similar to: Domain Administrator cannot map Samba Share from Windows 7

I have a NAS (Linux/Slackware 14.2) that is a domain member. "Normal" AD Windows users can map shared directories just fine without having to enter Credentials. If I try doing that with the domain Administrator it prompts me for the credentials, then fails. On the NAS I can get an "OK" status with ntlm_auth using the administrator credentials. I cannot 'su -' to the

On Thu, 22 Aug 2019 08:04:10 +0100 Rowland penny <rpenny at samba.org> wrote: > > On 21/08/2019 22:47, Mark Foley via samba wrote: > > I have a NAS (Linux/Slackware 14.2) that is a domain member. "Normal" AD Windows users can map > > shared directories just fine without having to enter Credentials. If I try doing that with the > > domain Administrator it

I have a Samba4 AD Domain with one of the file servers as a domain member. This file server host the main network shares for the domain. Currently, Windows users mapping this share are authenticated using their AD domain credentials. That all works just fine. What I want to do now is ALSO allow a user on a network host which IS NOT a domain member, and the user is not domain users to also

With help from kjhambrick at linuxquestions.org I did figure out how to authenticate from a Window domain member to a samba share using AD credentials. My smb.conf is listed below. I was able to map the share from Windows using domain credentials and create a file on the share. Here's my next challenge: All the UID.GIDs on the share (287G and +105K files) are currently the non-AD values of

On 21/08/2019 22:47, Mark Foley via samba wrote: > I have a NAS (Linux/Slackware 14.2) that is a domain member. "Normal" AD Windows users can map > shared directories just fine without having to enter Credentials. If I try doing that with the > domain Administrator it prompts me for the credentials, then fails. On the NAS I can get an > "OK" status with ntlm_auth

On 28/08/2019 04:34, Mark Foley via samba wrote: > On Thu, 22 Aug 2019 08:04:10 +0100 Rowland penny <rpenny at samba.org> wrote: >> On 21/08/2019 22:47, Mark Foley via samba wrote: >>> I have a NAS (Linux/Slackware 14.2) that is a domain member. "Normal" AD Windows users can map >>> shared directories just fine without having to enter Credentials. If I

Hello, does anyone has some Information about M$ Exchanges Fax. If you configure Exchange there is an Option about Fax. If you go there, you can say you have the Modem on your PC or you can say it is in the Network and you have to put in the Networkpath. It would be great to use this with Samba but at this time I think Samba doesnt support it. Maybe someone has some Information for me how I

Because of other issues using ADUC, I tried to remove a domain member using: > samba-tool group removemembers "Domain Computers" MARKA\$ Removed members from group Domain Computers As shown, it say it "Removed members", but ... > samba-tool group listmembers "Domain Computers" : LABRAT$ : OHPRSSTORAGE$ MARKA$ : COMMON$ : listmembers still shows the computer

I wanted to follow up to the list in hopes it will help others with similar configuration. Per previous posts -- OS: CentOS 7.153 Samba: Version 4.1.17-SerNet-RedHat-11.el7 Samba provisioned to act as: AD DC following Samba Wiki: Samba AD DC HOWTO Samba Internal DNS daemon deployed. 1. Disable selinux. Unless you have a solid understanding of how to configure it for your environment, please

Hello, at my work we are migrating from samba 3.6.24 on gentoo + openLDAP to Windows Server 2012 AD DC + Samba 4.1.6 Ubuntu Member server for file sharing. Our old configuration ignores domain prefixes when logging on to shares i.e. I just need to type user instead of SAMDOM\user when accessing share from windows machines. The Windows DC behaves like this too, but samba 4 does not. Is there any

Hello samba team ! I have some NFS4 exports managed by a Samba's Kerberos realm. All the standard user accesses work fine. I try now to setup an NFS4 root access to administer the share from another server (the two host are DC, one PDC and one SDC). But I have trouble understanding the kerberos/principals layer. ------------ Actually I do ------------- -> on the server I create an nfs

>From your Global config I see no IDMAP settings. You need that for Linux to recognize your ad users. See my blog top post for example: Monklinux.blogspot.com Try my configuration, should work perfectly. Soz 4 short reply, typing on phone. Lemme know if it works. Note, pay attention to section under installing samba. On Sep 19, 2017 22:19, "Jamie McParland via samba" <samba at

That is what I did: > ./samba-collect-debug-info.sh? > kinit: Client 'Administrator at SAMDOM.EXAMPLE.COM' not found in Kerberos database while getting initial credentials? > Wrong password, exiting now.? On 15. August 2019 at 18:05:54, Rowland penny via samba (samba at lists.samba.org) wrote: On 15/08/2019 16:57, Alexander Harm via samba wrote: > Sorry, am not used

On Thu, 2 Aug 2018 13:16:26 -0400 pisymbol via samba <samba at lists.samba.org> wrote: > On Thu, Aug 2, 2018 at 1:11 PM, Eric Altman via samba > <samba at lists.samba.org > > wrote: > > > > > It’s just that the mount has read-only access despite the file > > ownership and modes being set to give full read-write? > > > > > That is almost

Hai Baptiste, I re-checked my setup and your totaly correct. I can not enter the nfsV4 mounted directory as root. What i've added in idmap.conf Is this : Domain = your_DNS_domain.tld [Translation] Method = nsswitch And i found this link. http://serverfault.com/questions/526762/root-access-to-kerberized-nfsv4-host-on-ubuntu im testing this now. Greetz, Louis >

hi all, I have been troubled by this problem for a long time and really hope that someone may help by giving suggestions. I have setup Samba 2.0.5 on a "Digital" Tru64 as a file server. When I want to map a network drive with win95 or 98 everything is alright. If I use nt 4 (SP5) then the computer does not find the networkpath. I have also setup Samba 2.0.4b on my machine. The

On 27/11/2019 11:03, S?rgio Basto via samba wrote: > Sorry I meant man idmap_ad. But checking again man is equal of > https://wiki.samba.org/index.php/Idmap_config_ad in EXAMPLES of man > page [1] > > Examples don't mention netbios name ... I did [2] which instead use > workgroup I used netbios name and it is working but still don't know > why or even if it correct

Sorry, am not used to a list that has real sender addresses? Samba is configured with internal DNS. # /etc/krb5.conf [libdefaults] default_realm = SAMDOM.EXAMPLE.COM dns_lookup_realm = false dns_lookup_kdc = true # /etc/ldap/ldap.conf? TLS_CACERT /etc/ssl/certs/ca-certificates.crt TLS_REQCERT allow # /etc/resolv.conf domain samdom.example.com search samdom.example.com nameserver

Hi Rowland, thanks for your suggestions. I have read and re-read the Samba docs to try and understand where I went wrong here. I added the uidNumber and gidNumber exactly as per your comments and that seems to improve the situation markedly. I can now at least see that the share exists from SAMDOM\stephenellwood which wasn't possible before. File access is now possible from

Hi Rowland, I made the change you suggested to auto refresh kerberos. It didn't seem to fix the issue unfortunately, even after a machine restart. Following your line of reasoning that it is a Kerberos issue, I then tried to grab a new kerberos ticket on the server in question which appears to fail though. Perhaps this gives some further insight? pi at fs1:~ $ kinit administrator at