similar to: book of samba 4.1 or 4.2

On 17/11/16 19:48, Rowland Penny via samba wrote: > If you are running Samba as an AD DC or domain member, then you > shouldn't be using 'valid' & 'invalid' any more. As for creating > users etc, samba-tool comes with help, try running 'samba-tool --help' > > If you have more questions, please feel free to ask ;-) > > Rowland > What? Really?

Hi all. I have this question: if put chown root:"Domain User" /patch/ i optain error:group not found. This is my parametred. # Global parameters [global] security = ADS workgroup = ROBINOOD realm = ROBINOOD.TST dns forwarder = 192.168.1.6 log file = /var/log/samba/%m.log log level = 1 # Default ID mapping configuration for local BUILTIN accounts # and groups on a domain member. The

Hi list, Very strange problem here on Samba 4.5.2 DCs. We have set up some GPOs and they seem to work fine, however we need to apply some Security Filtering to a couple of them. We can add groups and users until we reach 6 groups/users/computers in the list box in GPO management. As soon as we try to add a 7th entry, GPO Management throws an "Access Denied" error. Even odder is

Are you replacing or merging the policies? > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Alex Crow via > samba > Verzonden: maandag 19 december 2016 15:29 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] GPO Security Filtering "Access Denied" > > > > On 19/12/16 14:18, L.P.H. van Belle via

This is my smb.conf of the member of domain # Global parameters [global] security = ADS workgroup = ROBINOOD realm = ROBINOOD.TST #dns forwarder = 192.168.1.6 log file = /var/log/samba/%m.log log level = 1 vfs objects = acl_xattr map acl inherit = yes store dos attributes = yes # Default ID mapping configuration for local BUILTIN accounts # and groups on a domain member. The default (*) domain: #

Hi everyone. I have 2 vps: one configured as pdc (witch ip address 192.168.1.6) fully functional. On the second vps I would like to create a domain member and have it join on the pdc. I read the wiki https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member but I can not understand the guide. For example, pearl of krb client but does not say (use debian streatch) what I have to

We actrually have the same problem. However, we are running a normal fileserver (also Sernet 4.4.5) no cluster in an NT-Style domain with Centos 5 (Samba 3.6.23) as the DC. IT works OK for some days then just stops. Any idea how to debug? Regards Christian --

My first Active Directory setup had two DC's and shortly after getting things going the second DC created a hardware failure issue and I just continued life with one DC. Now, while upgrading I am returning to two DC's. In a normal Bind9 "master and slave" setup the master always "feeds" the slave. With Bind9_DLZ setup (recommended to be used with Samba4) there is

Hi List, As the subject states, I'm running a CTDB cluster. Samba is Sernet 4.4.5 in an NT-Style Samba domain (DCs are Centos 6 packaged samba, 3.6.22) Every so often, users are unable to connect to network shares. Most of the problems seem to happen on Windows 7 domain members, but smbclient will also fail to connect. I see these lines in the logs for every attempted connection:

There's nothing wrong with that path. If your DNS is working, you should be able to connect to \\foo, which is your AD domain. It will just pick one of your DCs instead of a static one. Alex On 06/02/17 14:36, basti via samba wrote: > > samba-tool gpo listall > showes also wrong path in gpo > > > On 06.02.2017 15:21, basti via samba wrote: >> When I do an gpupdate

Hi Alex, On Thu, 20 Oct 2016 14:28:38 +0100, Alex Crow via samba <samba at lists.samba.org> wrote: > > > > It appears that samba is still using local databases and not clustered > > databases. > > > > What does "ctdb getdbmap" list? Is locking.tdb a clustered database? > > Do you have "clustering = yes" in smb.conf on all the

>> You don't have smbd/smbstatus installed from a package in /usr/ and the >> other left over in /usr/local/, or similar? In that case, they could >> be getting their configurations from different places... >> >> peace & happiness, >> martin > Hi Martin, > > No, nothing like that. Installing the Sernet packages obsoletes the > distro ones.

On 03/07/16 13:06, Volker Lendecke wrote: > On Fri, Jul 01, 2016 at 10:00:21AM +0100, Alex Crow wrote: >> We've had a strange issue after following the recommendations at >> https://wiki.samba.org/index.php/Ping_pong, particularly the part >> about mmap coherence. We are running CTDB/Samba over a MooseFS >> clustered FS, and we'd not done the ping-pong before.

Hello. First, sorry for my English, I try to write correctly. I have a problem with the samba-dc-ac daemon. I am trying to connect a squid server with authentication against the samba-dc-ac database. With encryption I can not connect to the squid server I have no option to accept any certificate. It is a self-signed certificate. I suspect that the problem is here. I can not connect to port 389

On 09/04/18 16:49, Vincent Royer wrote: > > > Is a flash-backed Raid required for JBOD, and should it be 1gb, 2, > or 4gb flash? > > RAID and JBOD are completely different things. JBODs are just that, bunches of disks, and they don't have any cache above them in hardware. If you're going to use ZFS under Gluster, look at the ZFS docs first. Short answer is no.

On 21/10/16 10:52, Ralph Böhme wrote: > On Fri, Oct 21, 2016 at 10:30:46AM +0100, Alex Crow via samba wrote: >> Interestingly I have a setup here for testing for rollout of S4 AD. The file >> servers are in an AD domain and are running Sernet 4.4.5, so one version >> older than production. > maybe it's related to bug 12005 that was fixed in 4.4.6? Can you test > with

On 09/04/18 19:02, Vincent Royer wrote: > Thanks, > > I suppose what I'm trying to gain is some clarity on what choice is > best for a given application.? How do I know if it's better for me to > use a raid card or not, to include flash-cache on it or not, to use > ZFS or not, when combined with a small number of SSDs in Replica 3. > > How few is "small

OK, so since it appears our only recourse is to build a new domain from scratch, how can we prevent this from happening again? We have several Gentoo workstations, a bunch of Windows 7 workstations, and a few NAS devices which run Linux of some flavor. How do we use NIS attributes without killing our domain? The Samba guide even has instructions for using ADUC to set the UID/GID for users and

On 19/12/16 17:57, Miguel medalha wrote: >>> No, I don't, because this is a loopback and I only want certain >>> users on these computers to have the screensaver and lock disabled. If I did that it would apply to everyone. > No, it wouldn't apply to everyone. As of April this year, according to Microsoft, all policies must have "Authenticated Users" with

I try to set up a Samba4-based Fileserver in an Samba3-DC enviroment. Filesystem is ext4, CIFS + NFS4 should be provided. The same ACLs should be used over both protocols. With Samba 3 this was possible (using POSIX 1003.1e DRAFT 17 ACLs only) . How can I do the same with Samba 4 ? Posix-ACLs set on the server with setfacl are recogniced on a windows-client. But every change I do on a