similar to: Standalone Samba in a Win2008 DC environment, transition to samba

Hi All, It is unclear to me what group membership should \\server\users (or /srv/samba/users) get if it is planned to be ina standalone role... and using only POSIX ACLs. The relevant wiki instructions are stating: "Create the directory and set the correct permissions: # mkdir -p /srv/samba/users/ # chgrp -R "Domain Users" /srv/samba/users/ # chmod 2750 /srv/samba/users/"

Hello, Am 08.03.2017 um 23:17 schrieb Lin Pro via samba: > Questions: > 1. Can Samba 4.5 "standalone" be started temporarily in parallel with > Win DC so that workstations can "see" it and copy files to the samba > server? (there are no plans to join the Win DC domain with samba > standalone). Not just temporarily. You can have multiple standalone servers, AD

Hi all,   can I freely create an account for the Wiki and do changes? Or should I notify someone (Rowland)? I found a small error in https://wiki.samba.org/index.php/User_Home_Folders . The wiki mentions as rights on the share Read and Execute for Authenticated Users, but on that level I see only Full Control, Change and Read. My assumption is that it should be Change and Read for Authenticated

When Samba forgets a user who has been authenticated and gained accessed to a share? I would like to test several users from one and the same windows workstation and do not know how to log-off after successfully accessing a share. Samba 4.5 standalone Workstation working from a domain account or from a local account. best regards linforpros

Thank you for your guidance. I must have something seriously wrong in the settings. Here is the eACL share: root at ubuntu-dm1:~# ls -l /srv/samba/eACLshare/ -d drwxr-xr-x 2 root domain admins 4096 Feb 21 09:00 /srv/samba/eACLshare/ >From Windows as an administrator of the domain, Comp Management - Connect to another computer -> System Tools I get UBUNTU-DM1 cannot be connected.... But

I have given the SeDiskOperatorPrivilege on the domain member but it did not help. The connection warning persists when I click on the "Shared Folders" + shared. It says to check network path, firewall rules. dismissing the window takes me to the domain member and shared folder can be selected and viewed. An attempt to modify and pressing "apply" results in another warning that

I'm configuring a standalone server(server role = standalone server) using POSIX ACLs to manage permissions on server. I need to manage permissions(At least basic ones, like read, write) from Windows GUI. Is that possible using standalone? When I try setting permissions on Windows I got this on the log: [2017/10/04 19:07:08.437837, 2] ../source3/smbd/posix_acls.c:3006(set_canon_ace_list)

root at ubuntu-dm1:~# getent group Domain\ Admins domain admins:x:10004:

When checking on the UNIX attributes of the Domain Admins group I get the warning "Unwilling to perform" Is this something I should resolve first? Lin

Both ubuntu machines have iptables -L: Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination And the windows server firewall off How can that happen to me... I am speechless Lin

There are two ubuntu 16.04 samba 4.5 servers. Ubuntu ADDC and a Member (ubuntu-dm1) >From Member "wbinfo -u" shows shows users of ADDC >From Member "net ads join -U administrator" was successfull with no errors. The dns A record was added in ADDC. But getent passwd <user> shows no results. DMember's /etc/nsswitch.conf passwd: compat winbind group:

Hello, ldbsearch -H .... fails with a message that samba_dsdb is not found and LDB_MODULES_PATH needs to be set. Fixing it temporarily with: export LDB_MODULES_PATH=/usr/lib64/samba/ldb allows ldbseach command to work. Is it critical for ADDC operation though? [root at feddc ~]# rpm -q samba libldb ldb-tools samba-dc samba-4.7.0-12.fc27.x86_64 libldb-1.2.2-1.fc27.x86_64

Hi, The following problem: [root]#kinit administrator kinit: Cannot contact any KDC for realm 'DC-STATIC.LUUFORPROS.COM' while getting initial credentials A restart of samba.service finally starts krb5kdc: [root]#systemctrl restart samba [root]# ps axf |grep krb 1249 pts/0 S+ 0:00 \_ grep --color=auto krb 1212 ? S 0:00 | \_ /usr/sbin/krb5kdc -n

Hello, My apologies for my bad english, this is not my birth langage and I'm still learning it. I'm trying to configure a Samba server to simply use LDAP backend for authenticate users. Just that, I don't care of PDC/BDC, etc.The samba schema is present in the LDAP, and in the users profile. The samba server have the same SID as the domain. I can log to my samba server using LDAP

I am trying to establish 2 way trust relationship between samba domain and Win2008 AD domain. The trust relationship is established and even verified by both side, but when I try to access samba resources from win2008 domain, it prompts for username and password. However, I can access the win2008 resources from the samba domain without the prompting of username and password. My win2008 is

Hi, I try to follow the instructions (https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#File_System_ACLs_in_the_Back_End) A big screen pops up with when an attempt is made to connect to member server, then connection is granted but I am suspitious if changes can be made. SeDiskOperatorPrivilege on ADDC is granted to BUILTIN\Administrators and Domain Admins But the Member

I made the changes you proposed but still my system must be messed up. Please have a look at the screenshots below... may be you or some other guru would know how to come out of this mess. http://pasteboard.co/Ba9Ex0NQD.png http://pasteboard.co/3Iq39El98.png By the way, is there a clean way to reset ADDC and DM so that I could start fresh? those two virt machines are just lab machines. I can do

On Tue, 26 Sep 2017 20:19:03 +0200 Marc Muehlfeld <mmuehlfeld at samba.org> wrote: > Hi, > > As you said: It's Fedora 27 _rawhide_. You should report a bug: > https://bugzilla.redhat.com/ > Please don't forget to attach logs, etc. Ok, I just opened a bug over there. But in the meantime found out that: Systemctl status samba.service shows the following as well:

Hi, list: Our printers are using samba-3.0.37, and we hit a problem recently when doing file transfer to Windows 2008 Server Clusters. The error occurs when the printer attempts to locate the file path and uses the server IP address rather than the hostname: ====================================================== 18 21.335677 13.121.8.162 13.121.8.3 SMB Session Setup AndX Request,

Hello, We are running samba 3.0.34 and having problem joining windows 2008 domain when "server ldap signing is required". We configured start-tls, copied over the CA certificate but getting an error for the request to start ssl/tls To be exact, here is what we see in wireshark: Our request to the domain: requestName: 1.3.6.1.4.1.1466.20037 (LDAP_START_TLS_OID) Respond from the