similar to: GPOs not Working!

On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: > On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >> Hello, >> >> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >> Kerberos (clean, not upgraded). I just wan to create/activating a >> simple GPOs. >> >> # Interactive logon: Do not require CTRL + ALT + DEL -> activate

now, im on a phone and no browser, so limit help. first thing i see.   CN=Bj”rn <User>,CN=Users,DC=rootrudi,DC=de Bj”rn ?  is your system set to utf8? i dont know, but this does not look right. i see, wifi? yes, try utp. langsame Verbindung:500 kbps and do try the ignore systemacl.  that solves the user/group “nt authority\system” problems the easy way. greetz Louis Op 6 feb. 2018

On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: > On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>> Hello, >>>> >>>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>>> Kerberos

Thanks for help, this is a new domain controller without any modifcations, except one GPO. I have the "Default Domain Policy" and created an addtional GPO, named "test_something". Both are linked at the top of the domain. I configured at the "test_something" GPO: # Interactive logon: Do not require CTRL + ALT + DEL -> activate # Interactive login: Do not

On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: > On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>> Hello, >>> >>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>> Kerberos (clean, not upgraded). I just wan to create/activating a >>> simple GPOs.

On 02/06/2018 03:20 PM, lingpanda101 via samba wrote: > On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: >> On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >>> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>>> Hello, >>>>> >>>>> i have a testing

On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: > Hello, > > i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT > Kerberos (clean, not upgraded). I just wan to create/activating a simple > GPOs. > > # Interactive logon: Do not require CTRL + ALT + DEL -> activate > > # Interactive login: Do not displa last user name -> activate These

hai Micha,   The why is explained here. https://wiki.samba.org/index.php/The_SYSTEM_Account  Which in the end has todo with SID_BOTH, one sid for a user and group, linux does not understand that correctly.   with : acl_xattr:ignore system acls = [yes|no] When set to yes, a best effort mapping from/to the POSIX ACL layer will not be done by this module. The default is no, which means that Samba

Hello, i installed a SAMBA 4.7.4 AD Server on Ubuntu 18.04 (BETA). SAMBA4 was compiled from source. For MIT Keberos i also installed libkrb5-dev and krb5-kdc and compiled with the "--with-system-mitkrb5" option. The installation runs pretty good (some dependencies problem, solved manually). But now im not able to test kerberos: # kinit administrator --> kinit: Cannot find KDC

Hello, im trying to setup a share using windows acls. I followed the step ins https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs but hanging at "Adding a Share" # mkdir -p /srv/samba/Demo/ # chown root:"Domain Admins" /srv/samba/Demo/ *--> chown: ungültige Gruppe: »root:Domain Admins“* # net rpc rights list privileges SeDiskOperatorPrivilege -U

I tried this. When im creating a folder directly on server, the sticky bit is working. But it does not work when im doing it from windows. # ls -l drwxrws---+ 7 root stickygroup 4096 Mär 5 14:44 00_stickygroup/ Best regards Micha Am 05.03.2018 um 14:15 schrieb Michael Wandel: > IMHO you can use the posix sgid bit.

Hi, i have a share called [home]. Designed like described here: https://wiki.samba.org/index.php/User_Home_Folders#Creating_the_Home_Folder_for_a_New_User. First i have no problems but i want to enable a trash folder for each user. At this time i have about 8000 home directories. The directorys are subfolders from [home]. Is it possible to enable a trash folder inside the home directory

Hello, i've configured a new freeradius server for WLAN authentication. My radius server is a domain member on my samba 4.7.12 ADDC. For my mschap configuration i followd this guide: https://wiki.samba.org/index.php/Authenticating_Freeradius_against_Active_Directory. The auth works! I can configure ntlm_auth in two differents way? ntlm_auth = "/path/to/ntlm_auth*--allow-mschapv2*

ok, do the following. set ignore systemacl to yes on sysvol and netlogon. login as dom\administrator computer manager, connect to dc. share sysvol, goto share security, reset to defalts. same for folder. goto gpo manager, klik on every gpo object, if one has wrong acl, you get a message to reset it, thats ok. now never samba-tool sysvol reset if you do, you might need to set share/file

Hello, from SAMBA 4.9/4.10 there was a big change regarding CTDB. Does anyone have an example configuration, how to configure a CTDB cluster from version 4.10? Is there someone who run CTDB with SAMBA 4.10? Best regards Micha

I have two DC (DC1 and DC2) Samba 4.2.1. In DC1 has 2 pastes in sysvol\ empresa.com.br: Policies and Scripts. But in DC2, the Policies paste there isn't. Is this normal? When I have executed gpresult /r command in Windows client, I verified that DC2 is used to apply GPO for the workstations too. Regards, Márcio

Hi again, First, i revert to a snapashot with samba 4.7.7 and upgraded it to 4.7.8. I got no issue with my settings and "testparm" outputs as expected. Next i tried again upgrade to samba 4.8.3. But i got the same error like an email before. Yes i guess its a problem that "tesparm" cant read the registry. When im removing "include = registry" and add my global

On Fri, 18 May 2018 14:44:09 +0200 Micha Ballmann via samba <samba at lists.samba.org> wrote: > Is it possible to Mix Samba 4.8.2 with Samba 4.7.7? Yes > > I have three domain controller (up to 10000 users) running on Samba > 4.7.7. > > I want to kill all samba processes of Dc1 and do all necessary steps > for an upgrade to version 4.8.2. Dc2 and Dc2 still running

Hi! For the files that are in the share Regards; On 18-07-2018 18:09, Micha Ballmann wrote: > You mean your Samba shares? For fure. > > Regards > > Am 18. Juli 2018 22:54:28 MESZ schrieb Carlos via samba > <samba at lists.samba.org>: > > Hi! > > I would like to know if I can use GlusterFS to replicate the files in my > samba domain member?

I found out, when im creating a complete new share, access via computer management - per default there is a share permission set with full controll to "everyone". When im trying now to set ACLs it is working. But when im deleting "everyone" and set Domain Admins and/or Unix Admins and give them full controll, im no more able to set ACLs! Micha Am 28. Januar 2018 12:00:07