similar to: Fileserver, AD, ACLs

On Mon, 5 Sep 2016 15:06:58 +0200 mathias dufresne via samba <samba at lists.samba.org> wrote: > Hi all, > > Here is the smb.conf used on my test files server. > _________________________________________________________________________ > [global] > workgroup = AD > realm = AD.DOMAIN > netbios name = SMBFS20 > > security = ads

Sorry, but I didn't really know how to word this. I have Univention Corporate server running as AD DC, with a UCS running as a member fileserver. One win10 client has file permission issues after lack of reboot or logout/login in roughly a weeks time. Symptom = can't write to shares even though permissions are correct. Sometimes files are created without honoring default ACL. Could this

Mandi! L.P.H. van Belle via samba In chel di` si favelave... [ I've written to Rowland, offlist, supposing a debian specific trouble... because we are back here, i change subject. ] > I have had a look in the bug reports. > See : https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816301 Seems mildly related. I was on jessie samba 4.2 and i've just done the

> > I don't see where exactly the ways differ. I already played with idmap settings and keytab. It makes no difference. > > BTW the wiki entry does not explain how to create the keytab, so the setting is not really useful if you just follow that page. > > With the 'old system' you just have one range, this is now depreciated > and you should use the new

In a fresh samba AD domain i'm setting up the 'Profiles' share for roaming profiles, following the wiki: https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs leading to: [profiles] comment = Network Profiles Share csc policy = disable map acl inherit = Yes path = /srv/samba/profiles read only =

I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should be used over both protocols. With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) . How can I do the same with Samba 4 ? Posix-ACLs set on the server with setfacl are recogniced on a windows-client. But every change I do on a

On Tue, 28 Nov 2023 16:00:22 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > In a fresh samba AD domain i'm setting up the 'Profiles' share for > roaming profiles, following the wiki: > > https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles > https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs > >

On Tue, 8 Sep 2020, Rowland penny via samba wrote: > On 08/09/2020 13:55, Harald Hannelius wrote: >> >> On Tue, 8 Sep 2020, Rowland penny via samba wrote: >>> On 08/09/2020 13:27, Harald Hannelius via samba wrote: >>>> >>>> Hello, >>>> >>>> I have users in Samba AD with uid- and gidnumbers. I also have group

On 15/04/16 13:43, L.P.H. van Belle wrote: > Ok, i have tested a bit more also. > > Now i have this problem also on some other servers with D. Jessie. > > The sernet 4.2.11 debian wheezy works fine as far i can see now. > > All my member servers have these settings ( see below),. > Versies used are > 4.1.17 (all ok) ( debian jessie packages ) > 4.2.20 (fail wbinfo -u)

Hi, I have detected a very low performance with cp command or any write with CIFS mount (Netapp Storage), <15mb/s. Read performance is similar Local disk perofrmance is correct >100mb/s fstab entry is : //netapp/resource$/folder /mnt/test cifs username=u,password=p,domain=dom,iocharset=utf8,uid=1001,gid=1000,dir_mode=0700,file_mode=0700,auto Server is SLES 12 SP3 with latest updates

Mandi! Rowland Penny via samba In chel di` si favelave... >> acl_xattr:default acl style = windows >> acl_xattr:ignore system acls = yes > Why have you added those two last lines ? Ahem, really you need an answer?! ;-) I don't remember... ;-((( >> What i'm missing?! Thanks. > Well, because you have added this line: > acl_xattr:ignore system

Mandi! Rowland penny via samba In chel di` si favelave... > > And my Windows client works happily! > If you only had Unix clients, then you could stick with this way of doing > things, but you have Windows clients, so you need to work the Windows way > and make your Unix clients work the same way. No. In these years i've worked with 'POSIX ACLs', setting up scripts

Just wanted to say very interesting thread! I would like to share my experience as well if that's alright. I have noticed when using the ignore system acls = yes value, when checking on the Windows side permissions it appears as the following (copying from Peter here): -Permissions list- root (Unix User\root) Full Control This folder only Domain Admins (Private\Domain Admins) Read,

On Fri, 23 Feb 2024 08:13:08 +0100 Nicolas Boiss? via samba <samba at lists.samba.org> wrote: > Hello, > > I have a Fedora server, part of a domain, on which various shares are > configured. > > For one share, I want to set up permissions according to the groups > to which the users belong. But it doesn't work. For example, I want > the share to be accessible

On 30.01.2024 16:51, Ralph Boehme via samba wrote: > On 1/30/24 16:27, Rowland Penny via samba wrote: >> On Tue, 30 Jan 2024 16:13:41 +0100 >> Peter Milesson via samba <samba at lists.samba.org> wrote: >> >>> Hi folks, >>> >>> It seems that the setting acl_xattr:ignore system acls = yes reduces >>> Windows compatibility when defined

I was testing Samba 4.5rc2 with an existing smb.conf file that I have been using since Samba 4.1.x and found that I cannot access data in the share on Windows 2012 (my AD server), a Windows 2008 client or on a Ubuntu 16.04 client. I built a new version of Samba 4.4.5 using the same procedure as I did for building 4.5rc2 and the 4.4.5 Samba version worked with my smb.conf file. I then created a

Hi, aLL Using Samba-4.3.5 as a AD-member - fileserver. It's running in OpenVZ container (ProxMox VE). Domain is also build on Samba-4.3.5 (another VM). Fileserver's VM is mounted with acl, user_xattr options, Samba compiled with ACL support. There're domain users, for example, "usr1", "usr2". They're in domain group "dg1". There's a filepath

Hi folks, Thanks everybody for your information. I have continued my testing and have got the following to report: Setting up the share with either root:"Domain Admins", or "Administrator":"Domain Admins" as owner, while setting permissions on the share folder to 0777 from the start, and acl_xattr:ignore system acls = yes on the share definition in smb.conf (I

Gentlemen, I am struggling to solve this problem. My file server Samba 4.4.5. Even the administrator user (domain admin) could not write to the share. Could someone give me a hint, in order to solve this problem? shared folder: /mnt/data Folder permissions: # getfacl /mnt/data/teste/ getfacl: Removing leading '/' from absolute path names # file: mnt/data/teste/ # owner: ricardo

On Wed, 5 Oct 2016 12:04:53 +0200 mathias dufresne via samba <samba at lists.samba.org> wrote: > I just tested on some DC running also 4.4.5 and "getent group > my_group" does not show groups content. > > I read here > http://serverfault.com/questions/625416/samba-4-group-members-not-shown-in-getent-group > a proposal to use samba-tool as a replacement but