similar to: Can't create/update Group Policy in Samba 4.6.5

Hi Miguel, Can I remove Unix Attributes of the Administrator user and other administrator groups (set up NIS Domain to "none") ? I have given SeDiskOperatorPrivilege to "Domain Admins" group. *net rpc rights grant "EMPRESA\Domain Admins" SeDiskOperatorPrivilege -U "EMPRESA\administrator"* Enter EMPRESA\administrator's password: Successfully granted

Hi Rowland Now, I set up my PATH adding /usr/local/samba/bin:/usr/local/samba/sbin: echo $PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/samba/bin:/usr/local/samba/sbin ls -l /usr/local/samba/var/locks/ > total 1384 > -rw------- 1 root staff 421888 Mai 15 21:57 account_policy.tdb > -rw------- 1 root staff 528384 Mai 15 21:57 registry.tdb > -rw-------

Hi Louis I have moved "empresa.com.br" folder to /root. After I run samba-tool ntacl sysvolreset, but some errors appear: samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime): uncaught exception - (-1073741823, 'Undetermined error') File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 176, in _run

Hi, I'm using Samba 4.6.5 and I have installed as follows: wget -c https://download.samba.org/pub/samba/stable/samba-4.6.5.tar.gz tar -xzvf samba-4.6.5.tar.gz cd samba-4.6.5 ./configure --enable-debug --enable-selftest make make install It seems that is working properly, however I can't create or update GPO with Windows Group Policy Management tool. When I try, "Denied

Hai, the steps are (basily) good, only this one can be better.   >To solve, I executed the following commands: >Chown 10060: 30028 -R sysvol >Chmod 775 -R sysvol   If you use acl_xattr:ignore system acls = yes on the sysvol share, you must configur the share from withing windows.  (* or use smbcalcs , but i never used it. )   This is what i see:   ls -al  sysvol total 24 drwxrwx---+ 3

On Sun, 2 Jul 2017 11:30:32 -0300 Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote: > Hi, > > I'm using Samba 4.6.5 and I have installed as follows: > > wget -c https://download.samba.org/pub/samba/stable/samba-4.6.5.tar.gz > > tar -xzvf samba-4.6.5.tar.gz > > cd samba-4.6.5 > > ./configure --enable-debug --enable-selftest Why ? you

Hai, I think this is an old bug.. ( pretty sure about it ) And i suggest to dont change anything except smb.conf. Your trying to use kerbereros usersname. wbinfo -a marcio at EMPRESA.COM.BR Enter marcio at EMPRESA.COM.BR's password: And you using: winbind use default domain = yes This is and old bug somewhere in 4.5/4/6 i believe. Only change these, yes only slows down you

On Thu, 6 Jul 2017 02:14:42 -0300 Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote: > Hi, > > My DC doesn't know domains users and groups by name, only by uid/gid. Sounds like you haven't set up the libnss_winbind.so links or /etc/nsswitch.conf > > Ex: chmod mike:'EMPRESA\unix_admins' test > chown: invalid group mike:EMPRESA\\unix_admins

Hi Rowland > My DC doesn't know domains users and groups by name, only by uid/gid. Sounds like you haven't set up the libnss_winbind.so links or /etc/nsswitch.conf I had not installed Winbind, but I installed it now. (winbind, libnss-winbind and libpam-winbind packages). I configured /etc/nsswitch as below: passwd: compat winbind group: compat winbind shadow:

For got to mention. If you dont have any certificates setup and not using tls. Set on the DC's. ldap server require strong auth = allow_sasl_over_tls Or ldap server require strong auth = no And you may need to enable NTLM v1 on the proxy also, but thats why i recommends kerberos auth. SO preffered imo, try to avoid any NTLM to improve your security. For NTLM v1 then you

He did not test : getent passwd username result ? He did test : getent passwd result ok He could test with : wbinfo --own-domain Results: NTDOM And this should show: wbinfo --all-domains Results: BUILDIN HOSTNAME NTDOM Im guessing, the last one wil fail. Things to check. samba idmap setup. nsswitch.conf idmap.conf pam setup. So best option lookt to me upgrade to 4.6.5 and run

Hai Marco, What i did, i added 1 real linux user in the group unix group lpadmin. With this user i configured the webinterface and set kerberos auth. ( i did already setup ssl things like that for the webinterface. ) Get this file. https://raw.githubusercontent.com/thctlo/samba4/master/samba-check-SePrivileges.sh This shows you all groups and privileges that are setup. You should see

Sorry, my error, you need an "empty domain" directory in sysvol then reset. Then copy the rights, re-apply them .. Etc. And good point Rowland. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Rowland Penny via samba > Verzonden: dinsdag 4 juli 2017 21:51 > Aan: samba at lists.samba.org >

Hi, My DC doesn't know domains users and groups by name, only by uid/gid. Ex: chmod mike:'EMPRESA\unix_admins' test chown: invalid group mike:EMPRESA\\unix_admins if run with GID work properly chmod mike:30059 test drwxr-xr-x 2 root 30059 4096 Jul 6 00:17 test There is unix_admins group wbinfo --gid-info 30059 EMPRESA\unix_admins:x:30059: In File Server Domain Member

Hai, In reponse to the why i recommend that. Since this is a "windows" only share, i recomment to set it up for that usage, with results in better matching for windows rights. Resulting in better working policies. The current POSIX rights did not match to my needs and resulted in inconsistant policies. This is why i use these for profiles and sysvol. And this is my setup order:

On Wed, 7 Jun 2017 17:01:03 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > He did not test : > getent passwd username > result ? > > He did test : > getent passwd > result ok > > He could test with : > wbinfo --own-domain > Results: > NTDOM > > And this should show: > wbinfo --all-domains > Results:

Hi, I have 2 DC (both with Samba 4.6.5) and apparently the secondary DC is receiving information of the main DC, according to information below: root at dc2:/root samba-tool drs showrepl Default-First-Site-Name\DC2 DSA Options: 0x00000001 DSA object GUID: b3061034-9e5c-452d-a215-43e8a83b90ec DSA invocationId: 4010374c-e457-49ed-9b6d-24c6e40eb737 ==== INBOUND NEIGHBORS ====

Hai, I've done some testing and i compaired the outputs of a original debian and own package. Same result, no errors, everything, i did test 4.1.17 4.5.8 4.5.12 4.6.6 and 4.6.7 servers. Again same result everything ok. uhh. So what happend then... Now i tested again but typed a wrong password.. And,, yes, it was a typo in my password, .. (oeps) sorry for the noise. Now bit more testing,

Hai, Please read : https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member And adjust your smb.conf, start with a minimal smb.conf then join and then add optional extra settings. You current config is incomplete. I suggest you carefully read this chapter.: Choose backend for id mapping in winbindd > Host is not configured as a member server. > Invalid configuration.

On 23.8.2019 17.19, Randy Bush via dovecot wrote: > FreeBSD psg.com 11.3-RELEASE-p3 FreeBSD 11.3-RELEASE-p3 > dovecot 2.3.6 (7eab80676) (latest from binary package system) > > symptom: multiple imap4s users complain that they can not fetch mail > > stopping and restarting dovecot is a temporary workaround > > dovenull 3713 0.0 0.0 11036 6816 - I 02:27