similar to: retire first member server Administrator account complaint

Gentlemen, First, let me point out that sometimes (and sometimes not) the mailing list will strip out some backslash marks in cut and paste. So, if there is a backslash missing . . . well, ignore that missing mark. Louis, When your script runs it creates the following default permissions: root at mbr01:~# ls -alh /home/samba/TEST/profiles total 8.0K drwxr-xr-t 2 root root 4.0K Feb 21 18:39

On 10/03/15 11:48, Bob of Donelson Trophy wrote: > > > Okay, so I tried a "Bob thing" and it made no difference. So, no comment > on that. However, I am learning. > > This is 'wbinfo -*' from my DC1: > > root at tdc01:~# wbinfo -u > Administrator > Guest > krbtgt > dns-tdc01 > dns-TDC02 > root at tdc01:~# wbinfo -g > Enterprise

On my test system I can only get 'getent -V' to respond. Member server smb.conf file: root at mbr01:~# cat /etc/samba/smb.conf [global] workgroup = TEST security = ADS realm = TEST.BOB netbios name = mbr01 domain master = no host msdfs = no dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab client signing = if_required ## map id's outside to

I am setting up W7 profiles following the "Samba & Windows Profiles" on the Sambawiki. If it matters, I have two functional DC's and one member server. When I run '# chmod 1770 /srv/samba/profiles' (on the member server) the permissions changed to: root at mbr01:~# ls -alh /srv/samba/profiles total 12K drwxrwx--T+ 2 root root 4.0K Mar 1 10:21 . drwxr-xr-t 5 root

Bob, to the following.. set the in smb.conf not more not less. On the member server. [profiles$] path = /home/samba/TEST/profiles read only = no acl_xattr:ignore system acl = yes restart samba now type chown root:root /home/samba/TEST/profiles chmod 1777 /home/samba/TEST/profiles Now go to the wiki and set the correct rights for a profile share. and ONLY for AD! ( not the POSIX )

Okay, so I did this to myself. I overlooked an important sentence on the "https://wiki.samba.org/index.php/Samba_%26_Windows_Profiles". The sentence that instructs to do "Profile share using Windows ACLs" ***OR*** "Profile share with using POSIX ACLs". So, I have reset the permissions to how they were before I messed them up doing the "POSIX ACLs" part.

Rowland, 'getent group DomainUsers' indeed returns nothing. Now, I know, you know this like the "back of your hand" but, am I wrong, are the permissions for **profiles** somewhat (not alot) different from permissions for file shares? Because I see that instructions (on the wiki) for file sharing reads differently. Thanks, again. --- ------------------------- Bob Wooden

Okay, so I tried a "Bob thing" and it made no difference. So, no comment on that. However, I am learning. This is 'wbinfo -*' from my DC1: root at tdc01:~# wbinfo -u Administrator Guest krbtgt dns-tdc01 dns-TDC02 root at tdc01:~# wbinfo -g Enterprise Read-Only Domain Controllers Domain Admins Domain Users Domain Guests Domain Computers Domain Controllers Schema Admins

Debian, already 'root'. Isn't the objective to get a 'SAMDOMDomain Admins' group onto the member server? In the usual way to add any group to a linux box? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-03-10 06:57, Rowland Penny wrote: > On 10/03/15 11:48,

On 05/03/15 17:22, Bob of Donelson Trophy wrote: > > > Rowland, > > 'getent group DomainUsers' indeed returns nothing. > > Now, I know, you know this like the "back of your hand" but, am I wrong, > are the permissions for **profiles** somewhat (not alot) different from > permissions for file shares? Because I see that instructions (on the > wiki)

Hi, What is the output of the "id <domain user>" ? please share that. On 5 Mar 2015 18:56, "Bob of Donelson Trophy" <bob at donelsontrophy.net> wrote: > > > I am setting up W7 profiles following the "Samba & Windows Profiles" on > the Sambawiki. > > If it matters, I have two functional DC's and one member server. > > When

On 2016-11-14 08:39, L.P.H. van Belle via samba wrote: > Is this on a windows 7 or 10 client or both? > Are you useing \\FQ.DN\share or \\hostname\share > Try the FQ.DN, as Microsoft advices. > > And where are the TLS parameters in the below config. > Did you set this up? > > Greetz, > > Louis > >> -----Oorspronkelijk bericht----- >> Van:

On 2016-11-07 03:06, Rowland Penny via samba wrote: > On Mon, 7 Nov 2016 09:51:50 +0100 > "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > I thought the W clients (both W7 and W10) reverse dns PTR records > where added by the ADDC automatically. Yes, correct if your setup is correct then yes this works. With a default windows install and with a

I just transfered fsmo roles from one DC to my newer DC and all went well. Thank you Samba team!! Great documentation, BTW. My domain (basically) consists of one ADDC, one member server and two W10 clients and one W7 client. While setting up the newer DC had been running some nslookup on the DC's and decided to run nslookup on my member server and do not know if I have discovered and

Oops, sent it to Louis directly. My bad. See conclusion below. -------- Original Message -------- SUBJECT: Re: [Samba] Member server losing smb connection [solved] DATE: 2016-11-14 10:22 FROM: Bob of Donelson Trophy <bob at donelsontrophy.net> TO: "L.P.H. van Belle" <belle at bazuin.nl> REPLY-TO: bob at donelsontrophy.net On 2016-11-14

I have a member server running Ubuntu 16.10, Samba 4.4.5 that is serving files to W10 and W7 clients. Things appear fine and suddenly the server share disappears and the W clients "cannot see" the server. The client error message is: "The device or resource (member hostname) is nt setup to accept is not setup to accept connections on port "The file and print sharing

On 2016-11-05 08:21, Rowland Penny via samba wrote: > On Sat, 05 Nov 2016 08:07:18 -0500 > Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > > On 2016-11-05 07:46, Mike Lykov via samba wrote: > > 05.11.2016 16:09, Bob of Donelson Trophy via samba пишет: > > Once again, reading here and there and I am confused. > > I thought the W clients

On 2016-12-01 10:00, Rowland Penny via samba wrote: > On Thu, 01 Dec 2016 09:20:15 -0600 > Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > >> From: Bob of Donelson Trophy via samba <samba at lists.samba.org> >> To: SAMBA MailList <samba at lists.samba.org> >> Subject: [Samba] member server resolv.conf question >> Date: Thu,

On 09/20/2016 04:09 PM, Bob of Donelson Trophy via samba wrote: > On 2016-09-20 15:00, James Knott via samba wrote: > >> On 09/20/2016 03:54 PM, Bob of Donelson Trophy via samba wrote: >> >>> All of us are having trouble with the "Anniversary update" to W10 >>> Version 1607. If you can roll back to previous Version 15?? (sorry can't >>>

W7 client domain member? yes. Logged in as domainAdministrator? yes. "SeDiskOperatorPrivilege" set? yes Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [2] "Everyone deserves an award!!" On 2015-01-28 10:40, Marcel de Reuver wrote: >