similar to: Inherit permissions of destination during file move.

Hi Guys & Girls, Samba VFS Recyclebin is a brilliant feature but I need to figure a way to make it non-visible to end users as often files deleted are done so maliciously. The VFS module defaulty places the Recyclebin directory in the of whichever share it is active on, Ive tried a couple of ways to hide it but none successful. hide files veto files... ? smb.conf below [global] workgroup =

I have a need to setup the recycle vfs object on our server. On my test server, I have all of the shares on a single drive and have put the following into each share: vfs_objects = recycle recycle:repository = [Actual Path and Partition that the share is located] recycle:directory_mode = 770 recycle:keeptree = Yes recycle:touch_mtime = Yes recycle:versions = Yes It works like a charm. All

On 27/04/16 19:55, Jason Voorhees wrote: >> OK, you have two DCs, on one, your user can access a share, you basically >> copy the shares to another DC (with all the same permissions etc) and your >> user cannot access the share on the second DC. >> >> How is AD set up ? are you using uidNumber & gidNumber attributes (you will >> have added them manually) or

> OK, you have two DCs, on one, your user can access a share, you basically > copy the shares to another DC (with all the same permissions etc) and your > user cannot access the share on the second DC. > > How is AD set up ? are you using uidNumber & gidNumber attributes (you will > have added them manually) or are you using the xidNumbers created > automatically by

We have Samba setup for our shared drive. I have pasted the smb.conf file below. Everything is working well accept when we try and run an EXE file using Windows Vista. When we run an EXE file it first ask for UAC control then it pops up the username and password prompt. You must then type your username and password in again before it will run. I think the issues is that UAC is now running the

This is a normal behaviour if you are using several dcs. Users und groups do have another gid/uid on each server until you fix it manually. This was a hard experiennce and work even fo rme which I suggest that this should be the next goal for the samba 4 developers to solve and fix it in an easy way for the admins. In my opinion, if I run several dcs in a domain this should be done between the

intro: i use a heavily customized arch-linux clone, so this is no newbie stuff. except root all linux users are auth'ed via winbind/w2kdc's. for windoze-user-convenience i have to use winbind use default domain == yes and installed ext3-acl support. acls are working ok, if managed via get/setfacl an also samba honours them correctly. for windoze-user-convenience acls should

On Thu, 03 Nov 2016 15:10:11 +0100 Janning Schmidt <janning.schmidt at xinux.de> wrote: > Hi. > > It´s a virtual machine on an esxi-server, if that was what you meant. > > The Version is "Version 4.1.6-Ubuntu" > > There where no modifications done before this error showed up the > first time. > > And the smb.conf-file is: > > root at

Hi Lorenzo and Dale, My setup is like Lorenzo's completely based on setgid being propagated. The filesystem should determine the group used starting at a certain directory. Different "root" directories have different groups, and security is based on groups, not users. I tried all sorts of settings combinations, alseo "force directory mode = 2770", but none propagates

thanks for suggestion, in other words you use only ACLs for users denying all for groups, unfortunately we had many group such as domain users, secretary, finance, etc belonging to users for which we need to apply at least 770 in order to gain a simplified permission management using groups the actual dirty workaround I applied was to track new files/dir by tailing with follow ( tail -f ) a

I need samba users to be able to change there own password I have swat running I can login as root and changes users passwords fine. But if I login into swat as a normal user and try to change a password I get machine 127.0.0.1 rejected the password change: Error was : Password restriction. The passwd for 'username' has NOT been changed. If I try it from the shell I also get samba# su

Hello, For some time now I have thought that Samba was a piece of cake to setup and thought making it a PDC and WINS server to boot, would not be much harder. Haha, I am finding out I was very wrong. First question: Since logon.bat is being processed by a windows client machine that has no idea what to do with Samba variables, how do you avoid having to create a separate logon script

I have an unusual problem and forgive my ignorance with Linux since I am a windows sys admin. This is my first taste with Linux and I have been really enjoying it. I recently setup a samba print server 3.0 (member server, not a PDC) to be used by Windows clients. Everything seems to be working good (joined to domain, uploaded printer drivers, objects appear in "Printers and Faxes") The

Hi, My log files are being flooded with errors like the ones below whenever a Mac delete files from a Samba share. [2019/07/26 14:02:26.182564, 0] ../source3/modules/vfs_recycle.c:243(recycle_get_file_size) recycle: stat for Chris_Mac/._videos.docx returned No such file or directory [2019/07/26 14:02:27.186472, 0] ../source3/modules/vfs_recycle.c:243(recycle_get_file_size) recycle: stat

Hello, Please help me with this. Access rights granted with acl to unix groups work only on about 2 out of 10 logins, otherwise I get access denied. Directories with rights granted to everybody are always accessible. Rights were granted from within Windows 7 to a unix-group named "g_all". Samba is 4.1.6 of Ubuntu 14.04 Output of testparm: rlimit_max: increasing rlimit_max (1024) to

I've noted that in my domain (AD) if i do some folder redirection in GPO, for every folder a $RECYCLE.BIN folder get created. That users clearly never cleanup. a) (Windows Side) there's some 'things' (GPO, script, ...) that can cleanup trash folders 'file older then X days'? I've found the powershell script 'Clear-RecycleBin', but seems that empty the bin, not

When the world was young, "Ken Walker" <kwalker@island.net> carved some runes like this: > I have been working on setting up IP MASQ on my home network (using > RH6 as server with dial up modem connection and Win98 on another > computer as a client) and making some changes to services the Linux > box runs with security concerns in mind. [snip] > The ones I

We have the following share: [users] path = /home read only = No inherit acls = yes inherit permissions = yes inherit owner = yes the /home permissions are: drwxr-xr-x ... root root ... /home There are /home/user1, /home/user2, ... folders. When they are created their permissions are set like this: drwx--Sr-x ... user1 "Domain Users" ...

Hello, I have a Fedora server, part of a domain, on which various shares are configured. For one share, I want to set up permissions according to the groups to which the users belong. But it doesn't work. For example, I want the share to be accessible by group A in read-write mode, and group B in read-only mode. I use setfacl for this. But neither group A nor group B have access to the

On Thu, 18 Dec 2014 09:49:28 -0800 Jeremy Allison <jra at samba.org> wrote: winbind trusted domains only = yes > > > > server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, > > winbind, nt p_signd, kcc, smb > > Remove 'smb' from this line. In fact, remove this line > completely. Where did you find docs telling you to add > this