similar to: File Server recognize users and groups AD

Dear, I'm having trouble Samba recognizes the permissions assigned to groups and users created in AD. Scenario: DC1 = Primary DC DC2 = secondary DC + file server Both running the 4.4.5 version of Samba (Centos 7). When I add permissions to a folder using a Windows desktop, I get to set permission for AD users and groups. What do I need to set up the groups and AD users are recognized on the

Follow the answers: > Yes wbinfo shows the user but does 'getent passwd iuser' show anything ? # wbinfo -i iuser iuser:*:4294967295:4294967295:iuser:/home/DOMAIN/iuser:/bin/false # getent passwd iuser iuser:*:4294967295:4294967295:iuser:/home/DOMAIN/iuser:/bin/false # id iuser id: iuser: no such user smb.conf file server: # Global parameters [global] netbios name =

Dear,The FAQ Samba 4 states that it is not compatible with Windows Server 2012, as the link below: https://wiki.samba.org/index.php/Joining_a_Windows_Server_2012_/_2012_R2_DC_to_a_Samba_AD My question is, is incompatible with the Server 2012 or the functional level of 2012?Here we have a Windows Server 2012 R2 with AD level of Windows 2008 R2 functionality.Samba 4 is compatible with this

Dear It is possible to configure Samba 4.4.5 to accept queries that do not use TLS? I'm having trouble authenticating the Proxy / SquidGuard in AD Samba 4.4.5. I get this error: (squidGuard): ldap_simple_bind_s failed: Strong(er) authentication required I read the wiki Samba, the new versions are working with authentication TLS encrypted connections. It is possible to configure Samba

I had joined the Samba as a secondary DC. At first he imported all (accounts, groups, users and gpo).I can see all the objects that were imported. But the version of Schema Samba came as 69. The errors that I notice is regarding DNS and ForestDNS synchronization.It seems that the error is displayed when you synchronize Samba for Windows. When Windows to Samba, the commands do not return error.

Dear Marc, Thanks for initial contact. The file server that need to migrate is a Windows 2012 R2. He's just a domain member. Being Win 2012, I can face any problems in the migration? Once the shares are ready, I plan to use Robocopy to copy the files and also the permissions of users and groups from Windows to Samba. De: Marc Muehlfeld <mmuehlfeld at samba.org> Para: Ricardo

Dear Regards, Confirmed here, the AD schema is at version 69. Other settings: Domain Level and Forest Functional Level could downgrade to Windows 2008. We need to replace this DC MS by Samba, but keeping the same domain. Does anyone have any suggestions or tips? De: Marc Muehlfeld <mmuehlfeld at samba.org> Para: Ricardo Pardim Claus <ricardo.claus at yahoo.com.br>; "samba

Dear Marc,In the field we have only simple objects (GPO desktop, file server, users and groups).In total, there are approximately 100 desktops +120 users. Only one site. How to create a new domain in the Samba with the same SID of the current domain? So I could create a new DC with the same domain and SID, and import objects (users and desktops accounts). De: Marc Muehlfeld <mmuehlfeld

Dear,Samba updated to 4.4.5 version.The Samba is a secundary DC.I'm getting some authentication errors. smbclient -k -L //domain.localsession setup failed: NT_STATUS_INTERNAL_ERROR Using my PC when I try to access the \\sambadc, is asking User and Password.The logs appears this: ctx setting sec (0, 0) - 0 = sec_ctx_stack_ndx[25/07/2016 14: 08: 04.581532, 5]

Dear, I'm looking for a material that explains how to apply disk quotas by groups in Samba 4. However the materials I found left me confused. My environment: Centos 7, XFS filesystem, file server integrated with AD Samba 4. My objective: In my file server, create and configure quotas for AD groups in Samba 4. Could someone give me a help? Appoint a site for reading? Thank you!

> Hmm, the numbers seem extremely large, did you set this number in the > users 'uidnumber' attribute in AD ? How do I do this uidNumber configuration? I'm running all services: smbd, nmbd and winbind It's hard to run the file server as a domain member. When was a file server with DC was much more easy.

Dear,We are in MS migration phase to Samba 4.Besides replacing the AD MS by Samba 4, we must also migrate the file server MS to Samba 4. I have some doubts and I ask the opinion of you:   1 - Is there any way to migrate MS folder permissions for Samba 4?  2 - We will need a secondary domain control. Based on best practices in this Samba 4 is that the file server, we can use it as a secondary DC?

On Sat, 2017-04-08 at 16:13 +0000, Ricardo Pardim Claus via samba wrote: > Dear Rowland > > When I execute the command, I get the following error: > > # samba-tool domain tombstones expunge > ERROR(<type 'exceptions.AttributeError'>): uncaught exception - > 'module' object has no attribute 'time' >   File

Il 07/02/2016 17:07, Rowland penny ha scritto: > On 07/02/16 15:39, Alessandro Baggi wrote: >>>> >>> >>> Follow the information you will find here: >>> https://wiki.samba.org/index.php/Setup_Samba_as_an_AD_Domain_Member >>> >>> Rowland >>> >> >> Thank you Rowland for your answer. >> I've ridden this doc,

On Sat, 8 Apr 2017 15:18:18 +0000 (UTC) Ricardo Pardim Claus via samba <samba at lists.samba.org> wrote: > Gentlemen, > > I upgraded my two DCs, from Samba 4.4.5 to 4.6.2. > When I check the database, I get the errors below. > Could someone help me in this case? > try 'samba-tool domain tombstones expunge' Rowland

Dear, I have three installations of Samba 4, version 4.4.5. Being two DC's and a file server (domain member). I would like to update Samba to the latest version. The current installation was done by compiling the Samba packages. Could someone tell me if I can upgrade directly to the latest version available? Should I compile the new package to overlap the previous version? Thank you!

Gentlemen, Samba 4, which I view open server sessions? The sessions that I mean, are the sessions of all machines and users logged in AD. In Winserver, I see the sessions through the Computer Management console / Shared Folders / Sessions. When I try to view the sessions of the Samba server via a PC with RSAT installed, it shows few results. (3 to 6 results). Thank you!

Dear Rowland, I changed smb.conf as its tip. I had already read about the ACL's Windows and Posix. Even changing the smb.conf and using the ACL methods, I still do not write access to the folder. Example: # mkdir /mnt/data/teste1 # ls -all /mnt/data/teste1 total 12 drwxrws---+ 2 administrator domain admins 6 Out 25 10:05 . drwxrwxr-x+ 10 root domain admins 4096 Out 25

> Is the 'vfs objects' line in the [global] section ? if so, try moving > it to the shares, there have been reports that adding 'vfs objects' to > [global] causes problems. > Rowland Dear Rowland This host is a Samba 4.6.2 domain member server. In the Global session of smb.conf, I have this line: Vfs objects = acl_xattr On Sharing: Vfs objects = recycle,

Dear, Does anyone have any idea what may be causing this error? Even I had to leave off Samba, because I believe that due to NT_STATUS_INTERNAL_ERROR error, several desktops are presenting failure credentials when they try to access shares. After I left off Samba, the errors are gone. ------------------- Mensagem original ------------------------------- Assunto: Re: [Samba]