similar to: permissions of new files and directories

> Von: Rowland Penny via samba <samba at lists.samba.org> > An: samba at lists.samba.org > Datum: 22.09.2016 13:18 > Betreff: Re: [Samba] permissions of new files and directories > Gesendet von: "samba" <samba-bounces at lists.samba.org> > > On Thu, 22 Sep 2016 11:53:36 +0200 > Philipp Snizek via samba <samba at lists.samba.org> wrote: > >

> Von: Rowland Penny via samba <samba at lists.samba.org> > An: samba at lists.samba.org > Datum: 22.09.2016 15:14 > Betreff: Re: [Samba] Antwort: Re: permissions of new files and directories > Gesendet von: "samba" <samba-bounces at lists.samba.org> > > On Thu, 22 Sep 2016 14:36:34 +0200 > Philipp Snizek via samba <samba at lists.samba.org>

On Thu, 22 Sep 2016 14:36:34 +0200 Philipp Snizek via samba <samba at lists.samba.org> wrote: > > > Von: Rowland Penny via samba <samba at lists.samba.org> > > An: samba at lists.samba.org > > Datum: 22.09.2016 13:18 > > Betreff: Re: [Samba] permissions of new files and directories > > Gesendet von: "samba" <samba-bounces at

On Thu, 22 Sep 2016 11:53:36 +0200 Philipp Snizek via samba <samba at lists.samba.org> wrote: > > > Hello > > I'm running Samba 4.3.9 on Ubuntu 14 as domain member. Both Windows > DCs are Win 2012 R2 in 2008 R2 mode. > > This is the smb.conf: > > [global] > workgroup = MYDOM > server string = Fileserver > netbios name = myhostname

Does mdecker exist in AD ? => Yes root at solaris1:~# getent passwd "MYDOM.ADS\\mdecker" mdecker:*:13767:613::/home/mdecker:/bin/bash winbind log: getpwnam MYDOM.ADS\mdecker wb_request_done[24254:GETPWNAM]: NT_STATUS_OK Does 'getent passwd mdecker' work ? => No getent passwd mdecker getpwnam mdecker winbindd_getpwnam: My domain -- rejecting getpwnam() for

Observation: 2 sambas, ADS-member servers one is Debian, samba-4.2.14 2nd is Gentoo, samba-4.5.10 1) winbind enum users = Yes winbind enum groups = Yes winbind use default domain = Yes winbind refresh tickets = Yes idmap config mydomain:schema_mode = rfc2307 idmap config mydomain:range = 10000-99999 idmap config mydomain:backend = rid idmap config *:range = 2000-9999 idmap config * :

Thanks Rowland and Louis, after changing from ad to rid, i get all users listed with "getent passwd", not just the ones with uidNumber - which is good. But "getent passwd MYDOM\\mdecker" still does not resolve. In addition, no groups are listed with "getent group". Looking at winbindd debug, it seems that after trying getgrsid on the very first group "Exchange

Thank you for your feedback. I have changed the parameters, but still no success. winbind use default domain = yes idmap config * : range = 1000000-1999999 idmap config MYDOM : range = 100-999999 Regards, Martin 2017-08-18 15:00 GMT+02:00 Rowland Penny via samba <samba at lists.samba.org>: > > See inline comments: > > On Fri, 18 Aug 2017 14:40:54 +0200 >

Dear Rowland, our windows admin assured me that they have set uidNumber and gidNumber in the range. I have requested screenshots for confirmation. Now we are one step further: "getent passwd | grep mdecker" now lists the AD account. mdecker:*:13667:7142:Decker, Martin:/home/MYDOM/mdecker:/bin/false With "getent passwd mdecker" however, it shows

Thank you for your response! Here comes the smb.conf… André — smb.conf — # Global parameters [global] workgroup = LOPRODUCTS realm = LOPRODUCTS.LOCAL server role = member server security = ads server string = %h server (Samba, Ubuntu) netbios name = fireball disable netbios = yes wins support = no domain master = no local master = no preferred master = no os level = 0 dns forwarder

I fail to set SeDiskOperatorPrivilege on a samba DM and I suspect the german umlauts: # wbinfo -g dom�nencomputer dom�nen-benutzer dom�nen-g�ste dom�nen-admins (bad locale, umlauts displayed as special ugly chars) but the group "domänen-admins" = "Domain Admins" is there. now: # net rpc rights grant "CUSTOMER\domänen-admins" SeDiskOperatorPrivilege -U

Am 07.09.18 um 16:20 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 15:36:15 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> Am 07.09.18 um 15:25 schrieb Rowland Penny via samba: >> >>> From what you have posted it doesn't, but when you do get then >>> working, you need to understand that EA's

Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 19:09:37 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> But >> >> # net rpc rights grant "Domänen-Admins" SeDiskOperatorPrivilege -U >> "mydomain\administrator" >> >> fails >> >> also for

Dear List, I am trying to set up Samba 3.6.25 (solaris 11.3 packaged) to provide unix file shares to windows users. I can successfully list groups and users with wbinfo -u / wbinfo -g, but I do not get any data with "getent group" or "getent passwd". In AD, we have set "gidNumber" Attribute for Group "Domain Users" to a value in the specified range

Hey, I want to use a debian stretch with samba 4 as a fileserver, but I have problems with the access. Here is what I did: apt-get install samba winbind libpam-heimdal libnss-winbind /etc/init.d/winbind stop /etc/init.d/samba stop nano /etc/krb5.conf https://pastebin.com/rkBPJ2Wz nano /etc/samba/smb.conf https://pastebin.com/h1cJZ6sM nano /etc/nsswitch.conf https://pastebin.com/gxK2rJLU

Am 07.09.18 um 12:45 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 11:22:36 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> At a customer server (gentoo linux, so far only Samba version 4.7.7) >> we tried to use Windows ACLs and failed: >> >> no security tab in Windows ... for local C: yes, not on

Am 07.09.18 um 15:25 schrieb Rowland Penny via samba: > From what you have posted it doesn't, but when you do get then working, > you need to understand that EA's and ACL's can work together or > independently. > If 'acl_xattr:ignore system acls = yes' is set, they work > independently, if it isn't, they work together, see 'man > vfs_acl_xattr'

On Mon, Aug 8, 2016 at 5:06 PM, Michael Adam <obnox at samba.org> wrote: > On 2016-08-08 at 16:31 -0300, francis picabia wrote: > > I'm reading the man page for idmap_rid over and over and I can't > understand > > it. I think it needs a rewrite so a normal user can understand. Using a > > practical example. > > I admit it is a little terse. > But

I'm reading the man page for idmap_rid over and over and I can't understand it. I think it needs a rewrite so a normal user can understand. Using a practical example. Step 1: determine the highest UID in use for your /etc/passwd file (can we assume everyone has a passwd file?) Step 2: I don't know... Optionally at this point, document how to plug that into the formula RID = ID +

Am 03.01.19 um 16:51 schrieb Rowland Penny via samba: > Hmm, 'Projekte' works and is writeable by 'root', members of the 'qm' > and anybody else. Whilst 'QM' is only writeable by 'root'. Does this > give you any hints ? sure. changed this already in all directions before. and you also said you were following this wiki > page: > >