similar to: [OT?] 'negative' GPOs for local user?!

On Mon, 5 Mar 2018 12:52:52 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > I'm trying to define the GPOs on my new AD domain, and i'm a little > confused. > I've never worked with AD, but i've extensively used MLGPO, where i > can explicitly apply GPOs to users/groups. > > Two examples, of my confusion. > > 1) i've setup

I'm trying to run 'DVDSubEdit 1.51' with 'wine 1.2.2' on 'Ubuntu 10.04 desktop 32 bit'. After launching 'winecfg' I added 'DVDSubEdit' and chose 'Windows 98'. From a terminal I gave the following comands: utente at utente-desktop:~$ cd ~/.wine/drive_c/Programmi utente at utente-desktop:~/.wine/drive_c/Programmi$ wine DVDSubEdit.exe

Hi list, this might be related to my other mail with the subject "Domain trust and browsing users and groups problem". We have a forest trust of two domains. One domain in US (us.root.prv) running exclusively on Windows 2012 R2 and one in EU (spreadshirt.private) running exclusively Sernet Samba 4.8.3-11. Both domains run functional level "2008 R2". The trust validates

I have setup a new Samba Active Directory DC on Fedora 25 and samba- 4.5.8-1.fc25.x86_64, rebuild from src.rpm with dc option enable. This system (fedora-addc) is only an AD-DC. In the next days I will deploy another Centos 7 samba member server with standard samba-4.4.4 rpm (without dc enabled) and join it to Fedora AD-DC for manage data users. After install bind dns and samba new rebuild

Samba 4.8 (Louis debian repo), DM. Today i've had to recovery a deleted file in that share, that use 'vfs_recycle' modules: [Work] comment = Spazio di Lavoro Utente map acl inherit = Yes path = /srv/work read only = No store dos attributes = Yes vfs objects = acl_xattr recycle full_audit volume = Work full_audit:failure = none full_audit:success = mkdir rmdir read pread

I need to do some testing, but before to hit by head on a known wall, i ask here. My AD domain get used (via PAM/Winbind) to give access to some other dervice, most notably here dovecot. When password expire (or users change it) the MUA try the old password some times, then ask for a new password; users cleraly get scared, press randomly 'OK' or 'Cancel', but if they press 2-3

Dear UseRs, I need a litle help. I'm trying to read a .dat file of about 71 MB using read.fwf (as data recorded are in fixed width formatted data). R starts in reading data, but after some time, about 1/2 hour, I get this error: Error in .signalSimpleWarning("Reached total allocation of 510: see help(memory.size)" memory.size() 529880586 R is running under windows: sysname

Hi! I'm installing Debian Sarge with Samba 3.0.14a-3, OpenLDAP 2.2.23-8, smbldap-tools 0.8.7-4 ( I tried with 0.9.x version also) It isn't the first time I install a system like this but this time I encountered a problem never seen: during user insert I have an error because of smbldap-tools do not find indicated group (but group exists!). So: SambaTesting:~/install#

Samba 4.5 in AD mode, domain in ''beta'' stage. ;-) I've created homes for users following: https://wiki.samba.org/index.php/User_Home_Folders using 'POSIX' mode, eg using: [users] comment = Home Directories path = /home browseable = No veto files = /.mail/.inbox/.ssh/ root preexec = /etc/samba/createhome "%U" force create mode = 0600 force

Thanks for the help, however I don't think your suggestion applies in my case. On a fresh install of Samba 4.7.4 AD you cannot change a user password on a logged in PC through cntl-alt-del -> ChangePassword because the default MinAge is 1 days. I had to use the "samba-tool domain passwordsettings set --min-pwd-age=0" command to make the logged-on style of password change

On 02/06/2018 03:13 PM, Rowland Penny via samba wrote: > On Tue, 6 Feb 2018 15:03:16 -0400 > Robert Marcano via samba <samba at lists.samba.org> wrote: > >> Thanks for the information, to use a default GPO was a simple way to >> try to encourage someone to reproduce the problem. >> >> I already created new GPOs (this is a test domain) Using the default

On Tue, 6 Feb 2018 15:03:16 -0400 Robert Marcano via samba <samba at lists.samba.org> wrote: > Thanks for the information, to use a default GPO was a simple way to > try to encourage someone to reproduce the problem. > > I already created new GPOs (this is a test domain) Using the default > filter for a new GPO, "Authenticated users", creating a new group for

On 02/06/2018 03:20 PM, lingpanda101 via samba wrote: > On 2/6/2018 2:03 PM, Robert Marcano via samba wrote: >> On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: >>> On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >>>> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>>>> Hello, >>>>> >>>>> i have a testing

On Mon, 29 Apr 2019 11:21:55 -0700 Mason Schmitt <mason at ftlcomputing.com> wrote: > Thanks Rowland and Louis for your suggestions! > > I think I'll go with the samba-tool option, as presumably this will > keep up with schema changes as samba evolves. A few things that Louis didn't say about creating an OU with samba-tool, if it is an OU off the base DN, you only need

Hello, I am wondering whether I have all pieces together for a scenatio with two DCs and GPOs being used. Obviously the GPOs need to be replicated between DCs, I use "osync" as per the samba wiki (https://wiki.samba.org/index.php/Bidirectional_Rsync/osync_based_SysVol_replication_workaround). In that documentation the sysvolreset command is issued every time on the second DC after

Try: http://samba.bigbird.es/doku.php?id=samba:sync-sysvol I would recommend one way sync always from PDC FSMO owner, as this is the machine the GPOs get created in by default. And of course : http://samba.bigbird.es/doku.php?id=samba:sync-idmap.ldb Regards. LP On 5 Dec 2023 at 13:47 +0100, Jakob Curdes via samba <samba at lists.samba.org>, wrote: > Hello, > > I am wondering

On 02/06/2018 02:52 PM, lingpanda101 via samba wrote: > On 2/6/2018 1:42 PM, Robert Marcano via samba wrote: >> On 02/06/2018 01:44 PM, Micha Ballmann via samba wrote: >>> Hello, >>> >>> i have a testing environment, 2 DCs Ubuntu 18.04, SAMBA 4.7.4 - MIT >>> Kerberos (clean, not upgraded). I just wan to create/activating a >>> simple GPOs.

On 02/06/2018 03:24 PM, L.P.H. van Belle via samba wrote: > ok, > > do the following. > set ignore systemacl to yes on sysvol and netlogon. Added "acl_xattr:ignore system acls = yes" to both shares, restarted the server > > login as dom\administrator > computer manager, connect to dc. > share sysvol, goto share security, reset to defalts. > same for

Who am I to say this? I am only a lowly user and would-be admin, but it seems to me that one of the most useful features of an AD environment, GPOs, is not fully trust-able under Samba because of instability and ensuing fear, before and after each update, related to sysvol and who knows what. I still love you, though.

What about DC as primary domain controller? No Windows servers. Only clients. On Mon, May 29, 2017 at 5:19 PM, Rowland Penny <rpenny at samba.org> wrote: > On Mon, 29 May 2017 17:01:56 -0400 > Philippe Clérié via samba <samba at lists.samba.org> wrote: > > > Is it normal for a fresh installation of Samba to have empty Default > > Domain Controllers Policy and