similar to: Keep group on new created files

Thanks L.P.H and Rowland, I've just tested the L.P.H solution and after reboot I'm able to authenticate with the member server without problem. Is slow listing folders with much objects but works (maybe happened always). Here's my smb.conf: [global] workgroup = DOMAIN security = ADS realm = DOMAIN.COM server role = member server dedicated keytab file = /etc/krb5.keytab kerberos

Thanks Rowland. Yes, I use ACONFI as Workgroup but I always try to hide my domain name on lists (today i've failed :P) Thanks for your recomendations. I'll change it, and I'll disable the acl_xattr because I use the linux tools to manage the permissions (setfacl). Greetings!! 2017-10-30 12:44 GMT+01:00 Rowland Penny via samba <samba at lists.samba.org>: > On Mon, 30 Oct

On Mon, 30 Oct 2017 12:19:06 +0100 Daniel Carrasco via samba <samba at lists.samba.org> wrote: > Thanks L.P.H and Rowland, > > I've just tested the L.P.H solution and after reboot I'm able to > authenticate with the member server without problem. Is slow listing > folders with much objects but works (maybe happened always). > > Here's my smb.conf: >

Hello, I've a computer that has XP for compatibility purposes and is outside the domain. I'm trying to mount some shares that are on a Member Server with Samba 4.5 but always get an error saying that password is wrong. All other computers can enter to shares without problem and I'm sure that the password is OK because I can login on Windows 7 computer and even I've mounted a share

How can I get all the users who deleted the files and folders in the recycling folder, I have configured it and I delete folders with different users of the active directory but it only comes from a user, I send the complete configuration so that they can help. ---- # Global parameters [global] workgroup = SOPORTE realm = SOPORTE.LOCAL netbios name = ADSSERVER

Hai,   now realmd sssd and autofs are all not my cookies.. but..   i see 2 things. 1) you missing the CIFS spn. here is shows how to make them and extract them. https://wiki.samba.org/index.php/Generating_Keytabs  https://wiki.samba.org/index.php/Keytab_Extraction      2) for the smblcient try :  smbclient //server.domain.dom/escaner -U user -W DOMAIN.DOM -R host -k -d 3 -m SMB2 ....added

Hello, Sorry for take so long to answer, but I was not able to do the tests because the computer is in use and out of my office. Finally I've progressed in this topic with realmd, sssd and autofs, but now I'm locked on mounting shares from my member server. I'm able to use autofs and smbclient to mount and connect to sysvol share on my DC server, but when I try to connect to my

Thanks Rowland. I'll give a try to both things (WG and SPN). To be honest, I ask here because the sssd daemon is working as expected allowing the authentication of the machine to the domain, and the real problem is that I'm not able to access to a shared drive using a Kerberos authentication (cifs and smbclient) and i've thought that maybe was a misconfiguration on member server

Hello, El 20 oct. 2017 4:50 p. m., "Rowland Penny via samba" <samba at lists.samba.org> escribió: On Fri, 20 Oct 2017 14:57:42 +0200 Daniel Carrasco via samba <samba at lists.samba.org> wrote: > Hello, > > Sorry for take so long to answer, but I was not able to do the tests > because the computer is in use and out of my office. > > Finally I've

Dear Sirs, I try to configure expire plugin to delete emails older than 7 days from the Papelera folder, but I do not see any information recorded in the expires table, although there are emails that were copied before and after configuring the plugin. dovecot -n # 1.1.16: /usr/local/etc/dovecot.conf Warning: There is no way to login to this server: disable_plaintext_auth=yes, ssl-disable=yes,

Hi, I found that doing a wildcard search with doveadm doesn't expand the %d global variable when doing a wildcard search like: doveadm search *@domain ALL LARGER 10000k doveadm(root): Error: User listing returned failure doveadm: Error: Failed to iterate through some users In /var/log/dovecot.log: Nov 22 20:48:07 auth-worker: Debug: ldap: iterate: base=vd=%d,dc=domain scope=subtree

i've seen that is similar to your latest test. What about a gpresult -h result.html. The GPo is appplied to the user? Greetings!! 2017-11-30 13:29 GMT+01:00 Daniel Carrasco <d.carrasco at i2tic.com>: > I don't know if is relevant and maybe is the same as GPO that you've > created, but Ive a profiles folder with this configuration: > > [profiles] > path

Hello, I answer bellow. Thanks!! 2017-10-24 16:52 GMT+02:00 L.P.H. van Belle via samba <samba at lists.samba.org >: > Hai, > > I did a re-read of you thread. > > First. > If you use smblcient, with a samba installed, use -s > /path/alternative/smbclient.conf > I think that Samba is not installed on this client because I'm not using samba to join the domain.

Can you try with this systemd unit file. Restarting does not close all prosesses with that one. ( you need : ExecReload=/bin/kill -HUP $MAINPID ) Jessie used probely sysv and not systemd, which should explain why there are so many zombies. [Unit] Description=Samba AD Daemon Documentation=man:samba(8) man:samba(7) man:smb.conf(5) After=network.target [Service] Type=notify NotifyAccess=all

Hello, thanks for your response. I'm using samba_internal as DNS because I don't want to add bind to only relay the internal DNS. The hosts file is clean on srv2 DC (default localhost), and this is the srv1 hosts: 192.168.0.251 srv1.domain.com srv1 resolv.conf srv1: domain domain search domain.com nameserver 192.168.0.251 nameserver 8.8.8.8 resolv.conf srv2: nameserver

Hi, first of all i'm sorry for my english. i'm using sernet packages to keep updated my file server, but after the latest update it becames very slow listing and accesing to files... For example, a thunderbird profile from networks takes about 1 minute to load. Now the profile takes about 20 minutes and the program still loading... I've not changed any configuration on server and i

Hello, I'm trying to replace a Windows Server 2003 DC that has problems, with a Samba 4 domain with HA. The linux client server seems to works fine even when main DC/DNS server fails, but as always, Windows clients not... They are able to log in (maybe using cached credentials), but the GPO are not being applied... I've checked the sysvol folder and both are syncsynchronized and

Hello, I'm using a Samba 4 as domain server and I've a lot of Windows computers that mounts shared drives on another server through GPO applied by user groups. Is there any way to do something similar on a Linux box, or I've to use a local script? Thanks! -- _________________________________________ Daniel Carrasco Marín Ingeniería para la Innovación i2TIC, S.L.

Hello, I've compiled Samba 4.7 from repository using a Debian 9 machine and I've noticed that the system started to create zombie processes of samba: # ps aux |grep "Z" USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND root 502 0.0 0.0 0 0 ? Z 13:01 0:00 [samba] <defunct> root 1346 0.0 0.0 0 0 ? Z

Hai, Did you check the systemd units? ( not left overs from other versions? ) Is this a member of ADDC ? ) process shows [samba] so im asumming a member server. And what parameters are used, did you add --with-systemd ? and on debian DONT use : --with-system-mitkrb5 Debian used Heimdal kerberos ( centos/RH MIT ). Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba