similar to: ACL wrong category user for group and group for user

Le 05/09/2016 à 10:23, Rowland Penny via samba a écrit : > On Mon, 5 Sep 2016 09:38:56 +0200 > Sam via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> If I try to set acl under windows, something very strange appears. >> >> For instance, if I set something for the user samuel I get this with >> the command getfacl : >>

On Mon, 5 Sep 2016 09:38:56 +0200 Sam via samba <samba at lists.samba.org> wrote: > Hello, > > If I try to set acl under windows, something very strange appears. > > For instance, if I set something for the user samuel I get this with > the command getfacl : > default:_*group*_:samuel.ruet:r-x > > And if I set something for the group sa-si I get this : >

Le 23/05/2016 à 14:46, Rowland penny a écrit : > On 23/05/16 12:56, Sam wrote: >> > > It looks like your problems have nothing to do with dhcp, one problem > appears to be related to dnssec: > > May 23 10:52:27 S4 named[2162]: validating @0x7eff24296b50: > choices.truste.com A: no valid signature found > > If you have 'dnssec-validation yes;' in

Hello Rowland! The users and group are only on the AD, and there are only one entry on each user... In the Windows side all seems ok : but not the result of getfacl ... root at Samba4:/Fichiers# getfacl /Fichiers/SA/Nouveau\ document\ texte.txt getfacl : suppression du premier « / » des noms de chemins absolus # file: Fichiers/SA/Nouveau document texte.txt # owner: ciril # group:

Hi, I've allready seen a lot of posts about problems with Excel 2000, but I couldn't find one exactly matching my case. I'm using a self (and maybe badly) compiled samba 3.0.20 on debian, using ACLs. We're using ADS and winbind (some older NT4 domains remain) The users can't open some excel files, spitting a message such as 'the file is readonly or you're trying

Hello All, I have 2 samba4 AD server with dhpd and dynamic DNS. I have well understand that for now it's not possible to have 2 DHCP server running in the same time. So I would have at a time only one dhcp server running. If the first server got a problem I want to manually start the isc-dhcp service in the second to rescue the system. But It's not working as I expected... If I switch

Another mistake : The louis's script ddns-kerberos-check.sh was not running in hourly.cron directory ( i make a chmod 770 to resolve that ) to recall here what I did: - I cloned the Windows 2000 server AD servers on a private network and I migrated to samba4 - Meanwhile, users have continued to use the Windows 2000 AD servers on the production network - I replaced the production servers

Hi, Ok it's better like this!:-) The dhcp failover mode works well and 2 windows 7 client PC are well handled. They can have an IP and addresses are created/deleted in the DNS successfully. but... I try to remove my 2 old windows 2000 AD server from the production's LAN and put my 2 new Samba4 instead. The dhcp servers works fine but not really the DDNS. We have this kind of error

Hello all, I have two new server samba4, with isc-dhcp and Bind. ( Thanks to Louis 's scripts ) The AD was migrate from 2 Windows 2000 servers last friday, with a copy of them in a private lan. Today we have shutdown the old windows 2000 server and put the 2 new samba4 in place of them. The problem is that the DHCP does not update the DNS systematically... That works with laptops ( which

Hello, I have two samba 4.2.7-SerNet-Debian-8.wheezy AD servers. since few days now I have some winbind errorsthat block the server... It seems that they appears more and more frequently... ( about one time per day ) I have about 200 clients pc with windows 10, seven and XP. Last month I've migrated about 30 pc from seven to 10. Is there a relationship? In the following logs, you can see

Thanks Rowland and Louis! :) Ok I'm going to test the failover mode! ;) Do I need to set the same value for NSRVS in dhcp-dyndns.sh? ( the first AD server, "S4" for me ) Or can I keep NSRVS=S4.ariane.intra on server S4 and NSRVS=S4bis.ariane.intra on server S4bis? It seems to be more secure for me if the first server switch off... Sam Le 27/01/2016 12:16, Rowland penny a écrit :

Maybe this KB 817470 MUST be done only on windows 2003 srv? I don't find the KB for 2008... and 2008 is not on the APPLIES TO section... I think I'm going to test this KB on a 2003... ( window2000 -> windows 2003 -> KB 817470 -> Samba4 join ) I Hope it will rocks! Le 30/03/2015 11:17, Denis Cardon a ?crit : > Hi Sam, > >> I try to migrate form an old windows AD ( win

If I don't use DHCP failover, can you tell me how to do to to have manually dhcp start method working... I think I could made a mistake, this is what i did : ( I using Louis script from "old set of script" directory : https://secure.bazuin.nl/scripts/ ) - On server S4 : resolv.conf set to S4 first and S4bis in second - On server S4 : in dhcp-dyndns-debian.sh,

Hello, I try to migrate form an old windows AD ( win 2000 ) So I use a temporary windows2008R2 to move AD from win2000 to S4. Forest and domain level are W2008R2. Now I have some problems with the dns in samba4. I have no answers even in local from samba4. If I try to move from a new empty windows 2008 ad, The service start and answer well... So I think something in my old DNS database is

In short, I have my dns records in : CN=MicrosoftDNS,DC=ForestDnsZones,DC=ariane,DC=intra and I have root dns in : CN=MicrosoftDNS,DC=DomainDnsZones,DC=ariane,DC=intra but I don't have a "MicrosoftDNS" entry in DC=ariane,DC=intra Samuel Le mer. 8 nov. 2023 ? 17:27, Sam R <sr42354 at gmail.com> a ?crit : > Yes > > Le mer. 8 nov. 2023 ? 17:22, Rowland Penny via

Hi everybody! I have two samba AD server ( 4.2.7-SerNet-Debian-8.wheezy ). I try to make gpo working but I'm facing some problems... My Samba4 comes from an old windows AD so I have launch these command : samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix samba-tool ntacl sysvolreset ( that take about 10 minutes to complete ) samba-tool dbcheck --cross-ncs --fix But the

On 23/05/16 16:36, Sam wrote: > Le 23/05/2016 à 14:46, Rowland penny a écrit : >> On 23/05/16 12:56, Sam wrote: >>> >> >> It looks like your problems have nothing to do with dhcp, one problem >> appears to be related to dnssec: >> >> May 23 10:52:27 S4 named[2162]: validating @0x7eff24296b50: >> choices.truste.com A: no valid signature found

Hello everyone, I have just integrated my first MAC computer on my AD samba domain, and I have this message in my server logs: *Zone update refused:* * mac-t6y99l3q44.ariane.intra (insufficient access rights): 2 Time(s)* For Windows clients, I have a GPO that disables client-side DNS update, but I can't find this procedure for MAC. Do you know how to proceed? Thanks in advance Samuel

On 17/11/15 15:31, Sam wrote: > Another mistake : The louis's script ddns-kerberos-check.sh was not > running in hourly.cron directory ( i make a chmod 770 to resolve that ) > > to recall here what I did: > - I cloned the Windows 2000 server AD servers on a private network and > I migrated to samba4 > - Meanwhile, users have continued to use the Windows 2000 AD servers

You may have 2 dhcps running, but you have to make sure the lease ranges are different. The first dns server stanza should refer to the server which gets the lease update. For the dns servers you would need to define each other as forwarder, probably by ip range, to be able to resolve the other (half of the) names. -- W.Mautner (Walter.mautner at ages.at) +43050555111 IKT Hotline > Am