similar to: Files alway locked

Hi, we have a new problem with our samba server (version 4.4.12). We are using macOS (10.11 /10.12) and when we are connected to the samba server some users not seeing all files other users can see all files. These are not .* - Files. Our configuration of the smb.conf would be below. [global] netbios name = ID-175 security = ADS workgroup = HQ realm = HQ.LOCAL

Hi Rowland here is it: [global] netbios name = ID-175 security = ADS workgroup = HQKONTRAST realm = HQ.KONTRAST dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind trusted domains only = no winbind use default domain = yes winbind enum users = yes winbind enum groups = yes winbind

Hi Rowland, you can confirm your idea of this problem? OLIVER WERNER System-Administrator > Am 09.01.2017 um 17:52 schrieb Oliver Werner via samba <samba at lists.samba.org>: > > Hi Rowland here is it: > > [global] > netbios name = ID-175 > security = ADS > workgroup = HQKONTRAST > realm = HQ.KONTRAST > > dedicated keytab

the interface part is ok. eth0 has another IP as eth0:35 DCs show me the profiles unix authentication register user session in the systemd…. inheritable capabilities management OLIVER WERNER Systemadministrator Kontrast Communication Services GmbH Grafenberger Allee 100, 40237 Düsseldorf, Germany Fon +49-211-91505-500 Fax +49-211-91505-530 www.kontrast.de

i have now try some other options: - Fresh install of Samba AD Member - rejoin Member - change from winbindd to winbind But nothing helps. Also really slow time ls -lisa /daten/samba/ insgesamt 48 8222 4 drwxrwxrwx 8 postmaster.postmaster kontrast_ws_quack_fischer 4096 Mai 3 15:52 . 2 4 drwxr-xr-x 12 root root 4096 Jan 25 15:30 .. 145 12

Any errors atm in syslog and/or messages and the samba logs.   And the interval of the problem, still 5 days?       Gr.   Louis       Van: Oliver Werner [mailto:oliver.werner at kontrast.de] Verzonden: dinsdag 22 maart 2016 11:00 Aan: L.P.H. van Belle CC: samba at lists.samba.org Onderwerp: Re: [Samba] Problem with Winbind and Windows Clients   Hi,   now i have tested again

hi, we have tested last week our problem with change parameter server services = -winbindd +winbind but our member server get also the issue that the winbind lost user and group mapping for valid users. so for the test i have changed on our three DCs the parameter above. May i need to set this parameter on member server also? Oliver > Am 12.02.2016 um 11:30 schrieb L.P.H. van Belle

Ok, now my smb.con on DCs looks [global] workgroup = HQKONTRAST realm = HQ.KONTRAST netbios name = VL0227 server role = active directory domain controller idmap_ldb:use rfc2307 = yes interfaces = eth0:35 bind interfaces only=yes log level = 3 tls enabled = yes tls keyfile = /var/lib/samba/private/tls/key.pem tls certfile = /var/lib/samba/private/tls/cert.pem

Hai, Yes, only the DCs Change one, test and if all ok with you, change the others. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: Oliver Werner [mailto:oliver.werner at kontrast.de] > Verzonden: vrijdag 12 februari 2016 11:24 > Aan: L.P.H. van Belle > CC: samba at lists.samba.org > Onderwerp: Re: [Samba] AD Group lost from Winbind > > i need to change it

Hi, we have upgrade an Samba Member (DCs already upgraded) from Samba 4.1.17 to Samba 4.2.10. On DCs work fine after install winbind. But our member extremely slow. Connect to the Share takes 2-3 minutes and directory listing need 2-5 minutes. wbinfo -u takes around 20 seconds and will not return output wbinfo -g takes 3 seconds and show my groups id user.name takes 20 seconds and shows

Thats strange, my members dont show this the problem, only my DC's Can you post your smb.conf of the DC and one of your member servers. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: Oliver Werner [mailto:oliver.werner at kontrast.de] > Verzonden: vrijdag 12 februari 2016 10:16 > Aan: L.P.H. van Belle > CC: samba at lists.samba.org > Onderwerp: Re: [Samba]

Hello, the last two days i have problems with my AD group which is defined in share setting valid users Winbind looks to lost mapping of this group and so no user can connect to this share anymore. When restart winbind service mapping works again until mapping lost again. ls -lsa shows me in issue this: 2 4 drwxr-x--- 63 root 12001

On Mon, 3 Oct 2016 17:56:07 +0200 Oliver Werner <oliver.werner at kontrast.de> wrote: > hey, > > now after observe last changes on the weekend… i have also the issue. > > After 10 hours i can’t connect to the shares on my member server. > > On Log of DC i found this: > > [2016/10/02 20:35:45.601265, > 3]

OMG Louis thats look really good!!! After going to Samba 4.4.5 i do not had that issue since last 20 hours :o i will check it next hours (i hope days :D) OLIVER WERNER Systemadministrator > Am 04.10.2016 um 09:21 schrieb L.P.H. van Belle <belle at bazuin.nl>: > > Samba 4.5.0 ... go back to 4.4.5/4.4.6 > > Check the bug list, 4.5.0 has lots of bugs.. > > Greetz.

Hi, After some hours (maybe 8-12h) i can’t connect to my Samba Member (SMB://). After restarting winbind works fine again. We using 4.5.0 right now. I hope the following informations will be enough at this moment In samba log on DC i got the following Error: [2016/09/22 08:58:56.925190, 3] ../source3/smbd/vfs.c:139(vfs_init_custom) Initialising custom vfs hooks from [dfs_samba4]

so i add the pam yesterday and now after 10 hours no connection to member is possible. :( Same errors in logs i send yesterday OLIVER WERNER Systemadministrator > Am 03.10.2016 um 18:54 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Mon, 3 Oct 2016 17:56:07 +0200 > Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at

Hi When i would like to Join a new DC to Domain i got following error: samba-tool domain join hq.kontrast DC -Uadministrator --realm=HQ.KONTRAST --dns-backend=SAMBA_INTERNAL --option="interfaces=lo bond0:37" --option="bind interfaces only=yes" Finding a writeable DC for domain 'hq.kontrast' Found DC vl0227.hq.kontrast Password for [HQKONTRAST\administrator]:

my os is debian 8.3 win bind and samba are in version 4.1.17 > Am 12.02.2016 um 08:58 schrieb L.P.H. van Belle <belle at bazuin.nl>: > > Ok, same problem as im having.. > > What is your os running? > > >> -----Oorspronkelijk bericht----- >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Oliver Werner >> Verzonden: vrijdag 12 februari

Ok, possible solution. TEST DC1. Wrong id admin uid=10000(admin) gid=10000(domain users) groups=10000(domain users), 3000008(domain admins),3000005(denied rodc password replication group),3000009(BUILTIN\users),3000000(BUILTIN\administrators) TEST DC2. Correct. id admin uid=10000(DOMAIN\admin) gid=10000(DOMAIN \Domain Users) groups=10000(DOMAIN \Domain Users),10001(DOMAIN \Domain Admins)

This looks all good to me but the problem lays in the DC winbind code, not the member. You can try to witch back ( temperarly ) to winbind ( on the DC ) As i did, al least you get the correct id's back. ( for now ) For you this the change you need on the DC. server services = -winbindd +winbind Im recompiling the samba 4.3.3 from sid now atm, so ill test them out what happpens.