similar to: ACL SHARE

correct is not much different, but you need a "correct" config.   now your config is simpley wrong. ( sorry )   This proves it. one question..          idmap config * : backend = rid          idmap config * : range = 100000-999999 can you write you "rid" to the samba AD.. No.        # - must use an read-write-enabled back end, such as tdb.   you need also : # idmap config

Hai Carlos, I suggest start here : https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Setting_up_a_Basic_smb.conf_File Which says.. # Default ID mapping configuration for local BUILTIN accounts # and groups on a domain member. The default (*) domain: # - must not overlap with any domain ID mapping configuration! # - must use an read-write-enabled back

Hello You're right. Configuration are correct, there is no middle ground :-D But do I change these settings, I will not have problems with IDS changes, and soon problems with permissions (since I changed ids) of the users? Or other problems changing it? Regards Em 27-06-2017 12:23, L.P.H. van Belle via samba escreveu: > correct is not much different, but you need a "correct"

On Tue, 27 Jun 2017 16:32:22 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Hai Carlos, > > I suggest start here : > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Setting_up_a_Basic_smb.conf_File > > Which says.. > > # Default ID mapping configuration for local BUILTIN accounts > # and groups on

Hello! From what I realized the problem is not in Samba, but in the way that ACL work, with mascara question. I did several tests: touch bla chmod 700 ls -l bla -rwx------ 1 USERX domain users 0 Jun 29 09:53 bla cp bla /home/QUALIDADELEIT getfacl /home/QUALIDADELEIT getfacl /home/QUALIDADELEITE/ getfacl: Removing leading '/' from absolute path names # file: home/QUALIDADELEITE/ #

But thats easy scriptable. ;-) I have my scripts always ready for that. This is why i run samba in AD mode and not RID. If you compair the AD backend disavantage Disadvantages: If the Windows Active Directory Users and Computers (ADUC) program is not used, you have to manual track ID values to avoid duplicates. The values for the RFC2307 attributes must be set manually. To RID Disadvantages:

Hello! I am following the how to https://wiki.samba.org/index.php/User_home_drives But even though there reported a process for User X does not access the home of Y User, this is happening root at fileserver:/srv/samba# getfacl home/ # file: home/ # owner: root # group: root user::rwx user:root:rwx user:administrator:rwx group::r-x group:root:r-x group:5007:r-x group:domain\040admins:rwx

Hi I have a share running on a domain member. My domain root user is linked to the domain Administrator (user map). When I go on windows to the share as Administrator I can access it. Then I change the acl settings. I give domain users access to the share. For some reason the changes are not visible on the unix system getfacl returns: root at dna:/data# getfacl /data/share/ getfacl: Removing

Hello everyone. I thought I had everything configured correctly but it seems not. I've got two servers. One is the AD DC and another that has been joined to the domain. This is the output I get first from the AD DC when I do a getent: root at dc1:/etc# getent group 'Domain Admins' AD\domain admins:x:3000004: root at dc1:/etc# getent passwd 'stephen'

> >>>> Run this : getfacl /home/users > >>> getfacl: Removing leading '/' from absolute path names > >>> # file: home/users > >>> # owner: root > >>> # group: A\\domain\040admins > >>> user::rwx > >>> user:root:rwx > >>> user:10512:rwx > >>> group::rwx > >>>

> > On the file serever: > > Collected config --- 2019-07-03-10:27 ----------- > > > > Hostname: srv > > DNS Domain: a.b.hu > > FQDN: srv.a.b.hu > > ipaddress: 10.0.3.15 192.168.0.8 > > ----------- > > Samba is running as a Unix domain member > > ----------- > > > > This computer is running Debian 10.0 x86_64 > >

hello, My 2nd issue is about acls which are added by "Domain users". May you help me to solve it again ? Concerning this issue, on my samba share, I set permissions for the share "groups" located on /var/datashared for "domain admins" (rwx) and "domain users" (r-x) /var]# getfacl datashared/ # file: datashared/ # owner: root # group: root user::rwx

I'm having trouble with my new fileserver, I can't make the shares viewable by windows clients. I had the same problems with the first file server I built and cannot remember what I did to "fix" it. I have gone through the page "Setting up a share using Windows ACL's" on the Samba Wiki ( https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs) but

:-| ls -lnd /opt/samba/var/locks/sysvol drwxrwx---+ 3 0 3000000 4096 Jun 16 13:56 /opt/samba/var/locks/sysvol Em 16-06-2017 13:38, Rowland Penny via samba escreveu: > On Fri, 16 Jun 2017 13:15:19 -0300 > "Carlos A. P. Cunha" <carlos.hollow at gmail.com> wrote: > >> OK, sorry, uncomment a line :-D >> >> Yes exist! >> >> ls -ld

Hi All, Recently Moved from windows file server to samba file server but still users are authenticating from windows ADS 2003 server I have a strange problem. smb.conf file config is bellow ############### START smb.conf file ################### [global] netbios name = AA-FTP workgroup = airarabia realm = airarabia.com server string = Samba File Server

Dear All I am facing a strange problem that I could not solve, so, maybe you can help me. Look at this situation: I created a new directory with those ACLs (through Samba using Windows XP) [root@server /home/smb/adm]# getfacl teste #file:teste #owner:1002 #group:1006 user::rwx group::rwx group:suporte:rwx group:administ:rwx mask::rwx other::--- [root@server /home/smb/adm]# getfacl -d teste

Hi- I am experiencing some odd behavior with ACLs with winbindd using Samba 2.6 on Debian Woody (kernel version 2.4.18). 1. I am unable to alter permissions from Win2K clients using the Properties->Security interface. Is this normal? I get the "Unable to save Permission Changes on new Folder. Access is denied." message. This occurs with all accounts, both privileged and

On Fri, 26 Jan 2018 14:18:53 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Fri, 26 Jan 2018 14:10:40 +0100 > Micha Ballmann <ballmann at uni-landau.de> wrote: > > > To set share windows permissions and windows acl i login on a > > windows 7 computer with the administrator user.|Open ||Computer > > Management and connect to the

Thanks for your reply Rowland. > The id ranges are what you choose, reading this may help: > > https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member#Setting_up_a_Basic_smb.conf_File > > >/Is there any working way of controlling those ranges, />/given idmap breaks stuff? / > What do you mean 'idmap breaks things' ? > Sorry, should have made it

Hi all, currently we have troubles with the constellation of Office 2007 / 2010 and samba 3.6.6 on Debian 7.5. I can open a Excel file only one time without a write protection. The File is protected on the second try. I can move and copy the file wihtout any Problems. If I move such a Excel File I can open it again for only one time without a write Protection. I already reseted and checked