similar to: no attributes after following "Setting up a Share Using Windows ACLs"

Greetings. I have written a small tool called dosattr that might be very useful for samba administrators. It makes manipulation of DOS attributes stored in user.DOSATTRIB more convenient than get/setfattr(1). Check it out, it is available at http://stlman.fm.interia.pl/dosattr/ Please CC any replies, I am not a subscriber -- Best regards, >?ukasz<

On 12/30/2017 05:22 PM, Paul R. Ganci via samba wrote: > 1.) net ads leave -U administrator > 2.) Remove the machine entry on the 1st DC (used ldbedit) > 3.) mv /var/lib/samba /var/lib/samba-client > 4.) mv /etc/krb5.keytab /etc/krb5.keytab-client > 5.) samba-tool domain join 2nd DC I tried this procedure and it just doesn't want to work. I have this error: >samba-tool

Hello Rowland! The users and group are only on the AD, and there are only one entry on each user... In the Windows side all seems ok : but not the result of getfacl ... root at Samba4:/Fichiers# getfacl /Fichiers/SA/Nouveau\ document\ texte.txt getfacl : suppression du premier « / » des noms de chemins absolus # file: Fichiers/SA/Nouveau document texte.txt # owner: ciril # group:

Hi everyone following https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller#DHCP_with_dynamic_DNS_updates, on my samba dc i have installed the dhcp package and the samba-dhcpd-updateAUR package there are two unresolved errors that i cannot fix 1 -: Can't create new lease file: Permission denied 2 -: kinit for dynamic DNS failed can anyone offer any suggestions. #

Hi all, I'm afraid I'm back to my old issue of GPO permissions. I have two ADDCs providing an AD Domain (internal.stmaryscollege.co.uk (short-name 'SMC')). Servers are called 'ad-01' and 'tainan'. ad-01 is 'Version 4.0.10' and tainan is 'Version 4.1.0rc4' (the latest version in the package repos of the respective OSs (arch and gentoo)) I have

I have some hardware running CentOS 7 and Sernet Samba 4.7 that started out as a member server that I would like to make into a 2nd DC. However I am having trouble converting it because it seems I am not removing all the remnants of the client setup. What I thought I would have to do is this: 1.) net ads leave -U administrator 2.) Remove the machine entry on the 1st DC 3.) mv /var/lib/samba

Daniel R. Meigs wrote: > Thanks for your reply. The problem was having the computers in ou=Computers. > I put them in ou=People and the problem was solved. > > --Dan > Daniel: I deleted the following options from the smb.conf #ldap user suffix = ou=People #ldap machine suffix = ou=Computers But I left the options set in my smbldap.conf.

Hi Denis, thanks a lot! > you said that the zone is empty. It is not a problem per se but for some > time Bind-DLZ has been a bit more strict and ask for a NS record for > every zone. So you just have to create a NS field in your zone pointing > to one of your DC and you should be fine. Internal DNS does not have > this requirements. > > samba-tool dns mydc

On 04/05/2018 08:29 PM, Paul R. Ganci via samba wrote: > Back on February 28, 2018, I started a thread "User permissions of > profile/home directory lost" describing a problem occurring with my > wife's user account. Since that time the random problem has persisted > so I turned on some debugging. I have been able to determine that > somehow her account idmap is

On 11/06/19 11:49, Rowland penny via samba wrote: > On 11/06/2019 11:38, Sebastian Arcus via samba wrote: >> >> On 11/06/19 11:07, Rowland penny via samba wrote: >>> On 11/06/2019 10:34, Sebastian Arcus via samba wrote: >>>> I've just upgraded a Samba AD server to 4.10.2 a few weeks ago from >>>> 4.x (I'm afraid I'm not sure the exact

Back on February 28, 2018, I started a thread "User permissions of profile/home directory lost" describing a problem occurring with my wife's user account. Since that time the random problem has persisted so I turned on some debugging. I have been able to determine that somehow her account idmap is broken. Here is the entry for my wife's SID as found in the idmap.ldb file

On Tue, 26 Dec 2017 18:08:11 -0700 "Paul R. Ganci via samba" <samba at lists.samba.org> wrote: > I have a problem that is now becoming very annoying. Namely I have a > Centos 7 member server running Sernet Samba 4.7.4 for which > everything seems to work except gdm or ftp logins. On the linux > client it seems winbindd is set up correctly. For example (the data >

I have a problem that is now becoming very annoying. Namely I have a Centos 7 member server running Sernet Samba 4.7.4 for which everything seems to work except gdm or ftp logins. On the linux client it seems winbindd is set up correctly. For example (the data shown below has been sanitized): > getent passwd testuser2:*:3001108:3000513::/home/testuser1:/bin/bash

On Fri, 27 Jul 2018 21:25:04 +0000 (UTC) ray klassen via samba <samba at lists.samba.org> wrote: > so I had some time to follow this bunny trailand found that even > though all the other servers had no problems this one continued > to.Every so often a new computer couldn't connect and then it would > be all better after a net leave/net join. Net join would not work >

On 01/07/2020 09:03, Enrico Morelli wrote: > On Wed, 1 Jul 2020 08:43:37 +0100 > Rowland penny via samba <samba at lists.samba.org> wrote: > >> On 01/07/2020 08:36, Enrico Morelli via samba wrote: >>> On Tue, 30 Jun 2020 10:28:41 -0700 >>> Jeremy Allison via samba <samba at lists.samba.org> wrote: >>> >>>> On Tue, Jun 30, 2020 at

I'm still trying to plug into an existing authentication infrastructure with samba. It consists of two discrete systems, kerberos, and Active Directory. My first choice would be to have my samba service pass authentication requests to kerberos. something like security = domain password server = kerberos server But, I don't think thats possible. If anyone has done this, where all the

Hi everyone, I'm requesting your help about an issue i'm faced with since 2 weeks. I've setting up a Solaris Server (Solaris 10 Update 6) with zoning. On a zone I've enable the samba service (samba v 3.0.28). In my smb.conf, my auth section looks like that : workgroup = Mydomain netbios name = MyComputer server string = MyComputer security = ADS use kerberos keytab = true

On Tue, 1 Nov 2016 01:45:24 +0530 Pradeep Rawat <pradeeprawat85 at gmail.com> wrote: > I tried to use the smb.conf you mentioned but got same error. > We don't use Microsoft DNS (they just host underscore zones which > then gets transferred to *nix based DNS appliances) so is it required > to have the DC IP entry in /etc/resolv.conf? However, I tried adding > DC IP as

so I had some time to follow this bunny trailand found that even though all the other servers had no problems this one continued to.Every so often a new computer couldn't connect and then it would be all better after a net leave/net join. Net join would not work without -S <MyDC> in the command lineWhat I found out was that most net rpc commands such as net rpc testjoin would also fail

oops that was wbinfo -tP On Monday, 30 July 2018, 09:15:44 GMT-7, ray klassen <julius_ahenobarbus at yahoo.co.uk> wrote: thanks for your response. Obviously lmhosts is not part of the equation anymore. But I copied/pasted from something that worked to something that didn't( I thought of clarifying this in a following email but didn't) If there is no /etc/lmhosts I'm