similar to: Unable to set SeDiskOperatorPrivilege (again)

Hi Rowland, Those low numbers you refer to are in fact the standard numbers assigned to those groups, so I fail to see the problem. As for mapping Administrator to root, I believe that's entirely optional, rather than required. Under normal circumstances we don't use the domain Administrator account at all. We have a root account we use instead. In regard to winbind, we have never

On Wed, 24 May 2017 13:34:27 +1000 John Gardeniers via samba <samba at lists.samba.org> wrote: > There was a thread on this topic back in January and as far as I can > see it was never resolved. It has always worked for me, even when I used sssd. But there is no need to use sssd on a Unix domain member > # getent group "Domain Admins" > Domain

Hi Rowland, You say that winbind can do anything that sssd can, yet I've not been able to find winbind instructions similar to these for sssd: http://jhrozek.livejournal.com/3860.html Do you know of such instructions? More particularly, do you know how with winbind we can lock sudoers down to specific OUs? We need to do a lot more than basic authentication and simple file sharing. From

(Re-posting to list also.. Sorry forgot Cc. -Tom) Marc, Thanks for your help and clarifications. I was indeed addressing the domain controller (2012 R2) due to my misunderstanding. Addressing the request at the file server (Samba 4) to the file server fails too but with different errors. Rights list succeeds. $ net rpc rights list accounts -UDOMAIN\\Administrator Enter

On 25/03/15 19:40, Tim wrote: > Don't be scared and take the challenge! :-) > > Reduce your smb.conf to the minimum as seen in the member server wiki and try it again. It should work then. > > Am 25. M?rz 2015 14:47:16 MEZ, schrieb "Tom S?derlund" <tom.k.soderlund at gmail.com>: >> Tim, >> >> Thanks for the hint. Usermap for root applied,

Tim, Thanks for the hint. Usermap for root applied, locally made requests fail now systematically with "Could not connect to server <server address> Connection failed: NT_STATUS_LOCK_NOT_GRANTED" It is kind of improvement :) Random things scare me. -Tom On Tue, Mar 24, 2015 at 7:40 PM, Tim <lists at kiuni.de> wrote: > Hi Tom, > > have a look at this: >

Giving a domain user group privilege SeDiskOperatorPrivilege fails with NT_STATUS_NO_SUCH_PRIVILEGE. The domain is controlled by a MS 2012 R2 DC. Has this privilege been renamed or replaced with some other privilege? How to give the domain user group necessary rights for defining file share permission settings from MS environment? The RHEL 7 file server is running Samba 4.1.1-38 and the id

On 20 January 2016 at 06:43, Rowland penny <rpenny at samba.org> wrote: > On 19/01/16 19:34, Henry McLaughlin wrote: > >> I have sssd configured and working with my domain member server and I now >> wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins" >> group. When I execute the command it appears to disregard the domain name >>

On 20 January 2016 at 07:08, Rowland penny <rpenny at samba.org> wrote: > On 19/01/16 20:00, Henry McLaughlin wrote: > >> >> On 20 January 2016 at 06:43, Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>> wrote: >> >> On 19/01/16 19:34, Henry McLaughlin wrote: >> >> I have sssd configured and working

I am having trouble giving the Domain Admin group the 'SeDiskOperatorPrivilege' privilege on a member server. Running 'net rpc rights list accounts -UAdministrator' Results in this: Enter Administrator's password: BUILTIN\Print Operators No privileges assigned BUILTIN\Account Operators No privileges assigned BUILTIN\Backup Operators No privileges assigned BUILTIN\Server

root at aphrodite:/# net rpc rights list accounts -U'DOMAIN\administrator' Enter DOMAIN\administrator's password: BUILTIN\Print Operators No privileges assigned BUILTIN\Account Operators No privileges assigned BUILTIN\Backup Operators No privileges assigned BUILTIN\Server Operators No privileges assigned BUILTIN\Administrators SeMachineAccountPrivilege SeTakeOwnershipPrivilege

I have sssd configured and working with my domain member server and I now wish to grant the SeDiskOperatorPrivilege to the "MYDOMAIN\Domain Admins" group. When I execute the command it appears to disregard the domain name and grant the privileges to the group "Unix Group\domain admins" net rpc rights list accounts -U'MYDOMAIN\administrator' Enter

On 16/01/16 13:26, Henry McLaughlin wrote: > > > Kind regards, > > Henry McLaughlin > > 0411 444 363 <tel:0411%20444%20363> (Mobile) > > henry at incred.com.au <mailto:henry at incred.com.au> > > PO Box 329 > Romsey VIC 3434 > > On 15 January 2016 at 23:24, Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>>

Kind regards, Henry McLaughlin 0411 444 363 (Mobile) henry at incred.com.au PO Box 329 Romsey VIC 3434 On 15 January 2016 at 23:24, Rowland penny <rpenny at samba.org> wrote: > On 15/01/16 12:08, Henry McLaughlin wrote: > >> >> >> On 15 January 2016 at 22:28, Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>> wrote: >>

Hai, I've just read you howto, and its a very good start point. You may have to correct a few small things there, but imo pretty good yes. This : > chown root."domain admins" /SHAREPATH Is/should not needed. setacl -m g:"domain admins":rwx,g:"domain users":rx /SHARELOCALPATH ^^^^^^ you did mean setfacl ? But same, yes it works, and better then above, but

Inviato da Posta per Windows 10 >Da: Rowland Penny via samba >Inviato: lunedì 8 gennaio 2018 18:48 >A: samba at lists.samba.org >Oggetto: Re: [Samba] R: cannot list/access samba share from Windows client > >You are now solely using sssd for the authentication, you need to ask >on the sssd-users mailing list, either that or purge sssd and set up >winbind correctly. >I

Thanks for the rapid reply! I think the problem was in the server role options I’ve modified it in “server member” and now I’m able to list the shares under \\linuxserver from any domain user authenticated in a Windows pc AD member. But now 1. Execute computer management from a Windows domain member client as a domain admin user (run as com_spoleto\rossetti.admin that is a “domain admins” member

Thanks a lot.Problem Solved : Privilege -U'JASONDOMAIN\jason' Enter JASONDOMAIN\jason's password: Successfully granted rights. And : [root at printmah ~]# net rpc rights list accounts -U'JASONDOMAIN\jason' Enter JASONDOMAIN\jason's password: BUILTIN\Print Operators No privileges assigned BUILTIN\Account Operators No privileges assigned BUILTIN\Backup Operators No

On Thu, 25 May 2017 07:40:50 +1000 John Gardeniers via samba <samba at lists.samba.org> wrote: > Hi Rowland, > > Those low numbers you refer to are in fact the standard numbers > assigned to those groups, so I fail to see the problem. Yes, they are standard numbers, they are standard RIDs and as such have no place on Unix > As for > mapping Administrator to root, I

We’ve just recently moved over to Samba 4. It looks as if “force directory security mode” doesn’t work in samba 4. So I’m trying to setup the Windows ACLs on our groups share. I’ve been working on this for a few days. I’ve read over the docs, it seems like all the google links are purple and I’m still stuck. Hopefully someone here will have an idea. We’re running Windows 2008R2 for our AD