similar to: Problem mapping extended acls with sssd and samba

First of all, thank you. Yes. I'm sure sssd is running 100%. The documentation of the link that passed me served as a basis to implement. I'll follow your advice and I'll ask you on the sssd user list. Even so, I hope someone else who went through the same score answers here. Thank you all. 2017-03-19 18:16 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>: >

On Mon, 20 Mar 2017 23:05:46 -0300 edson <edeaoinfor at gmail.com> wrote: > Hello. > > I was able to solve the problem. The system was using the libwbclient > library of the samba package. I just did the following: > > Yum install sssd-libwbclient > So it wasn't a Samba problem and sssd wasn't working correctly even though you were 100% sure it was ;-)

Thanks for the answer. But even removing the write list parameter, the problem persists. Excuse me. But the sssd service is working perfectly, and I see no reason to ask for help on the sssd user list. One important information is that when I apply the ACLs using the setfacl command the mapping is done and the permissions are applied. But when I use windows explorer the ACLs permissions are

Hello experts I currently have a file server running on CentOS 7. The file server is joined to the enterprise.com domain (with Samba 4.5). The enterprise.com domain (with samba 4.5) maintains a trust relationship with the example.com domain running on windows server 2012R2. The problem occurs when a user of the example.com (windows server) domain authenticates on a workstation of the

Hello experts I currently have a file server running on CentOS 7. The file server is joined to the enterprise.com domain (with Samba 4.5). The enterprise.com domain (with samba 4.5) maintains a trust relationship with the example.com domain running on windows server 2012R2. The problem occurs when a user of the example.com (windows server) domain authenticates on a workstation of the

On a Centos 7 minimal fresh install and samba 4.4.4 I have follow this howto: http://www.hexblot.com/blog/centos-7-active-directory-and-samba and I have Joining to an Active Directory server and login to it with domain user without problem. My problem occur when I try from windows to modify some new rights (ACL's) to new folder on samba share. The folder is created correctly but if I add

Hello. I was able to solve the problem. The system was using the libwbclient library of the samba package. I just did the following: Yum install sssd-libwbclient Set this new library installed with default on the system: Alternatives --set libwbclient.so.0.12-64 /usr/lib64/sssd/modules/libwbclient.so.0.12.0 And restart the smbd and sssd daemons: Systemctl restart sssd smbd Now I can set the

Dear all, i'm investigating the issue that I can't authenticate against a Samba (as Active-Directory Member) using the userPrincipalName (UPN). (Using Samba and sAMAccountName works fine.) After some research I'm quite sure that winbind is limited to the sAMAccountName and can't use UPN. So I deciced to use SSSD and configured the `ldap_user_name = userPrincipalName` in the

Le 14/05/2019 à 09:12, Rowland penny via samba a écrit : > On 14/05/2019 07:32, Julien TEHERY via samba wrote: >> Le 13/05/2019 à 18:44, Rowland penny via samba a écrit : >>> On 13/05/2019 16:11, Julien TEHERY via samba wrote: >>>> Hi >>>> >>>> I'm trying to find a way to change user passwords from ubuntu >>>> client

> > No, you only thought it worked using sssd on 4.8.x & 4.9.x, but it > didn't work correctly. > Maybe, but it "worked". Can we speculate what change in 4.10.x prompted Samba to export "Unix user\username" type of ownership to Windows clients instead of SID? Is there any option to revert to previous "wrong" behavior as a temporary workaround?

On 05/10/2020 16:14, Markus Jansen via samba wrote: > Dear all, > > i'm investigating the issue that I can't authenticate against a Samba (as Active-Directory Member) using the userPrincipalName (UPN). (Using Samba and sAMAccountName works fine.) > > After some research I'm quite sure that winbind is limited to the sAMAccountName and can't use UPN. So I deciced to

On Sun, 19 Mar 2017 18:03:34 -0300 edson <edeaoinfor at gmail.com> wrote: > Thanks for the answer. > > But even removing the write list parameter, the problem persists. > > Excuse me. But the sssd service is working perfectly, and I see no > reason to ask for help on the sssd user list. Are you 100% sure this has nothing to do sssd ? > > One important

So, so.. Server and clients are CentOS7. Server was configured using samba-tool domain provision. *smb.conf* from server [global] > netbios name = AD > realm = XXXXXX > server role = active directory domain controller > server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, > winbindd, ntp_signd, kcc, dnsupdate > workgroup =

Am 29.04.2018 um 12:35 schrieb Zdravko Zdravkov via samba: > [sssd] >> domains = xxxx >> config_file_version = 2 >> services = nss, pam >> [domain/xxxx] >> ad_domain = xxxx >> krb5_realm = XXXX >> realmd_tags = manages-system joined-with-samba >> cache_credentials = True >> id_provider = ad >> krb5_store_password_if_offline = True

Hello. I need the file server to authenticate users from two domains. Of DOMAINA that the file server has joined and users of DOMAINB that maintains a trust relationship with DOMAINA. I have two domain forests (DOMAINE and DOMAINB), and a trust relationship exists between both. DOMAINA servers are running with samba version 4.5 (with CentOS 7 system) the DOMAINB server is running with windows

Hi @all, I have some problems when using pam_mount.conf.xml to mount shares via kerberos (and also for ntlm) regarding reliability of the mount. I have tested the issue with 2 different environments. My environments are: 2 Microsoft Domain Controllers + a separate fileserver and Ubuntu 18.04 or 22.04 as clients. My other tested environment is one Microsoft Server 2019 (as domain controller and

Hi guys! Do you known if there is something to do to let samba 4 member server to work in a different subnet? My AD/DC is on subnet 10.40.11.0/24 and im putting an member File server at 10.4.16.2/24 But im having problem to join in DC with this member. I have other members in the same ad subnet and all of them are working well. Thanks! -- ------------------------------------------- Edson

Hi All, I know RHEL has bad press here but I'd like to share a different opinion (works for me) and maybe share some of my settings. BTW, Those views are my own, not those of my employer. I run a small AD at home. The setup is as follows: - two AD DCs (RHEL7.6 KVM virtual machines + Samba 4.8.7 rpms based on SPECs from TranquilIT/Fedora). - several Win10 laptops joined to the domain. -

Hello, I am attempting to debug an issue with my Samba configuration. It has been working fine, but we recently updated Samba from 4.6.x to 4.8.3 and are now seeing some issues authenticating. Most of our servers are still working fine after the upgrade, but one server is giving us issues. A little more environment info: The server is running Centos 7.1. Windows clients can connect OK. We are

Hi I tried googling and searching the archives, but I guess I don't know how to choose the best keywords to describe my problem. So, I'll ask here. I have a samba box (3.0.5) sharing 1 folder. This folder contains 2 subfolders; both have around 900 files on each. On my linux box (kde), I can use the smb kio slave and everything is as expected, I can see all the files on both