similar to: Restoring single DC virtual machine

> That is what I did. But it fails even when mounting manually: > 1. Connect on the desktop using domain user "yvan.masson" (either > graphically / TTY / SSH). Kerberos ticket is properly created. > 2. Running "sudo mount -t cifs //ad.FOO.BAR.LOCAL/Echange /mnt -o > user=yvan.masson,cruid=yvan.masson,sec=krb5" fails with "Required key > not

Le 10/03/2020 ? 11:21, Rowland penny via samba a ?crit?: > On 10/03/2020 10:10, Yvan Masson via samba wrote: >> Le 10/03/2020 ? 10:37, Rowland penny via samba a ?crit?: >>> On 10/03/2020 09:18, Yvan Masson via samba wrote: >>>> If think I did not properly explain my setup, sorry for that: Samba >>>> here is not sharing anything. It is just used for

Le 10/03/2020 ? 10:37, Rowland penny via samba a ?crit?: > On 10/03/2020 09:18, Yvan Masson via samba wrote: >> If think I did not properly explain my setup, sorry for that: Samba >> here is not sharing anything. It is just used for joining a Windows >> domain, so that users can sit on a chair in front of this Debian >> computer, use their domain credentials in

Le 10/07/2019 ? 12:33, Rowland penny via samba a ?crit?: > On 10/07/2019 10:37, Yvan Masson via samba wrote: >> >> OK thanks. However I still want to clarify what is wrong with my >> original setup, where "Partage" directory is shared on a standalone >> Samba 4.9.5 server: >> /home/yvan/Partage/ >> ??? Consultation/ >> ??? Echange/ >

Le 10/07/2019 ? 14:28, Rowland penny via samba a ?crit?: > On 10/07/2019 13:16, Yvan Masson via samba wrote: >> >> >> Le 10/07/2019 ? 12:33, Rowland penny via samba a ?crit?: >>> On 10/07/2019 10:37, Yvan Masson via samba wrote: >>>> >>>> OK thanks. However I still want to clarify what is wrong with my >>>> original setup, where

Hi, First, thanks for all people that continuously giving great advice on this list! I am setting up a standalone server (Debian 10, Samba 4.9.5+dfsg-5 from Debian). The following directory is shared and contains two directories: /home/eleve/partage/ ??? Documents ??? Travail I want user "eleve" to be able to modify everything, and guest users to have read access on

Hi list, I joined a workstation (Debian 10, Samba from distribution) to our AD domain (Windows 2012 Server). The domain ends by ".local" (yes I know, not my fault). However, after a domain user logged to the machine, I can't mount a share that exists on the AD server using user's kerberos ticket: it fails with error "Required key not available". Mounting using

Le 09/08/2019 ? 21:36, Rowland penny via samba a ?crit?: > On 09/08/2019 20:18, Yvan Masson via samba wrote: >> Hi list, >> >> For testing purpose, I am running a standalone Samba 4.9.5 on Debian >> with the following smb.conf: >> >> [global] >> server role = standalone server >> map to guest = Bad User >> guest account = nobody > That

Hi list, For testing purpose, I am running a standalone Samba 4.9.5 on Debian with the following smb.conf: [global] server role = standalone server map to guest = Bad User guest account = nobody [test] path = /home/yvan/Partage/share guest ok = yes writable = yes inherit acls = yes I want "bob", "alice" and guest user to have full access to all files in this share, so I

Le 09/03/2020 ? 16:43, Rowland penny via samba a ?crit?: > On 09/03/2020 15:18, Yvan Masson via samba wrote: >> Thanks for your help! >> >> Le 09/03/2020 ? 15:39, L.P.H. van Belle via samba a ?crit?: >>> Did you "deleated the computer object" to allow kerberos services. >>> And did you add the CIFS/spn to the computer and keytab ? >>>

Hai, I know, im not the best in english, but i've updated the time sync page on the wiki. If someone can check it and update where needed. I've added this part. https://wiki.samba.org/index.php/Time_Synchronisation#Requirements_2 And https://wiki.samba.org/index.php/Time_Synchronisation#Set_up_time_with_systemd-timesyncd_on_a_Unix_Domain_Member Greetz, Louis

Le 10/07/2019 ? 08:46, Rowland penny via samba a ?crit?: > On 09/07/2019 22:49, Yvan Masson wrote: >> Le 09/07/2019 ? 21:16, Rowland penny via samba a ?crit?: >>> On 09/07/2019 20:06, Yvan Masson via samba wrote: >>>> Hi, >>>> >>>> First, thanks for all people that continuously giving great advice >>>> on this list!

Shanks for the hint! Very strange that the default is only to use a deprecated protocol… Anyway, this option has no effect on this issue… Yvan Le 31/05/2019 à 18:53, Kris Lou via samba a écrit : > Most likely, your Windows 10 (file server) is disallowing SMB1 connections, > which is the default for smbclient. > > You can force smbclient to use a higher protocol with "smbclient

After re-join kinit Administrator net ads keytab add cifs/$(hostname -f) -k net ads keytab add_update_ads -k samba-tool delegation for-any-service COMPUTERNAME$ on ( or use : delegation add-service accountname principal [options] ) Reboot Should work now. ;-) Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Yvan

Hi all, Sorry for this question which has certainely already been answered, but I could not find info in the list nor in the wiki. From my Debian laptop running testing (samba 4.9.5) and with an empty smb.conf (I wanted to be sure that only default values are used), I can not browse shares of a Windows 10 machine (sorry, Thunderbird splits some lines): smbclient -L 192.168.122.200 Unable to

> So to sum up, setting ACL for the guest user is not enough for Samba, > while it works for other users. It does not depend on which Unix user is > used as guest. > > I just found a very strange workaround: the right needs to be given to > the primary group and not the user. For example, if my guest user is > "nobody", then I would give rights to group

Thanks for your help! Le 09/03/2020 ? 15:39, L.P.H. van Belle via samba a ?crit?: > Did you "deleated the computer object" to allow kerberos services. > And did you add the CIFS/spn to the computer and keytab ? > I am sorry, I don't really understand the above: mount requires a keytab AND a user ticket? > https://wiki.samba.org/index.php/Generating_Keytabs > >

Hi, For a new samba domain, I need to create users and groups with Unix UIDs and GIDs. In the future, it is possible that there will be a trust with other domains, so I need to take care that there won't be any UID/GID conflict. Also, I assume that in the future Samba will be able to restore deleted objects, so I need to avoid conflicts with those objects as well. This makes me think that a

Le 10/03/2020 ? 12:22, Rowland penny via samba a ?crit?: > On 10/03/2020 10:47, Yvan Masson via samba wrote: >> Le 10/03/2020 ? 11:21, Rowland penny via samba a ?crit?: >>> On 10/03/2020 10:10, Yvan Masson via samba wrote: >>>> Le 10/03/2020 ? 10:37, Rowland penny via samba a ?crit?: >>>>> On 10/03/2020 09:18, Yvan Masson via samba wrote:

See answer at the bottom. Le 14/09/2020 ? 15:56, jmpatagonia via samba a ?crit?: > Yes sorry for my mistake, we need map share folders that the user have > permission, at logon time on Linux Desktop User. > > And if for example a user change of departament or area, the shares change, > so we change the maps shares folders on logon. > > On Windows users is easy like GPO o