrator's password: Could not connect to server 127.0.0.1 Connection failed: NT_STATUS_CONNECTION_REFUSED [root at centos7member ~]# [root at centos7member ~]# cat /etc/samba/smb.conf [global] netbios name = centos7member security = ADS workgroup = TESTING

On 27 January 2016 at 20:27, Rowland penny <rpenny at samba.org> wrote: > On 27/01/16 01:03, Henry McLaughlin wrote: > >> On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: >> >> On 26/01/16 20:54, Henry McLaughlin wrote: >>> >>> [root at centos7member ~]# net rpc rights list accounts >>>>

On 27 January 2016 at 21:45, Rowland penny <rpenny at samba.org> wrote: > On 27/01/16 10:07, Henry McLaughlin wrote: > >> On 27 January 2016 at 20:27, Rowland penny <rpenny at samba.org> wrote: >> >> On 27/01/16 01:03, Henry McLaughlin wrote: >>> >>> On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: >>>>

Use the same krb5.conf on members as on DC, no? 2016-01-27 7:42 GMT+01:00 Henry McLaughlin <henry at incred.com.au>: > On 27 January 2016 at 17:40, mathias dufresne <infractory at gmail.com> > wrote: > > > Hi, > > > > Samba DC generates a krb5.conf into private directory, where the database > > is hold. > > > > Its content should be that:

On 20 January 2016 at 07:08, Rowland penny <rpenny at samba.org> wrote: > On 19/01/16 20:00, Henry McLaughlin wrote: > >> >> On 20 January 2016 at 06:43, Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>> wrote: >> >> On 19/01/16 19:34, Henry McLaughlin wrote: >> >> I have sssd configured and working

And please also do check hostname -s hostname -d hostname -f if you see somewhere 127.0.0.1 or incorrect hostname. Check /etc/hosts Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens mathias dufresne > Verzonden: woensdag 27 januari 2016 7:40 > Aan: Henry McLaughlin > CC: samba > Onderwerp: Re: [Samba]

Hi, Samba DC generates a krb5.conf into private directory, where the database is hold. Its content should be that: [libdefaults] default_realm = SAMBA.DOMAIN.TLD dns_lookup_realm = false dns_lookup_kdc = true Should only as I get it from a forgotten test platform where I set dns_lookup_realm = true Cheers, mathias 2016-01-27 2:03 GMT+01:00 Henry McLaughlin <henry

I have created a [home] share: user at jupiter:~$ sudo ls -l /srv/samba/ total 24 drwxrwxr-x 2 root domain admins 4096 Nov 22 21:38 Demo drwxrwxr-x 2 root domain admins 4096 Nov 15 11:51 Finance drwxrwxr-x+ 2 root domain admins 4096 Nov 25 08:08 home drwxrwxr-x+ 9 root domain admins 4096 Nov 24 21:06 Printer_drivers When i try to set the ACLs in Windows I get "Permission Denied" In

On 27/01/16 10:07, Henry McLaughlin wrote: > On 27 January 2016 at 20:27, Rowland penny <rpenny at samba.org> wrote: > >> On 27/01/16 01:03, Henry McLaughlin wrote: >> >>> On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: >>> >>> On 26/01/16 20:54, Henry McLaughlin wrote: >>>> [root at centos7member ~]# net

On 27/01/16 01:03, Henry McLaughlin wrote: > On 27 January 2016 at 08:24, Rowland penny <rpenny at samba.org> wrote: > >> On 26/01/16 20:54, Henry McLaughlin wrote: >> >>> [root at centos7member ~]# net rpc rights list accounts >>> -U'TESTING\administrator' >>> Enter TESTING\administrator's password: >>> Could not connect to

Rowland, The wiki suggested doing "smbd -b | grep HAVE_LIBACL" and expecting to get back "HAVE_LIBACL". This is not the case on our IBM system with 4.10.6. The current version from IBM is 4.10.13 - considering upgrading in the hopes "HAVE_LIBACL" is present if I really need it. On the other hand, "smbd -b" does report that smbd was built with vfs_aixacl

On 20 January 2016 at 06:43, Rowland penny <rpenny at samba.org> wrote: > On 19/01/16 19:34, Henry McLaughlin wrote: > >> I have sssd configured and working with my domain member server and I now >> wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins" >> group. When I execute the command it appears to disregard the domain name >>

Hi, I'm currently using an old Samba 3.6.3 on Ubuntu 12.04 LTS. Now it is required to use ACL's. Unfortunately, the Samba is running without the "HAVE_LIBACL" build option, my question is: how can i (re)configure it to enable ACL support via package manager? OFC i installed the required packages. Thanks, Robert

Hi , We migrated to AD account in a Ubuntu 16.04 (Samba 4.3.11)and came across issues with user shares. Some of the users were able to access the shares and some were not. The server in question has both AD and File and we followed the samba wiki to enable the Windows ACL To migrate , we ran the following samba-tool domain classicupgrade --dbdir=/var/lib/samba.PDC/dbdir --realm=lin.GROUP

On 15 January 2016 at 21:32, Rowland penny <rpenny at samba.org> wrote: > On 15/01/16 09:07, Henry McLaughlin wrote: > >> root at aphrodite:/# net rpc rights list accounts -U'DOMAIN\administrator' >> Enter DOMAIN\administrator's password: >> BUILTIN\Print Operators >> No privileges assigned >> >> BUILTIN\Account Operators >> No