similar to: GPO Security Filtering "Access Denied"

Are you replacing or merging the policies? > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Alex Crow via > samba > Verzonden: maandag 19 december 2016 15:29 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] GPO Security Filtering "Access Denied" > > > > On 19/12/16 14:18, L.P.H. van Belle via

There's nothing wrong with that path. If your DNS is working, you should be able to connect to \\foo, which is your AD domain. It will just pick one of your DCs instead of a static one. Alex On 06/02/17 14:36, basti via samba wrote: > > samba-tool gpo listall > showes also wrong path in gpo > > > On 06.02.2017 15:21, basti via samba wrote: >> When I do an gpupdate

On 19/12/16 17:57, Miguel medalha wrote: >>> No, I don't, because this is a loopback and I only want certain >>> users on these computers to have the screensaver and lock disabled. If I did that it would apply to everyone. > No, it wouldn't apply to everyone. As of April this year, according to Microsoft, all policies must have "Authenticated Users" with

Hi List, As the subject states, I'm running a CTDB cluster. Samba is Sernet 4.4.5 in an NT-Style Samba domain (DCs are Centos 6 packaged samba, 3.6.22) Every so often, users are unable to connect to network shares. Most of the problems seem to happen on Windows 7 domain members, but smbclient will also fail to connect. I see these lines in the logs for every attempted connection:

We actrually have the same problem. However, we are running a normal fileserver (also Sernet 4.4.5) no cluster in an NT-Style domain with Centos 5 (Samba 3.6.23) as the DC. IT works OK for some days then just stops. Any idea how to debug? Regards Christian --

My first Active Directory setup had two DC's and shortly after getting things going the second DC created a hardware failure issue and I just continued life with one DC. Now, while upgrading I am returning to two DC's. In a normal Bind9 "master and slave" setup the master always "feeds" the slave. With Bind9_DLZ setup (recommended to be used with Samba4) there is

>> You don't have smbd/smbstatus installed from a package in /usr/ and the >> other left over in /usr/local/, or similar? In that case, they could >> be getting their configurations from different places... >> >> peace & happiness, >> martin > Hi Martin, > > No, nothing like that. Installing the Sernet packages obsoletes the > distro ones.

On 09/04/18 16:49, Vincent Royer wrote: > > > Is a flash-backed Raid required for JBOD, and should it be 1gb, 2, > or 4gb flash? > > RAID and JBOD are completely different things. JBODs are just that, bunches of disks, and they don't have any cache above them in hardware. If you're going to use ZFS under Gluster, look at the ZFS docs first. Short answer is no.

On 21/10/16 10:52, Ralph Böhme wrote: > On Fri, Oct 21, 2016 at 10:30:46AM +0100, Alex Crow via samba wrote: >> Interestingly I have a setup here for testing for rollout of S4 AD. The file >> servers are in an AD domain and are running Sernet 4.4.5, so one version >> older than production. > maybe it's related to bug 12005 that was fixed in 4.4.6? Can you test > with

On 03/07/16 13:06, Volker Lendecke wrote: > On Fri, Jul 01, 2016 at 10:00:21AM +0100, Alex Crow wrote: >> We've had a strange issue after following the recommendations at >> https://wiki.samba.org/index.php/Ping_pong, particularly the part >> about mmap coherence. We are running CTDB/Samba over a MooseFS >> clustered FS, and we'd not done the ping-pong before.

Hi Alex, On Thu, 20 Oct 2016 14:28:38 +0100, Alex Crow via samba <samba at lists.samba.org> wrote: > > > > It appears that samba is still using local databases and not clustered > > databases. > > > > What does "ctdb getdbmap" list? Is locking.tdb a clustered database? > > Do you have "clustering = yes" in smb.conf on all the

On 09/04/18 19:02, Vincent Royer wrote: > Thanks, > > I suppose what I'm trying to gain is some clarity on what choice is > best for a given application.? How do I know if it's better for me to > use a raid card or not, to include flash-cache on it or not, to use > ZFS or not, when combined with a small number of SSDs in Replica 3. > > How few is "small

Hello. First, sorry for my English, I try to write correctly. I have a problem with the samba-dc-ac daemon. I am trying to connect a squid server with authentication against the samba-dc-ac database. With encryption I can not connect to the squid server I have no option to accept any certificate. It is a self-signed certificate. I suspect that the problem is here. I can not connect to port 389

On 17/11/16 19:48, Rowland Penny via samba wrote: > If you are running Samba as an AD DC or domain member, then you > shouldn't be using 'valid' & 'invalid' any more. As for creating > users etc, samba-tool comes with help, try running 'samba-tool --help' > > If you have more questions, please feel free to ask ;-) > > Rowland > What? Really?

On 03/11/16 19:37, Volker Lendecke wrote: > On Thu, Nov 03, 2016 at 07:11:12PM +0000, Alex Crow via samba wrote: >> >> On 03/11/16 14:28, Ralph Böhme wrote: >>>> Ah, my smb.conf is missing the "ctdb socket" parameter. According to "man >>>> smb.conf" this should be set, but I don't remember seeing it on the wiki >>>> pages.

Hi Alex, Nice information about forest type. Regarding listing domain users, have you tried to set up samba with: winbind use default domain = no? 2016-07-11 19:50 GMT+02:00 Alex Crow <acrow at integrafin.co.uk>: > > > On 11/07/16 13:55, Alex Crow wrote: > > Hi List, > > > > I am currently testing inter-forest trusts between a pair of AD > > domains.

When I do an gpupdate /force a wrong url is used. \\foo\SysVol\foo\Policies\{89E....}\gpt.ini ON my dc the path (in explorer) is \\dc1\sysol\foo\Policies\{89E....}\gpt.ini or \\dc1.foo\sysol\foo\Policies\{89E....}\gpt.ini whats wrong?

On 19/12/16 15:55, L.P.H. van Belle via samba wrote: > Did you add "domain computers" to the security filter also with Read/apply? > > > Hi Louis, Miguel, I'm applying it to specific computers, so I've created a group with those machines in it. It's not that the problem is applying the GPOs to the machines in the OU and group, the access denied message is a

On 12/8/2016 5:16 AM, Alex Crow via samba wrote: > > > On 07/12/16 16:23, L.P.H. van Belle via samba wrote: >> Just check, yes all my pc's ( dhcp and static ) are owner of the DNS >> records. >> >> NTDOM\COMPUTERNAME$ is set on the record and every pc its own record. >> >> ! one thing, i do use Bind9_dlz with samba and not internal DNS. >> I

Hi Ralph, I applied the patch to a new build of Sernet 4.4.6 SRPM. I could still open the file from both hosts, and in fact this time I could actually open it on the same host without any problems: host 1: smbclient -U ajc //172.31.0.120/ifa_v ... smb: \jmi\Corporate Accounting\ISL Ltd Accounts\2016\1609\> open "201609 213_ ISL Balance sheet variance analysis.xls" open file