similar to: DM 3.6.25 -> 4.x

On Wed, 30 May 2018 09:48:04 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 2018-05-30 um 09:21 schrieb L.P.H. van Belle: > > Hai Stefan, > > > > Yes, its always better to ask the list, that way everybody can > > learn from it. ;-) > > > >> Do you think I will have to rejoin it to the domain? > > No

Am 2018-05-30 um 09:21 schrieb L.P.H. van Belle: > Hai Stefan, > > Yes, its always better to ask the list, that way everybody can learn from it. ;-) > >> Do you think I will have to rejoin it to the domain? > No i dont think so. Good, I don't have the ADS-Admin-password (yet) ;-) I could ask them but for now it's better to not have to. > Please note, o dont

Am 2018-05-30 um 10:08 schrieb Rowland Penny via samba: >> We have backups on tapes everyday, that is part of my job as well. > > Make sure the backups contain everything but the OS, from my > experience, tape backups only contain some of the data. Whilst we are > talking about tape backups, hasn't anybody realised that tape backups > are so last century and from my

On Wed, 30 May 2018 16:03:30 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > We see that it is old ("SWAT", date) and ugly ... > > > # cat /etc/samba/smb.conf > # Samba config file created using SWAT > # from UNKNOWN (192.168.100.66) > # Date: 2012/07/23 14:38:02 It isn't that old;-) You wont be using swat again, it

Am 2018-05-30 um 15:56 schrieb Rowland Penny via samba: > If the last two lines are actually in your smb.conf on disk and you > want use the 'rid' backend, then set the something like this will work: > > idmap config DOMAIN : range =310000-40000 > idmap config DOMAIN : backend = rid > >> >> the two lines >> >> idmap uid = >> idmap

On Wed, 30 May 2018 15:26:37 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 2018-05-30 um 15:01 schrieb Rowland Penny via samba: > > > There are three main winbind backends, but only two are really used > > on Unix domain members, the 'ad' and the 'rid' backends. Which you > > use is really down to a simple

Am 2018-05-30 um 16:41 schrieb Rowland Penny via samba: > On Wed, 30 May 2018 16:03:30 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> We see that it is old ("SWAT", date) and ugly ... >> >> >> # cat /etc/samba/smb.conf >> # Samba config file created using SWAT >> # from UNKNOWN (192.168.100.66)

additional: the krb5.conf from the former admin, I assume it could or should be boiled down: # cat /etc/krb5.conf [logging] default = FILE:/var/log/krb5.log [libdefaults] ticket_lifetime = 24000 clock_skew = 300 default_realm = customer.INTRA kdc_timesync = 1 ccache_type = 4 forwardable = true proxiable = true [realms] DOMAIN.LOCAL = { kdc =

Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: > On Fri, 7 Sep 2018 19:09:37 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: >> But >> >> # net rpc rights grant "Domänen-Admins" SeDiskOperatorPrivilege -U >> "mydomain\administrator" >> >> fails >> >> also for

Am 03.01.19 um 15:29 schrieb Rowland Penny via samba: > On Thu, 3 Jan 2019 15:08:46 +0100 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> >> We are in the process of switching over shares from the old way of >> doing this to Windows ACLs: >> >> disable "valid users" "write list" etc >>

That domain member server worked fine for about 2 weeks until today. Somehow the DNS-record didn't work anymore, I did a rejoin and added some kerberos-related lines to smb.conf # 2 lines old winbind cache time = 10 winbind use default domain = yes # new lines dedicated keytab file = /etc/krb5.keytab kerberos method = secrets and keytab winbind refresh tickets = Yes created keytab,

what do I miss here: wbinfo -u / -g -/ -pPt works [2019/09/05 17:15:25.963590, 1] ../source3/librpc/crypto/gse.c:658(gse_get_server_auth_token) gss_accept_sec_context failed with [ Miscellaneous failure (see text): Failed to find cifs/SAMBA.noras.intra at NORAS.INTRA(kvno 54) in keytab MEMORY:cifs_srv_keytab (aes256-cts-hmac-sha1-96)] [2019/09/05 17:15:25.963681, 1]

here it is ---- [global] workgroup = all server string = Samba Server load printers = no security = user max log size = 200 time server = yes local master = no os level = 10 log file = /var/log/samba/log.%I printcap name = /dev/null netbios name = new07server-fst # log level = 2 acls:10

On Thu, 3 Jan 2019 15:46:24 +0100 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 03.01.19 um 15:29 schrieb Rowland Penny via samba: > > On Thu, 3 Jan 2019 15:08:46 +0100 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > > >> > >> We are in the process of switching over shares

Am 11.09.18 um 10:06 schrieb Rowland Penny via samba: > On Tue, 11 Sep 2018 09:54:32 +0200 > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > >> Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: >>> On Fri, 7 Sep 2018 19:09:37 +0200 >>> "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote:

We are in the process of switching over shares from the old way of doing this to Windows ACLs: disable "valid users" "write list" etc and set ACLs via Windows Explorer ... And I struggle. I am asking for a way to "start ACLs from scratch". I ran "setfacl -b -R" on the dir on the samba server and did a "chown -R root:10513" to hand it to

On Tue, 11 Sep 2018 09:54:32 +0200 "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > Am 07.09.18 um 20:07 schrieb Rowland Penny via samba: > > On Fri, 7 Sep 2018 19:09:37 +0200 > > "Stefan G. Weichinger via samba" <samba at lists.samba.org> wrote: > > >> But > >> > >> # net rpc rights grant

Hi all, I get troubles with samba3x server: samba3x-winbind-3.3.8-0.52.el5_5.2 samba3x-3.3.8-0.52.el5_5.2 samba3x-common-3.3.8-0.52.el5_5.2 Some times, users call and ask of any folder in any share sleep. Locked not _all_ share, only one of it's folder. In logs i don't see any errors(for time of user call, may be errors in log was some times before). I use

Hello, a short history, I am using samba 4 with Debian 9 from the repository, 2 days ago the server was broken, but I was copy all the /var/lib/samba directory to a safe place, then I was installed a new server with the same Debian and samba from repository, and stopped smbd, nmbd and winbind, unmask samba-ad-dc and finally copied all the directory from the old server to the new server and started

Good day. I have a problem with connecting Samba 3.5.5 and Windows 7. First of all I have added DomainCompatibilityMode and DNSNameResolutionRequired to windows registry. After that i tried to connect windows to samba domain, but without any results. And some time ago I see, that I can't access Samba shares with right login and password. Windows 7 diagnostik says that It can't find